Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67032CA4BD1111EFBA8FF1A2762E951A.roa
File: 67032CA4BD1111EFBA8FF1A2762E951A.roa (raw, json)
Hash identifier: 2mwZwZ3bOnUfbIHsVPlQAlgk0G6HADNcx7FO4HhhJIw=
Subject key identifier: BD:44:75:E0:A5:7E:2E:66:06:02:B7:93:C8:BD:55:5E:58:27:CE:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E486
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67032CA4BD1111EFBA8FF1A2762E951A.roa
Signing time: Wed 18 Dec 2024 07:26:31 +0000
ROA not before: Wed 18 Dec 2024 07:26:28 +0000
ROA not after: Fri 26 Dec 2025 07:26:28 +0000
asID: 152711
IP address blocks: 45.202.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58502 (0xe486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 18 07:26:28 2024 GMT
Not After : Dec 26 07:26:28 2025 GMT
Subject: CN=67627927-4dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:be:0b:2a:3e:ab:cc:55:29:f3:c6:ce:8e:
7b:dc:c1:44:81:d2:0b:57:84:97:4f:47:05:0b:e7:
64:4b:f2:59:a2:c2:8a:f7:eb:10:a8:36:02:90:38:
7e:a3:fb:9f:c3:54:52:b5:d5:a4:2b:7c:a6:e9:69:
9d:3f:97:c4:3d:67:96:54:96:9b:c5:aa:6b:19:41:
42:9e:e5:a0:ca:9e:22:53:3e:08:5f:75:a4:21:a7:
24:2b:37:f2:dc:27:a2:b9:00:f0:61:b0:bb:5d:c2:
05:1e:51:0c:df:a4:96:56:2c:2b:67:51:b6:4a:6f:
2b:00:14:5a:54:fc:66:b0:f8:ea:8b:c8:59:4d:43:
e4:bf:f9:5e:da:4c:9a:63:14:76:b3:8e:4e:b6:67:
d2:ec:87:ef:69:fe:64:b8:4f:25:30:03:6d:68:55:
8c:e4:84:85:2c:50:e6:bf:57:9e:d9:dc:ac:60:29:
f7:8b:64:71:a3:43:1f:9f:ab:7c:86:06:bd:2f:0d:
8f:9c:31:6e:34:48:a3:ce:0c:b8:a6:7a:75:53:cb:
ec:a5:46:5d:b7:bd:0f:97:bf:0c:38:3a:53:42:31:
ab:dc:d5:d6:ed:c0:8a:e5:d1:fe:ac:d2:2c:55:c1:
18:c9:0d:58:a7:8a:94:d5:f5:54:ae:3e:69:cb:7b:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:44:75:E0:A5:7E:2E:66:06:02:B7:93:C8:BD:55:5E:58:27:CE:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67032CA4BD1111EFBA8FF1A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.212.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fc:ca:78:bf:19:32:a0:ef:6c:f1:a2:1d:ae:5f:fc:36:9e:
5a:34:06:b3:90:b6:01:4c:45:7b:c3:27:6e:0e:61:da:e5:83:
b1:24:07:71:14:f0:85:41:f7:39:a5:74:78:af:4b:0c:e4:f6:
1d:5c:e8:c7:f6:5f:d2:74:db:c2:3c:a2:8a:78:38:5d:87:35:
ba:f9:97:bc:f6:ee:2d:ec:7a:30:b4:b1:a0:bb:43:ba:f8:a5:
4e:8a:d6:ec:76:c1:d8:68:58:90:99:04:9f:d6:4f:3e:e1:e0:
d4:c6:2d:ac:a8:13:56:26:8f:b5:23:d5:c1:ec:82:d1:6b:7d:
7a:0f:d1:c4:c2:31:93:d0:6a:83:f8:b6:c4:3f:25:92:b1:06:
99:88:83:48:ea:04:54:57:af:9b:24:12:5e:b2:5a:be:54:36:
ae:5c:8a:3d:75:f0:45:37:a7:8e:61:0d:27:95:f5:71:1e:b3:
ca:28:d4:73:84:17:a5:86:ae:49:80:cc:c2:62:89:98:e3:d0:
d7:55:4f:ff:5c:63:7a:0c:d5:78:69:51:21:79:c2:27:9a:7a:
92:e7:4e:45:05:9b:9a:7e:de:62:9f:67:78:90:8f:66:6c:68:
a9:a4:11:f2:e3:7b:ce:b4:af:f4:0f:82:ad:7f:68:97:ff:91:
67:c1:de:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:42 2025 by rpki-client