Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45701E50C39A11EFA94F376D762E951A.roa
File: 45701E50C39A11EFA94F376D762E951A.roa (raw, json)
Hash identifier: EvtxBPWTFwDRiJNP16sF7yYC1Pbi7/vOWX2dFMIO74I=
Subject key identifier: 9D:AD:A0:DD:3B:5E:45:EB:5C:F9:47:25:08:64:07:26:80:7F:FA:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45701E50C39A11EFA94F376D762E951A.roa
Signing time: Thu 26 Dec 2024 15:01:23 +0000
ROA not before: Thu 26 Dec 2024 15:01:19 +0000
ROA not after: Fri 12 Dec 2025 15:01:19 +0000
asID: 984
IP address blocks: 45.197.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60751 (0xed4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:01:19 2024 GMT
Not After : Dec 12 15:01:19 2025 GMT
Subject: CN=676d6fc3-81b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:e4:08:91:61:92:48:0c:11:8c:d5:9a:eb:
ea:cb:6f:7a:ee:bf:cd:a9:25:e5:d5:6b:34:4d:a0:
52:2a:73:c8:d7:d5:5c:ca:f0:52:a9:25:b2:be:69:
c4:47:49:79:f7:66:75:73:83:1d:9e:4d:2f:3d:a0:
d8:e8:03:be:f0:6c:74:66:c2:1a:bf:e1:fd:94:71:
b6:de:5e:24:45:a7:50:d3:cf:2e:bb:e7:e0:73:b1:
52:10:24:c4:c4:ff:50:8d:b4:37:84:f1:5c:45:5f:
ba:4f:c9:6c:c7:16:d1:f5:10:25:60:75:8d:8a:7d:
ea:14:8d:e5:48:57:ed:a3:bc:2c:97:42:e2:b2:fc:
15:80:bc:47:ec:c8:2d:8f:6e:1b:8f:c4:32:44:1d:
ab:d3:d5:38:c3:2b:01:62:2b:3b:16:ed:27:37:ab:
60:88:d4:4f:0c:ff:61:b6:40:b0:9f:64:36:ed:d3:
9f:e8:dc:2f:6c:49:f2:05:17:df:e1:e4:cb:20:f3:
79:bb:59:f8:e5:95:fc:f0:d8:ab:19:10:72:5b:1b:
84:c0:43:37:21:f4:41:9f:b3:12:ec:3d:47:78:ce:
f7:93:ce:8a:0c:c2:28:25:ee:43:ec:dd:92:cd:33:
6d:a2:cb:bd:84:61:52:6a:77:c3:43:9c:89:4a:a5:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AD:A0:DD:3B:5E:45:EB:5C:F9:47:25:08:64:07:26:80:7F:FA:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45701E50C39A11EFA94F376D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.152.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:68:99:c4:91:79:49:bb:74:c1:bb:b2:62:fd:c1:17:6e:a7:
96:06:46:75:bf:41:68:4a:1b:f6:35:f6:e0:6f:a1:53:ab:66:
a5:c5:42:88:6b:40:57:7e:7e:61:31:ce:8c:dc:76:c4:f7:b8:
f5:19:2e:24:8c:ad:2d:8b:2d:d2:1d:a5:94:70:c6:32:bc:8e:
a4:12:18:b7:a1:e4:ad:55:e1:03:5f:f4:61:9f:7b:a7:1c:f8:
3f:90:24:18:cd:1e:42:36:f3:2d:56:df:4a:83:6b:56:14:b3:
ea:38:03:79:c7:34:d6:3b:18:86:8c:1a:3c:e7:70:42:b4:a8:
27:e6:65:79:47:37:e3:60:7b:f4:98:cc:30:85:38:a2:36:ba:
17:f7:48:2e:bf:40:82:ab:0f:2f:2b:2a:0b:35:0c:0a:96:36:
be:ad:d3:3e:e8:e3:6d:a3:2a:b1:8c:af:e1:30:5a:ea:61:28:
21:d6:1b:16:37:4a:07:41:ff:33:63:0d:a5:b1:60:f8:37:58:
02:ed:e0:cf:83:fc:4e:a0:e8:4c:82:d4:80:c5:57:60:60:08:
20:a3:81:f9:bc:48:5f:48:2a:d8:e0:7f:1d:60:40:13:0c:09:
c6:72:4e:60:1d:f1:03:13:87:dd:06:ca:45:33:57:cb:b9:72:
78:2c:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:00 2025 by rpki-client