Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6984BC8ECBE111EF884CFE90762E951A.roa
File: 6984BC8ECBE111EF884CFE90762E951A.roa (raw, json)
Hash identifier: o98cqGeWW5Wv/daG+ZuhuKba+/43VqTVc7zBbxNXIfU=
Subject key identifier: 77:A5:49:7A:5F:C3:28:F3:C6:19:3E:59:EB:F9:D9:06:AF:90:ED:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F806
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6984BC8ECBE111EF884CFE90762E951A.roa
Signing time: Mon 06 Jan 2025 03:50:47 +0000
ROA not before: Mon 06 Jan 2025 03:50:43 +0000
ROA not after: Sat 08 Feb 2025 03:50:43 +0000
asID: 395793
IP address blocks: 45.201.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63494 (0xf806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 03:50:43 2025 GMT
Not After : Feb 8 03:50:43 2025 GMT
Subject: CN=677b5317-2696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:be:7a:eb:6d:23:4e:9b:92:4f:fa:c8:91:
5f:e5:92:a5:2e:04:4b:78:14:c2:e2:83:3d:4b:b2:
81:6d:f5:3a:5b:da:31:a6:ad:20:24:f9:08:93:56:
3e:5f:d8:1a:be:31:78:10:7e:68:32:d5:97:b1:93:
da:61:c7:a1:87:cd:a6:87:c3:36:55:15:9b:19:7e:
93:3a:46:fd:ac:71:ec:50:46:20:4f:03:3d:ae:7e:
b5:df:82:3d:7d:b5:94:46:4b:71:9d:38:38:2e:a4:
15:b5:e1:17:54:0a:e8:77:a1:cc:4e:57:78:8f:6c:
c6:a2:a4:22:c0:c2:f8:b6:f9:60:54:d2:39:61:78:
d2:e7:e4:19:56:8e:be:d3:74:97:dd:d2:1d:60:5c:
9d:db:b7:ff:ac:2b:c7:14:9a:6b:34:d6:c9:2d:82:
c8:df:7f:36:0f:f3:ed:78:41:ad:f2:e5:65:ce:d6:
38:24:64:fd:a7:b3:31:e3:e1:47:95:e3:7f:47:18:
4f:f1:8f:cd:2f:aa:19:f5:6e:95:a9:45:d3:43:72:
27:78:d3:f8:4d:39:d7:2c:d9:32:93:5e:ea:00:c0:
43:71:ce:cb:d7:60:ad:20:b5:73:91:77:9f:9a:a2:
68:4d:8a:46:fe:19:a5:97:5c:d7:66:5a:f4:6e:e6:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A5:49:7A:5F:C3:28:F3:C6:19:3E:59:EB:F9:D9:06:AF:90:ED:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6984BC8ECBE111EF884CFE90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.29.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b8:92:b7:c0:c0:39:58:d4:b9:4e:e9:09:15:58:09:47:55:
96:c4:04:f3:7e:cd:cb:7f:c0:1c:f0:ff:81:25:4b:f6:0e:b9:
f4:53:03:fd:07:1d:7f:ba:be:69:45:9a:e1:c7:5f:e0:75:8e:
34:70:1d:c9:cc:62:68:4f:3f:d6:b4:cf:5f:7c:55:40:91:8d:
99:8d:58:cd:31:4a:69:b2:9c:9b:af:1f:29:d4:52:3f:20:71:
c7:f1:bc:5d:36:27:2e:c9:5d:ff:c9:0c:d6:60:72:dc:4d:8b:
c9:c8:2a:fe:dc:e4:29:ad:fb:c9:45:d4:61:61:74:b7:82:3f:
41:b8:67:24:6e:f1:e4:93:90:45:26:11:75:66:a7:49:94:f0:
2f:c4:45:4c:fa:0e:db:a6:6b:1d:08:1c:55:3f:1c:2f:bf:d5:
8f:07:2b:9e:6c:0f:66:14:c3:d5:d6:51:b7:d1:b1:cf:a9:9e:
17:b8:95:f1:27:1c:ac:1e:c8:02:8a:cd:e2:c5:60:23:ad:33:
39:13:1c:3d:5c:10:b9:33:1a:ff:e7:17:8e:27:bf:a5:7e:9d:
a3:94:06:98:0c:f7:b6:16:fd:30:8b:0f:71:7b:02:9b:de:69:
fa:67:98:0b:02:2a:ba:98:c3:4b:27:93:23:ab:01:0a:17:d5:
d3:f6:5c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:47 2025 by rpki-client