Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F65C3A4BDB011EFB9A40A85762E951A.roa
File: 5F65C3A4BDB011EFB9A40A85762E951A.roa (raw, json)
Hash identifier: alvA43Z7n1+it13/qh36ACX8hrv+PpTmrE6FQ2cWQq8=
Subject key identifier: 18:47:B2:87:6D:BF:DD:9E:A7:A9:28:06:3A:03:72:97:81:0D:49:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F65C3A4BDB011EFB9A40A85762E951A.roa
Signing time: Thu 19 Dec 2024 02:24:28 +0000
ROA not before: Thu 19 Dec 2024 02:24:25 +0000
ROA not after: Wed 10 Dec 2025 02:24:25 +0000
asID: 984
IP address blocks: 45.198.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58535 (0xe4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 02:24:25 2024 GMT
Not After : Dec 10 02:24:25 2025 GMT
Subject: CN=676383dc-ebf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:b1:c7:84:a3:3b:72:ab:58:71:8c:99:a9:
44:89:f2:24:7f:80:f0:64:51:59:3c:bc:b1:c6:94:
25:9a:18:6b:09:17:26:a9:97:fb:da:bb:f9:14:ac:
9a:a7:84:22:51:2a:c5:26:b5:fd:d4:d8:2c:be:e2:
8c:e5:36:92:5b:95:07:57:b5:a8:14:39:59:34:92:
eb:25:4f:81:a7:dd:8f:4c:e6:8c:68:ae:77:19:0f:
d7:24:45:7a:83:d4:03:e0:6f:e4:47:95:ce:e7:e2:
c1:1f:41:07:1e:4d:0d:0b:6f:52:7f:f8:11:66:71:
57:7a:b2:cf:50:2c:63:86:7f:1e:8b:4a:24:2b:d2:
56:ce:80:42:e5:32:e1:d9:e0:d4:00:9a:8b:20:df:
51:23:bf:0c:ab:57:72:1f:19:26:1b:35:70:01:cc:
b9:9c:83:2f:4e:c4:7c:db:15:e2:c0:b2:ce:b5:61:
8e:9a:c9:1b:b6:99:67:32:ae:dd:98:58:fb:53:4b:
70:4b:b6:10:18:91:b2:47:e0:b3:5a:93:39:b2:09:
88:35:1f:1c:cb:3a:01:f1:52:b7:c8:0e:bd:97:40:
3a:a8:05:4e:16:9b:2d:ff:34:13:df:89:68:d0:bf:
f6:61:78:41:a4:73:19:a8:a6:ed:01:90:3e:6c:d9:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:B2:87:6D:BF:DD:9E:A7:A9:28:06:3A:03:72:97:81:0D:49:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F65C3A4BDB011EFB9A40A85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.235.0/24
Signature Algorithm: sha256WithRSAEncryption
52:fc:c3:7c:03:ea:d0:96:22:33:b4:d4:a8:21:fa:2a:ef:60:
1e:fd:5e:95:86:bf:c8:6e:fb:ee:44:21:d5:17:85:40:9f:a4:
7b:6c:51:a8:ac:0c:76:8b:67:f0:43:95:ab:f6:56:35:35:e2:
fc:fb:c5:0a:7e:e2:e1:6e:0e:b2:2f:4b:61:1e:e4:4b:2e:e7:
fd:23:98:a3:be:6f:17:48:54:e7:07:91:72:c2:42:05:4a:69:
0d:9a:45:fc:d7:74:77:96:f4:7c:35:3b:71:4c:9b:3a:44:df:
49:fd:16:dc:24:c4:ff:0d:84:9f:42:4c:f6:4f:e8:15:a8:0e:
f9:f8:9e:9a:60:03:dc:2f:84:b8:98:3c:0b:01:cf:7b:db:a5:
d7:2c:92:39:fa:ff:6c:25:2e:23:15:9e:29:d5:16:8e:86:7f:
c2:be:d8:0a:76:5e:eb:f6:93:15:56:6c:1d:01:1c:74:95:ea:
f9:0f:d3:06:0a:a8:13:8e:ff:c1:6a:96:97:fb:36:64:0d:1a:
f7:df:14:cb:b4:4e:a1:14:a5:22:ef:67:a0:c4:16:a2:f6:05:
e8:22:6f:66:ef:26:8c:73:60:a0:20:b1:6c:ce:16:a0:08:a2:
55:7d:cf:5a:c9:fe:11:2b:b3:b8:d4:fc:23:d6:dc:c1:4c:94:
10:c8:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:01 2025 by rpki-client