Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DE56E82BEDB11EF86E5AB5D762E951A.roa
File: 4DE56E82BEDB11EF86E5AB5D762E951A.roa (raw, json)
Hash identifier: SA8olbdJ3yhz5vRb0gwhPJfO4uDU1/hZfPRggLcfkrI=
Subject key identifier: EB:DF:E6:71:D4:58:48:0F:BB:02:81:58:13:1C:C7:79:03:8A:A7:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E777
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DE56E82BEDB11EF86E5AB5D762E951A.roa
Signing time: Fri 20 Dec 2024 14:04:19 +0000
ROA not before: Fri 20 Dec 2024 14:04:15 +0000
ROA not after: Thu 06 Feb 2025 14:04:15 +0000
asID: 42831
IP address blocks: 45.198.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 14:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59255 (0xe777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 14:04:15 2024 GMT
Not After : Feb 6 14:04:15 2025 GMT
Subject: CN=67657962-5ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:97:6e:8a:64:8a:e1:37:fc:b4:1d:76:e1:
71:c8:85:6a:c2:ee:c2:21:e0:60:04:cc:2b:77:eb:
30:5e:6e:e4:7b:6f:e9:49:2b:08:33:7d:6e:26:57:
cb:01:9e:ba:50:b4:c5:fa:58:a6:c4:6d:ec:94:f3:
d2:7f:02:c0:9c:b0:23:0b:04:7d:bd:a0:d7:83:62:
9a:c2:2d:17:b5:b0:52:f8:66:c9:8e:6d:3b:f4:08:
57:a4:f6:e9:41:bc:a8:96:c5:9e:42:a3:63:93:a2:
a0:4d:44:68:03:d8:c3:01:27:32:00:9d:d3:c1:26:
62:c7:6d:79:56:96:78:50:45:ba:b1:32:af:1e:f1:
60:26:d1:8f:63:09:1b:fe:f6:c2:04:9c:57:d5:77:
c5:c7:0c:2e:0e:10:0c:05:8a:96:e0:07:a1:99:87:
85:59:93:04:5d:1c:9a:af:ad:7b:65:6c:1e:6c:f2:
e5:9b:c4:2c:fc:d2:b4:e0:c5:d5:da:8b:71:b0:82:
fd:1b:30:b9:7d:0f:25:48:eb:51:37:f5:a1:bb:3d:
22:30:ce:48:7f:19:e5:76:d1:f3:3e:d9:79:fa:f4:
03:49:46:5b:bf:1b:7f:bc:47:92:c4:f8:f0:5b:3b:
12:d1:38:03:a1:1c:83:84:92:59:4e:a4:c4:f3:56:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DF:E6:71:D4:58:48:0F:BB:02:81:58:13:1C:C7:79:03:8A:A7:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DE56E82BEDB11EF86E5AB5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.180.0/23
Signature Algorithm: sha256WithRSAEncryption
68:a7:fb:79:49:6a:b9:bb:21:42:14:0f:db:6a:c4:5c:d7:82:
e2:70:4b:73:b6:2c:b0:09:64:f4:44:a3:ed:92:c4:8f:c8:75:
2f:5b:ba:43:17:7b:6f:82:93:e3:df:94:c9:bc:a8:b4:5d:1f:
86:59:fc:95:7b:e0:a6:50:04:ce:86:d9:cb:f8:8a:bd:4c:39:
a1:fd:cf:dd:db:35:3e:54:c2:f6:91:23:73:25:37:4c:4b:ec:
1c:bb:16:4b:bf:ae:4e:f0:18:f5:20:84:8c:29:8f:8b:56:74:
d3:50:a6:d6:04:54:49:7e:3b:81:69:d8:3c:ad:92:b5:55:a3:
83:78:75:34:82:1f:a5:5c:81:5d:c0:6f:9a:ae:40:de:08:1a:
0d:c7:9b:3d:b1:e7:8a:7d:e1:dd:a6:1f:c6:98:ee:3e:ed:78:
8c:ce:b2:7e:f1:de:5e:ac:19:0d:6f:94:83:10:e7:7b:fc:40:
c6:40:2c:5e:4c:ec:e7:47:da:b7:99:a0:80:0d:74:59:0d:9d:
71:96:e1:55:e1:7b:e4:01:f4:cf:c3:8f:54:0d:2b:27:8d:cf:
7e:05:a3:21:a1:c7:68:32:5b:b9:8e:19:b8:23:8c:c3:88:47:
1a:5b:44:15:5e:01:3d:2b:18:78:a8:04:1a:a6:bf:9d:84:42:
9e:9d:2c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:27 2025 by rpki-client