Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FE9A3EAC39C11EF8392EF79762E951A.roa
File: 4FE9A3EAC39C11EF8392EF79762E951A.roa (raw, json)
Hash identifier: X46sRzV3tHHSTtqJd/qRzoiMR3n56M4TdHASrvNjeuc=
Subject key identifier: B5:AD:CE:40:DD:20:06:6D:E9:6F:92:39:DC:3D:A5:AB:9C:3A:91:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FE9A3EAC39C11EF8392EF79762E951A.roa
Signing time: Thu 26 Dec 2024 15:16:00 +0000
ROA not before: Thu 26 Dec 2024 15:15:56 +0000
ROA not after: Sun 12 Dec 2027 15:15:56 +0000
asID: 17561
IP address blocks: 45.199.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60773 (0xed65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:15:56 2024 GMT
Not After : Dec 12 15:15:56 2027 GMT
Subject: CN=676d732f-18a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:df:db:e7:cc:82:1b:4c:71:dd:02:cb:37:
e1:71:ed:85:f2:2b:3c:d3:d0:c1:6e:92:14:47:2c:
0c:21:d9:39:e3:75:fb:6a:c5:eb:e9:ee:f0:96:97:
55:7a:14:1b:08:19:c8:1d:03:c7:09:3a:fd:d9:87:
08:eb:98:27:44:4d:6b:88:db:a6:92:6e:cb:d3:0d:
90:c6:49:dc:81:36:7f:75:29:17:83:2f:79:6b:a3:
59:d1:ba:ca:77:10:1f:8c:25:30:e5:e9:f1:70:83:
2d:e7:49:bc:48:22:78:5b:c4:ce:07:f6:44:c4:a0:
52:fc:d9:51:ff:58:e7:c1:8f:8c:47:d8:a9:08:be:
10:1f:00:27:c3:83:fd:b9:78:4f:ae:fb:04:8e:d7:
e4:8f:71:26:48:77:2c:c2:60:69:25:03:6e:d4:73:
32:c5:40:7d:4b:5e:7e:f3:59:fd:28:75:b3:a7:34:
f1:07:c3:15:33:a9:5b:0d:c0:2d:3a:88:4d:79:4e:
41:04:b8:9d:90:9e:34:c0:7e:d9:b9:8b:f1:30:fc:
e2:66:d9:33:b8:5c:41:de:a0:84:92:a3:3d:74:83:
88:0e:9e:65:63:cf:51:c4:e0:cd:36:0f:48:55:e9:
fc:f5:b0:5a:d7:1a:78:40:0c:e0:2b:98:5a:72:96:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AD:CE:40:DD:20:06:6D:E9:6F:92:39:DC:3D:A5:AB:9C:3A:91:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FE9A3EAC39C11EF8392EF79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.131.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a0:fe:41:6e:b3:81:01:e2:76:f7:ad:5c:59:6e:45:83:d0:
a1:52:46:91:3a:4c:56:b2:fa:4d:d3:fb:3d:af:31:0a:90:87:
7a:40:a5:49:e9:f8:0a:71:3d:85:0f:03:7b:f8:db:ab:89:d2:
6a:7e:be:97:3e:3c:be:a7:c1:dd:c4:9e:a6:62:6e:01:6c:38:
7e:bd:77:5d:6b:c1:ad:98:ab:04:a5:15:74:f3:2b:08:41:5a:
d4:06:05:0b:2e:07:8e:70:b3:1b:a4:2e:f9:63:c7:60:0b:72:
df:88:26:67:f9:99:7d:46:87:ad:db:92:d9:a1:c7:57:0b:77:
91:c7:31:22:a6:a7:1b:e1:71:f0:55:50:50:8b:39:ca:06:74:
00:6d:bd:43:44:34:e1:a9:88:66:91:62:6a:e6:5a:2d:f1:a6:
2e:a5:3f:36:11:38:10:6a:70:0c:f4:09:fd:ae:a1:f8:e8:c0:
bc:2f:24:46:d0:45:80:dc:9f:09:e8:ba:33:3a:ad:75:55:6f:
6a:34:06:02:2b:76:df:c9:b5:5c:54:1a:c8:52:d1:76:25:a1:
bf:4a:77:00:62:ad:88:b0:a0:b7:7d:36:2c:41:60:ee:dd:78:
3a:4d:37:d7:35:09:64:a5:d3:ae:89:b0:3a:06:6f:2f:36:62:
7e:87:e4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:47 2025 by rpki-client