Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3757058EBE8D11EFA364B579762E951A.roa
File: 3757058EBE8D11EFA364B579762E951A.roa (raw, json)
Hash identifier: l8GYVVyk7ncF/1DEwn6+40sz0Hdb8BKRvRJphNBV6jg=
Subject key identifier: 6F:7E:6D:61:39:7A:F9:F7:C7:E1:C9:A3:38:38:DA:6F:48:41:A4:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E6DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3757058EBE8D11EFA364B579762E951A.roa
Signing time: Fri 20 Dec 2024 04:45:20 +0000
ROA not before: Fri 20 Dec 2024 04:45:16 +0000
ROA not after: Wed 10 Dec 2025 04:45:16 +0000
asID: 984
IP address blocks: 45.206.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59102 (0xe6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 04:45:16 2024 GMT
Not After : Dec 10 04:45:16 2025 GMT
Subject: CN=6764f660-1e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:b1:9b:4b:a8:4a:7d:02:4d:35:9d:1a:60:
4f:63:10:16:36:34:26:dc:53:65:23:f6:eb:8a:48:
59:cb:18:8f:ed:e1:ea:fb:b1:ca:81:d4:2b:fe:4f:
fb:d1:d8:27:78:de:4f:87:dc:ac:1f:2f:cf:02:3f:
92:e0:1e:90:70:9d:39:d4:3d:e0:fc:e4:2d:be:10:
e4:63:a1:21:e0:4a:6e:24:1d:ea:22:0c:5e:1f:c8:
40:37:08:aa:a0:39:8a:94:e2:29:b2:f2:a5:86:33:
bb:4a:07:24:c4:97:6d:c6:ac:e5:ad:b1:7e:c6:29:
b2:ed:93:95:31:09:12:46:e9:c4:a7:87:0b:48:41:
b1:d9:ab:91:85:25:a6:86:a3:30:8a:39:24:72:bd:
ba:8e:04:61:19:68:8a:74:17:f7:b8:6a:c2:b8:74:
e3:e3:37:3d:dc:4f:82:94:46:83:93:3c:c5:5b:70:
19:b0:3a:37:11:a0:5e:b2:d8:27:67:60:26:f8:5a:
d5:8e:e9:24:5c:4d:c8:c4:b4:cb:98:46:be:3e:1c:
bb:52:8e:d8:4b:c8:ec:96:26:fb:95:ef:c3:3a:bd:
20:5f:d1:85:6e:c5:dc:e6:33:a0:df:44:a2:dc:56:
e3:29:c7:57:de:6a:08:f9:d3:06:ae:a0:de:e7:50:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7E:6D:61:39:7A:F9:F7:C7:E1:C9:A3:38:38:DA:6F:48:41:A4:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3757058EBE8D11EFA364B579762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.242.0/24
Signature Algorithm: sha256WithRSAEncryption
98:4f:aa:d2:09:f1:c2:42:e3:96:88:4c:e1:66:95:48:ba:06:
b2:c9:5a:c0:34:21:02:30:9f:36:6a:49:6e:b0:ed:17:0f:a6:
bc:83:3e:44:28:d4:63:aa:ec:28:ac:c8:3e:c7:a7:42:cc:73:
ef:6a:8b:7c:0d:e3:2c:0b:e2:e6:43:ff:c2:8b:15:b8:df:4c:
e3:0b:73:a0:bf:9c:b4:68:59:2a:9e:b2:00:b1:47:95:ed:43:
3d:0b:ca:d8:99:c0:10:0f:60:2a:49:27:0d:bf:a8:df:d2:e1:
55:5d:d6:d6:30:3a:a4:34:ca:92:a2:e9:9f:48:e7:04:84:24:
3d:e7:84:5d:fe:a0:46:f0:3f:89:86:27:24:54:ce:f8:8c:fe:
9c:dd:20:d3:fe:c7:63:6e:ae:9a:45:31:41:b5:ac:51:2f:c7:
c2:24:83:90:db:6e:f3:0a:9e:ab:dc:14:a9:07:cc:33:71:7e:
b2:7b:3a:91:37:6a:3b:c3:3a:1c:96:a1:b0:79:e4:5a:fc:8c:
12:fb:f4:e3:02:ab:bb:2f:c9:fc:66:56:d2:e5:6c:1b:d7:b4:
bc:05:05:85:29:51:5c:c7:b2:f4:c5:c1:07:52:78:2d:28:74:
d6:08:9e:50:41:f1:d3:c7:17:ff:56:16:7d:9c:35:3d:e7:e2:
59:41:47:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:00 2025 by rpki-client