Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45EDC770D30711EF85D3BC79762E951A.roa
File: 45EDC770D30711EF85D3BC79762E951A.roa (raw, json)
Hash identifier: Gvg4YhnqsPfQoUiE8LxArDq/SQgDNpU3mGrLflITXt4=
Subject key identifier: 78:5D:1A:E3:19:57:35:15:50:0F:D8:13:CA:A6:21:C8:90:55:30:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010817
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45EDC770D30711EF85D3BC79762E951A.roa
Signing time: Wed 15 Jan 2025 06:09:26 +0000
ROA not before: Wed 15 Jan 2025 06:09:23 +0000
ROA not after: Mon 03 Jan 2028 06:09:23 +0000
asID: 17561
IP address blocks: 156.254.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67607 (0x10817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 06:09:23 2025 GMT
Not After : Jan 3 06:09:23 2028 GMT
Subject: CN=67875116-620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:49:d4:5a:40:cf:fe:a1:ff:ea:20:84:61:
32:80:93:a5:ce:25:aa:41:ca:c5:55:05:e4:1c:ae:
01:d5:38:3f:de:6b:5a:21:d5:75:64:0e:22:d3:fc:
ea:5c:05:b2:b0:84:1f:a0:d6:12:77:0e:c3:96:a3:
7a:4f:b4:b2:c9:2f:a7:df:c1:d0:03:74:c2:70:20:
de:c5:29:2a:96:df:bc:41:a4:13:fb:49:4f:75:bd:
4f:50:29:88:6a:f3:23:20:20:11:3a:11:2b:bc:a3:
a4:75:c0:b3:ee:44:eb:5f:63:41:11:f9:5a:48:06:
a9:20:d1:03:7b:6e:c4:fc:87:51:b0:ed:29:57:45:
96:dc:9b:ce:c8:a2:23:17:f1:2d:79:39:63:eb:2b:
81:b9:54:27:38:84:e2:c1:33:e5:37:3d:a8:67:f8:
cc:5a:b9:0d:de:fe:c3:7e:48:a6:ab:2e:61:c1:78:
ce:92:58:31:35:a5:c3:07:17:77:90:b5:fb:40:8b:
57:2a:49:3e:72:cd:a8:ea:cc:1b:b4:a4:a6:57:bb:
9c:c1:a0:da:2d:c5:cb:08:71:2e:c4:86:6c:69:71:
d1:6d:2c:67:1a:b0:cf:3c:20:25:20:87:68:1d:e3:
bc:fd:97:5f:3b:f0:9d:4b:73:4c:c1:f6:b4:0e:26:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5D:1A:E3:19:57:35:15:50:0F:D8:13:CA:A6:21:C8:90:55:30:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45EDC770D30711EF85D3BC79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.54.0/24
Signature Algorithm: sha256WithRSAEncryption
03:0e:e1:06:e2:07:1f:29:2f:5d:1e:14:17:63:7b:d3:e3:7c:
76:c6:d1:36:75:9d:11:76:1f:5a:45:31:7f:5a:57:65:72:cd:
62:b8:14:b2:47:1c:56:1f:15:e8:43:a5:f9:5c:de:3f:ee:73:
81:a1:c3:26:96:9e:80:75:3e:29:e3:f9:41:a9:6e:07:af:38:
3e:b5:76:cc:f1:7f:17:52:11:63:52:07:32:1c:c8:83:82:72:
a2:9c:3c:38:ff:c4:2c:05:1c:c0:36:0d:68:b2:aa:a6:e6:33:
20:90:a9:ae:4c:6e:89:a8:67:bc:d1:e3:3e:f8:79:da:b6:4a:
f9:dd:03:f3:21:c6:a3:72:42:30:32:2a:e5:89:5e:62:9f:d8:
22:ad:97:cd:23:e7:d4:ac:eb:5d:62:ec:15:25:4a:14:35:28:
c7:b4:72:a1:40:30:f7:60:31:22:89:ae:f0:2f:3f:aa:09:87:
d8:ed:61:30:77:07:d7:3e:1d:1b:e3:5c:f9:e8:61:26:8d:7c:
29:b4:02:c6:0c:e4:ad:e7:23:8d:c6:b5:7a:96:dc:7b:1e:b4:
44:28:0a:88:7c:56:4e:9a:aa:7b:ab:55:17:2f:71:81:4d:52:
7e:a9:6c:bf:81:81:01:22:b8:79:5a:66:61:60:ae:6a:58:c3:
7c:a4:1b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:39 2025 by rpki-client