Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6061DD34B21511EFAEB3538C762E951A.roa
File: 6061DD34B21511EFAEB3538C762E951A.roa (raw, json)
Hash identifier: 0O1JwXM1bs/yuvqFsDKGq7zzYlRmAPPoNgH5iMh21Mc=
Subject key identifier: EC:2D:3A:E6:7D:FD:DA:3B:25:06:52:20:C8:47:0A:8E:9F:A3:A5:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DF44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6061DD34B21511EFAEB3538C762E951A.roa
Signing time: Wed 04 Dec 2024 07:57:15 +0000
ROA not before: Wed 04 Dec 2024 07:57:12 +0000
ROA not after: Fri 24 Oct 2025 07:57:12 +0000
asID: 216183
IP address blocks: 45.204.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57156 (0xdf44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 4 07:57:12 2024 GMT
Not After : Oct 24 07:57:12 2025 GMT
Subject: CN=67500b5b-c75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:63:af:e1:6c:5e:b5:68:07:e4:8e:98:f9:
c5:81:d6:dd:4a:43:56:a1:d1:25:27:e8:07:a0:71:
fc:3c:0e:25:d6:4b:a4:0f:19:e0:22:0e:88:16:38:
43:4d:01:82:ef:56:50:60:64:d0:a2:07:3f:9a:ae:
10:b1:a4:6c:cb:5d:cb:34:8a:44:41:0a:64:e0:0a:
56:65:f2:d7:77:02:cc:d7:bc:53:e1:b0:7e:dc:51:
aa:ec:f3:88:0a:c1:1e:c9:9c:8d:8d:24:14:98:11:
91:8c:43:78:61:b8:76:9c:ea:13:2f:cf:ec:76:fa:
ed:35:ad:8d:5d:76:e4:50:09:84:c7:3a:3a:1d:20:
a8:f5:db:c6:22:96:87:22:b2:18:a9:12:33:73:7a:
2d:b6:d0:98:f5:42:35:83:bd:19:e7:2c:c9:ec:19:
61:3f:19:de:d7:10:1b:e5:be:2b:da:6a:b0:a1:21:
b8:70:d2:68:93:a7:98:c9:f1:68:e9:5f:4d:80:3e:
4c:c7:80:b9:83:62:b7:87:a5:fb:2f:67:8b:4a:7f:
0b:29:6d:1c:b1:8d:9b:4d:17:d2:5f:44:a6:ba:e4:
0d:e5:67:fe:45:43:96:d5:10:af:77:56:38:71:d0:
9a:0b:62:c9:80:4c:6d:84:31:5d:b6:95:40:84:80:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2D:3A:E6:7D:FD:DA:3B:25:06:52:20:C8:47:0A:8E:9F:A3:A5:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6061DD34B21511EFAEB3538C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.164.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:2b:0a:b3:9b:4a:ad:4e:21:e3:46:3c:79:a7:ff:53:73:66:
e0:6c:a7:cc:81:6e:70:c7:fc:14:95:60:92:09:36:09:1d:6b:
57:f8:bf:f4:1f:50:08:cf:cc:b1:82:93:3b:71:23:e7:3b:3c:
c9:ee:9c:6c:69:b1:3c:4f:ba:91:97:68:78:ce:c4:2c:d5:59:
a3:6a:23:62:e5:de:30:a5:ca:e8:b5:7c:a3:00:c8:17:b4:6e:
43:29:10:32:9c:d7:59:4b:b7:d9:84:b4:2c:f3:80:ad:7d:81:
1b:cf:95:72:ec:25:ec:87:74:11:e3:34:02:6e:74:42:8d:a1:
c1:0f:0b:07:29:2d:02:65:1f:e3:99:5e:37:d6:79:db:24:10:
6f:35:32:57:51:2d:1d:f6:c1:51:43:81:c6:49:3f:6b:97:49:
95:63:a5:fb:88:95:fc:87:33:29:d6:25:88:f8:9b:3f:fd:6b:
85:57:c6:0c:18:4e:6c:ca:ae:1d:e8:e5:bb:2c:d5:4b:96:0b:
ed:b3:67:7b:37:1b:af:ca:47:f2:22:ad:95:73:ae:50:16:26:
dc:62:23:6b:51:23:b6:df:88:cd:f7:c3:a8:05:9c:e5:04:f7:
48:ff:9a:9f:9d:d2:5a:eb:c6:53:a5:2e:02:19:35:5f:28:04:
4a:31:7f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:42 2025 by rpki-client