Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D0438BEBDBE11EFAB4FE364762E951A.roa
File: 3D0438BEBDBE11EFAB4FE364762E951A.roa (raw, json)
Hash identifier: GWwELcBHfth0vKXlByEnoavgVyqK6iG0ksaRj+xcOlA=
Subject key identifier: E8:A7:84:87:2F:CD:73:4A:1B:04:81:D2:AD:B6:9B:2C:B2:BB:76:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E559
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D0438BEBDBE11EFAB4FE364762E951A.roa
Signing time: Thu 19 Dec 2024 04:03:44 +0000
ROA not before: Thu 19 Dec 2024 04:03:40 +0000
ROA not after: Wed 10 Dec 2025 04:03:40 +0000
asID: 984
IP address blocks: 45.206.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58713 (0xe559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 04:03:40 2024 GMT
Not After : Dec 10 04:03:40 2025 GMT
Subject: CN=67639b20-1ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:5d:ff:2c:67:0e:40:e2:05:ba:10:0a:54:
83:f5:d0:fe:03:17:51:8f:30:47:a0:87:f9:ae:a8:
76:39:9f:d8:5e:b1:3d:fd:10:2f:49:ea:11:09:da:
8c:86:fa:e5:d2:65:a5:d9:d4:1b:f8:26:60:b0:61:
f7:da:9e:a0:4a:f2:7c:f1:19:13:75:c6:60:53:63:
e1:22:89:3c:ae:d9:dc:49:75:7f:d6:8c:ff:a7:e8:
42:8f:d5:3c:40:3b:c2:3d:27:8f:2e:4b:42:d4:9c:
de:af:98:77:36:56:a8:9e:42:ac:5d:4e:fc:0b:56:
a4:3b:4e:8f:db:22:39:39:e8:49:93:11:99:bc:3e:
3a:7b:2c:29:97:6f:99:66:ff:75:3d:22:54:9c:ed:
f5:e3:df:d3:3a:8b:be:a0:42:54:44:47:8c:71:77:
ea:b0:51:13:a7:18:4d:b0:0a:30:71:0e:53:4d:dd:
88:fb:ed:6b:2e:ba:bf:04:0a:32:3b:a3:f9:90:e5:
3a:0f:2c:72:c7:f8:12:e1:29:23:ee:22:5d:28:2f:
e6:df:4e:de:d8:d8:ce:ce:c1:73:c3:fe:9d:ee:3c:
3f:5b:2b:d0:a4:ea:ba:70:5d:c6:21:ea:0b:46:11:
78:56:f8:f8:89:3a:1e:77:ba:da:1e:79:b2:df:11:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A7:84:87:2F:CD:73:4A:1B:04:81:D2:AD:B6:9B:2C:B2:BB:76:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D0438BEBDBE11EFAB4FE364762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.79.0/24
Signature Algorithm: sha256WithRSAEncryption
44:8f:19:a3:d1:d5:3e:dd:aa:2d:35:57:a9:07:ab:6c:ff:80:
49:e9:a2:f9:66:91:43:a7:86:a6:09:5d:dc:46:c8:f4:2a:9d:
4e:7b:d0:1c:0a:a9:42:0b:ef:32:30:e8:6a:80:c6:fd:67:0a:
cb:30:a8:66:c4:dc:58:49:62:5d:c2:6d:bc:c8:f3:f6:ef:cf:
55:cf:5c:e1:c9:5f:5c:99:27:e9:00:a3:66:a1:b9:99:81:e4:
b9:7c:b3:b5:cf:0d:62:e7:73:d3:d9:54:cc:67:3a:16:ea:ed:
ef:a2:82:c4:1f:fb:d3:2d:48:54:49:a0:1a:d9:20:25:5a:e8:
b8:4f:c2:ff:be:f0:6a:c7:d1:1c:52:d1:c0:a8:86:04:27:39:
ed:ee:7f:dd:fc:27:86:1f:96:9d:8f:31:38:13:d2:ae:88:84:
e3:69:57:e8:ec:94:1c:c5:5a:0a:ec:66:8e:b3:35:33:93:81:
ff:fe:4d:35:15:bc:4e:13:05:62:8b:a3:d6:74:d6:d6:07:8e:
65:93:2e:7d:6e:37:15:90:fe:87:94:a9:8a:49:bb:ee:c1:f0:
56:45:2a:fe:0c:c1:19:9d:aa:e9:0f:c5:62:99:3d:28:a6:fa:
1a:43:f7:26:f9:fe:eb:0f:c0:0d:98:51:0d:37:f7:e5:e1:f0:
ce:86:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:40 2025 by rpki-client