Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/541E3184D30911EFA9D91585762E951A.roa
File: 541E3184D30911EFA9D91585762E951A.roa (raw, json)
Hash identifier: DKCjhU3abowUM2tAES4dCfIDdm16cLDnXAVPlZ4y+so=
Subject key identifier: AF:00:C0:D5:25:7E:B7:F3:3D:35:93:7F:CB:30:00:C1:02:27:5B:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010821
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/541E3184D30911EFA9D91585762E951A.roa
Signing time: Wed 15 Jan 2025 06:24:09 +0000
ROA not before: Wed 15 Jan 2025 06:24:05 +0000
ROA not after: Tue 18 Feb 2025 06:24:05 +0000
asID: 61112
IP address blocks: 45.196.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67617 (0x10821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 06:24:05 2025 GMT
Not After : Feb 18 06:24:05 2025 GMT
Subject: CN=67875489-5679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:09:ab:53:34:19:16:8b:4f:a3:17:92:01:
ce:59:4b:54:1f:a2:27:4e:c3:60:67:4c:6e:a0:e9:
ef:0e:47:b3:58:5f:bc:e6:85:34:2b:b9:23:2c:9a:
ed:d4:d4:3d:2d:6a:47:ef:e8:e2:27:0c:fc:9a:41:
ba:46:05:28:af:30:38:7a:cd:2b:53:6e:0d:47:85:
ab:f0:f3:5c:65:67:90:c9:78:ac:6e:b3:87:c8:05:
da:56:22:e8:11:a6:7a:17:3d:41:e6:25:e0:19:23:
5a:d8:d2:11:16:ec:a4:fe:9c:dd:06:e4:75:eb:2f:
03:4e:36:ac:a3:a0:c3:98:c2:f4:56:fc:47:a5:a6:
ea:bb:5c:18:9d:3f:79:51:85:1f:8c:8f:3a:02:ea:
77:8d:f9:25:72:fe:88:cd:78:d7:6b:e5:58:d6:9f:
95:1f:64:8a:ac:4f:32:30:a6:7c:d0:a6:d8:d8:61:
e0:25:c1:ea:74:dc:87:c7:b7:e4:b8:e1:62:0c:04:
bf:4c:36:91:e1:69:b7:59:4e:ef:7b:1f:c3:22:33:
4d:6f:e2:94:dd:9f:2b:15:7e:33:1d:82:0d:d8:bf:
14:a2:5b:8c:23:01:94:53:7c:82:52:10:b0:10:93:
88:56:a3:d8:18:da:82:28:9c:ea:6b:db:ac:fa:c3:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:C0:D5:25:7E:B7:F3:3D:35:93:7F:CB:30:00:C1:02:27:5B:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/541E3184D30911EFA9D91585762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.240.0/24
Signature Algorithm: sha256WithRSAEncryption
26:81:34:21:d5:6f:60:6a:41:40:81:2c:48:bb:03:19:78:0b:
93:ea:56:fc:9e:7a:2e:e9:54:e7:b7:7e:55:ae:4f:77:e6:25:
cb:32:97:be:8a:ce:fc:ba:c4:a3:ee:58:b0:29:5c:f2:e5:84:
af:68:a1:56:77:e6:83:08:a8:d9:0a:b6:ff:48:c9:34:7c:d7:
32:33:89:1d:03:e6:2d:cd:5c:3e:c5:f0:d8:1a:ca:55:f8:5d:
10:b5:dc:f1:70:19:d5:32:a2:d3:f8:84:c3:01:21:ff:53:aa:
b2:20:e4:29:f8:32:e6:ea:1e:c6:e7:7e:1c:e2:1f:e4:c2:8a:
df:70:42:2a:39:c2:15:df:29:e0:e6:00:e5:e1:1d:c6:95:ed:
0c:32:d8:e5:cb:28:90:9f:6a:15:0e:76:1b:8d:02:79:f4:bb:
cb:56:f3:1a:84:92:0a:f9:9e:f5:7f:b0:03:0a:91:2d:88:cb:
db:14:a8:84:94:95:8b:54:b8:dd:98:56:51:a2:64:fc:a5:37:
0f:10:c1:3c:c2:a5:64:dc:42:7d:0e:80:5c:de:41:e0:55:fe:
da:f5:6f:51:bd:ae:2e:16:0b:00:e1:fe:00:8f:e1:53:5e:41:
c0:a1:e8:5c:61:73:17:db:db:e7:ca:a0:0d:b2:67:3a:c6:61:
8c:d7:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:43 2025 by rpki-client