Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60D31E78C40211EFA4F37191762E951A.roa
File: 60D31E78C40211EFA4F37191762E951A.roa (raw, json)
Hash identifier: 96gsfCXqkaihuuSvtrE0DqAO7mEqfrRvvR4sT2IHVD8=
Subject key identifier: B3:89:D5:C5:AA:33:F5:53:B9:26:8B:DA:16:96:0B:78:87:61:21:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60D31E78C40211EFA4F37191762E951A.roa
Signing time: Fri 27 Dec 2024 03:26:37 +0000
ROA not before: Fri 27 Dec 2024 03:26:33 +0000
ROA not after: Sun 12 Dec 2027 03:26:33 +0000
asID: 17561
IP address blocks: 45.195.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61412 (0xefe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 03:26:33 2024 GMT
Not After : Dec 12 03:26:33 2027 GMT
Subject: CN=676e1e6c-b4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:61:59:69:d7:6d:c9:2d:ad:2e:29:a0:00:54:
08:d0:af:0f:9b:9d:60:b7:83:96:42:a6:3c:2a:3b:
74:b6:00:4f:fd:04:88:3a:a1:bf:0a:97:cd:df:a9:
cd:6a:bf:19:56:f9:36:39:07:29:97:0b:97:0c:b0:
83:87:59:5f:59:45:9b:72:e3:f5:cc:73:0d:13:33:
55:1d:18:b3:21:f4:d1:54:3d:9a:92:ed:ef:cd:d5:
ca:52:f1:17:48:a6:10:e2:8f:22:1d:59:54:20:8f:
4a:44:80:a2:17:4b:a2:a4:fd:53:c7:b4:b6:a7:05:
2b:c2:b3:f6:fa:cc:4d:fc:7e:bd:85:f8:20:f7:0e:
61:fe:00:d5:6f:ef:97:b2:43:07:22:ec:42:e7:d3:
22:db:90:7f:9d:64:07:eb:21:ff:e3:47:29:be:3a:
d0:a9:12:e7:e7:6f:c9:21:69:29:b4:db:fe:7d:bf:
a8:54:54:1d:15:b1:f5:5a:0f:93:ff:99:b4:c5:73:
4e:ad:fb:a1:1a:96:a3:f6:00:5b:16:83:e2:54:a3:
bf:e3:14:0d:88:06:d4:f0:bc:ad:d2:e5:11:b4:5c:
44:91:78:d6:19:09:e2:af:ab:9d:fc:9c:1e:2b:a6:
47:3f:c2:8f:3a:50:a1:db:5e:58:31:b8:ab:83:30:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:89:D5:C5:AA:33:F5:53:B9:26:8B:DA:16:96:0B:78:87:61:21:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60D31E78C40211EFA4F37191762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.194.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2a:d4:67:83:5e:41:60:bd:a5:89:4d:78:b7:2e:73:d6:12:
b4:70:03:67:84:4b:c3:86:5a:dc:7a:45:8e:54:d7:0c:67:b5:
36:07:32:64:ec:43:85:5e:e9:43:24:15:13:94:4f:2e:c3:65:
3d:d1:48:51:11:75:a1:13:6d:52:33:43:86:83:66:48:43:87:
70:7f:39:a6:7d:1d:f9:64:8e:b2:cb:6b:12:b6:5f:c5:b0:40:
07:3d:93:03:b3:f6:94:70:53:f8:43:f1:62:69:b6:0d:b4:0f:
93:11:3b:9a:70:81:0a:42:d0:5e:c4:cd:74:06:1d:d6:48:bf:
33:32:0c:a9:41:53:90:93:7b:12:11:33:27:09:fb:38:6a:29:
31:0f:a2:11:e5:61:b3:b1:cd:e7:27:0a:ec:90:8f:1e:f3:7f:
8a:e9:98:ed:0a:91:01:2b:30:de:b7:20:b1:be:7d:2f:ea:f4:
f4:f2:a7:e4:c2:14:42:35:e6:a9:48:15:0f:bf:5f:ed:1d:96:
f4:98:bf:34:4d:9d:1b:43:8c:97:d3:e7:5a:b6:f4:10:41:51:
c5:59:23:45:39:d6:fe:5a:49:1d:49:71:3b:87:01:87:30:8d:
a7:05:9b:7c:6d:fe:d5:eb:05:b4:a7:c6:6c:8f:cb:ac:bd:30:
c5:a0:7f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:41 2025 by rpki-client