Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E0E76CACF2A11EFBD96D382762E951A.roa
File: 3E0E76CACF2A11EFBD96D382762E951A.roa (raw, json)
Hash identifier: Z/y27qfruApAApnLwdAewzUeNdDEY61CyVFy+NdtcoE=
Subject key identifier: 80:15:5E:AB:B6:14:9A:0D:6F:D3:AA:13:94:C5:4B:93:7A:1F:63:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01050D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E0E76CACF2A11EFBD96D382762E951A.roa
Signing time: Fri 10 Jan 2025 08:09:41 +0000
ROA not before: Fri 10 Jan 2025 08:09:37 +0000
ROA not after: Sun 16 Feb 2025 08:09:37 +0000
asID: 6079
IP address blocks: 45.205.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66829 (0x1050d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 08:09:37 2025 GMT
Not After : Feb 16 08:09:37 2025 GMT
Subject: CN=6780d5c5-bad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:58:04:65:56:1b:7d:aa:9b:4b:ce:8b:d2:
70:fd:c0:7c:98:a5:3c:05:0b:bf:19:61:14:41:dc:
63:df:00:40:63:4e:3c:fb:8f:97:16:dd:17:f1:82:
9a:e7:04:15:72:22:85:07:b0:a8:96:51:93:20:39:
b3:ad:57:28:51:84:7f:3f:9d:64:21:ab:9c:a9:a8:
84:f7:e8:45:9d:28:b7:af:c2:92:1d:f4:bd:8e:8d:
b7:c6:38:45:bb:cc:b9:38:40:5f:b6:ba:fa:c0:58:
87:a8:40:a7:98:8a:0a:da:bd:0c:3c:79:2c:16:af:
2f:b3:03:1d:5b:f4:11:a9:24:fd:4c:1f:b8:2e:69:
29:ab:6b:13:7a:59:96:7b:f8:4c:12:e8:c6:33:20:
f9:83:1e:3e:24:fc:d2:c2:b1:c5:e5:53:58:74:67:
0e:2b:f0:c9:fe:1e:3f:91:04:3b:33:a0:b6:4b:72:
27:c5:41:83:f3:df:d7:78:65:e3:4b:a6:dc:53:cf:
93:a0:05:b4:67:ea:2e:38:e2:84:34:33:34:90:e0:
e5:89:c9:7d:4f:85:11:1e:d0:5b:72:a8:99:fe:b4:
36:79:77:47:c4:f1:83:11:b7:a0:7f:0e:72:bd:5b:
84:37:70:10:ce:7e:ba:9b:80:a0:0a:bd:7c:03:51:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:15:5E:AB:B6:14:9A:0D:6F:D3:AA:13:94:C5:4B:93:7A:1F:63:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E0E76CACF2A11EFBD96D382762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.76.0/22
Signature Algorithm: sha256WithRSAEncryption
67:46:b3:f0:51:0c:29:6f:5a:63:a2:2e:64:85:76:f3:4f:76:
d3:f9:0e:0c:09:66:44:f7:5c:64:75:29:91:b1:31:7b:7a:4d:
6f:d1:c7:3a:3b:a3:59:e0:12:90:92:6a:29:ff:20:9b:3e:0e:
11:9a:76:91:72:72:f1:89:1b:11:47:76:88:61:69:28:94:ec:
7f:d1:73:a4:a8:d3:4f:83:e4:30:8e:ee:12:b5:ac:a5:98:b1:
87:04:ef:f7:56:bb:27:fd:9d:03:be:ef:90:f4:fc:e8:9b:66:
9d:f2:5b:cf:0d:9e:80:b7:b1:89:f6:01:f3:82:18:98:cb:0b:
0a:68:1e:01:09:8a:63:4d:8a:a4:28:a6:d4:40:ff:e0:f2:42:
af:11:cb:0c:e5:43:e6:b7:a6:5c:a2:7c:35:1c:99:09:3d:04:
32:fd:f7:49:4d:6a:80:cf:0b:2e:53:2f:f9:30:39:b7:db:05:
fc:5f:ab:df:65:40:b5:d5:da:56:33:75:c1:0e:9d:a3:19:a7:
af:ad:70:e3:b1:fa:e7:58:45:2f:53:9b:27:2e:8a:69:8d:c6:
36:55:8c:2e:3a:06:59:3a:7c:64:3a:8a:33:07:74:e0:15:30:
b2:f7:d1:76:10:b0:7f:d9:30:ec:5b:23:6b:40:a0:c2:13:56:
a4:a5:bc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:50 2025 by rpki-client