Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34A32DDEC39411EF99E0AF46762E951A.roa
File: 34A32DDEC39411EF99E0AF46762E951A.roa (raw, json)
Hash identifier: LZG4tR7yDZEzdCf+ywdM6deINgzTiChptnt4EdVLLNE=
Subject key identifier: BD:74:BD:88:5B:95:A1:03:02:8C:AA:27:BC:3D:A3:5B:8E:E0:19:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34A32DDEC39411EF99E0AF46762E951A.roa
Signing time: Thu 26 Dec 2024 14:17:58 +0000
ROA not before: Thu 26 Dec 2024 14:17:54 +0000
ROA not after: Sun 12 Dec 2027 14:17:54 +0000
asID: 17561
IP address blocks: 45.196.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60685 (0xed0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 14:17:54 2024 GMT
Not After : Dec 12 14:17:54 2027 GMT
Subject: CN=676d6596-efee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:6c:79:68:3f:36:c0:bb:a7:c8:9b:3e:04:
6d:df:bd:04:12:60:02:70:6f:02:1d:b2:bf:03:f6:
74:34:1f:12:c9:08:3b:d7:0a:3c:0e:ec:14:aa:6c:
7c:36:8c:72:54:36:86:d6:63:13:5a:50:b5:b8:16:
79:a9:8d:f5:1e:bf:a9:79:9e:f5:e1:b7:7c:04:e1:
15:ed:4b:c8:97:81:79:93:87:2c:a8:f2:b4:54:6a:
ba:7a:9f:e6:c7:3f:9d:ff:9c:eb:e1:7b:e8:1f:f7:
73:5a:22:44:1d:94:6d:aa:cd:35:9b:ba:4d:9e:f1:
db:53:9b:59:10:02:9b:6a:fe:2f:aa:85:ff:1e:8d:
5b:e6:eb:aa:ca:f2:aa:65:a2:43:de:ea:60:84:c1:
44:67:6b:3e:b9:cf:99:0f:5e:2b:c2:6e:61:31:4d:
be:a0:da:02:83:80:57:03:d2:36:90:48:56:26:0f:
9a:44:09:c9:15:77:fd:62:26:6c:65:87:18:0a:94:
33:7e:6e:ae:f6:df:1d:f9:5c:de:9d:0b:f6:b5:bc:
0f:9f:ca:67:cc:b2:92:f1:a0:9b:6b:58:37:ea:1b:
f8:a5:5f:b8:09:4b:fc:88:75:d0:bb:58:ec:4f:85:
d7:91:18:3e:fc:7f:fa:ae:1a:71:a9:d2:1a:0c:be:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:74:BD:88:5B:95:A1:03:02:8C:AA:27:BC:3D:A3:5B:8E:E0:19:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34A32DDEC39411EF99E0AF46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8e:50:39:c3:c7:2f:2b:c9:27:05:a0:79:af:51:ca:89:39:
fa:27:28:76:96:55:c0:58:ee:58:12:b8:c2:e1:ce:21:80:ac:
b3:f5:5d:3d:31:b9:8f:50:50:d1:ce:9e:3a:d8:a6:a1:d8:92:
00:5d:87:06:61:b8:5c:a8:44:98:7c:61:87:84:b5:6b:a7:d2:
0b:19:7f:5f:1f:d3:4c:a0:2e:46:33:f1:90:ba:1f:4c:17:dd:
c1:93:a7:cb:ed:a4:5d:b3:d2:be:f8:66:af:5a:6f:40:b1:60:
e3:f8:af:91:dd:df:c9:4a:66:8f:d7:9c:32:c8:c8:9b:5a:8c:
bf:41:6e:cc:96:2e:4d:d4:56:44:b1:d5:eb:1d:45:4a:31:d1:
d3:41:9b:c1:46:09:35:c4:9a:2b:14:36:25:d7:a8:ba:26:5b:
79:09:62:13:98:a3:51:17:18:1e:3e:bc:c6:60:c3:e9:8a:3e:
27:d0:fd:e6:02:97:8a:92:b6:a9:3c:1d:b5:79:4a:a4:a5:ff:
8f:5a:a0:a1:92:19:da:e2:d6:50:26:81:f6:d0:48:20:1c:5a:
35:f2:c9:28:62:61:ce:9b:d8:56:3d:07:7b:74:0a:d2:d8:a0:
59:11:bc:d8:97:23:cb:e1:08:5c:d1:5b:7e:d3:7f:81:43:85:
b0:ec:e7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:28 2025 by rpki-client