Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AAEEFDEC3BD11EF8BEBB549762E951A.roa
File: 6AAEEFDEC3BD11EF8BEBB549762E951A.roa (raw, json)
Hash identifier: 8anes6sCzKE0jEZdLt5FQzrkNz050plceHdbXvs4u6I=
Subject key identifier: 6F:78:93:41:E6:10:68:05:95:FA:52:E7:DD:D0:E2:FB:65:9B:DB:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AAEEFDEC3BD11EF8BEBB549762E951A.roa
Signing time: Thu 26 Dec 2024 19:12:58 +0000
ROA not before: Thu 26 Dec 2024 19:12:54 +0000
ROA not after: Sun 12 Dec 2027 19:12:54 +0000
asID: 17561
IP address blocks: 45.207.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61121 (0xeec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 19:12:54 2024 GMT
Not After : Dec 12 19:12:54 2027 GMT
Subject: CN=676daaba-dfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:47:37:d7:bf:8e:8a:4d:28:4b:29:f4:8e:
16:cd:43:67:70:01:25:e9:23:ec:e2:b6:19:38:a3:
32:9a:ed:ba:63:cf:e9:06:6a:c2:69:fa:7e:07:b5:
59:05:7f:df:ac:3f:53:2b:41:d3:90:ff:c0:18:b6:
6c:04:3b:46:db:a0:d1:5c:b7:42:a5:04:58:b6:4f:
cf:41:df:43:9a:7a:f3:68:40:73:f9:92:a8:a4:b8:
59:a2:76:be:45:dd:ad:b6:d1:19:1c:94:8f:9b:75:
9a:08:d1:ca:fd:8a:c8:65:15:f4:14:8c:d9:e5:92:
ff:7d:f1:47:2b:ab:8e:57:45:b4:6e:30:33:8f:19:
b6:4d:56:fc:7b:53:f6:c6:06:ed:fc:79:ae:dc:d5:
49:8e:be:29:0f:a4:b5:b6:1b:c9:51:14:60:4c:81:
52:37:85:db:b2:d0:fd:34:c8:f9:f1:81:62:5f:b5:
10:ff:90:18:17:89:66:0d:60:4c:23:b5:8f:ca:1b:
75:a1:e8:d8:e1:d6:88:17:2a:3d:ff:0b:be:a0:3d:
cc:2d:cc:98:06:f2:7a:cf:7e:fd:95:a8:6b:30:e7:
4c:34:69:9f:b5:23:8d:ed:24:f3:5d:c0:93:5c:14:
43:70:97:b4:b4:5e:92:8c:4c:1a:d8:b6:24:3d:30:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:78:93:41:E6:10:68:05:95:FA:52:E7:DD:D0:E2:FB:65:9B:DB:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AAEEFDEC3BD11EF8BEBB549762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.161.0/24
Signature Algorithm: sha256WithRSAEncryption
01:90:d6:c4:55:5f:b8:a9:bc:bd:03:62:ba:42:0f:40:30:9b:
68:f3:41:ca:2a:c0:31:51:96:ba:cd:00:a2:b8:da:18:df:1d:
b3:59:a2:f6:08:95:d6:0f:2b:c2:53:26:60:f6:68:bb:af:b7:
02:82:05:07:7a:39:75:4a:de:5f:cd:6f:07:12:0d:02:86:65:
1f:f2:ea:1f:ed:a3:80:75:42:0d:8c:f6:80:b3:21:14:66:9f:
9f:a7:89:6b:73:e7:a7:08:7e:44:0a:41:2e:09:dd:f8:0b:dd:
ec:d8:05:86:ff:c3:e3:3b:01:17:99:3a:d6:c3:97:80:7a:aa:
1b:ae:94:06:fa:d4:11:f0:73:bd:7b:de:9d:7d:c8:bd:0e:ca:
80:63:58:d5:9f:eb:e4:d4:c8:e8:e4:64:2e:d4:50:33:64:30:
c2:c1:ae:55:3a:68:23:67:ab:d9:76:d5:43:a2:64:8b:eb:f7:
63:b0:1e:e8:2d:b4:ed:5c:b3:a3:71:75:8a:64:c3:53:c2:17:
8f:86:8e:0e:00:d0:ce:32:15:2c:1b:10:68:23:b4:54:12:7f:
67:16:0b:1f:f9:bd:69:63:cd:dd:97:c2:77:26:d5:06:7a:a9:
9e:ff:b1:d9:c5:e7:8a:ec:04:e6:d0:04:c2:b2:e7:30:66:53:
41:81:5f:c3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO7BMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTkxMjU0WhcNMjcxMjEyMTkxMjU0WjAYMRYw
FAYDVQQDEw02NzZkYWFiYS1kZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1ypHN9e/jopNKEsp9I4WzUNncAEl6SPs4rYZOKMymu26Y8/pBmrCafp+
B7VZBX/frD9TK0HTkP/AGLZsBDtG26DRXLdCpQRYtk/PQd9DmnrzaEBz+ZKopLhZ
ona+Rd2tttEZHJSPm3WaCNHK/YrIZRX0FIzZ5ZL/ffFHK6uOV0W0bjAzjxm2TVb8
e1P2xgbt/Hmu3NVJjr4pD6S1thvJURRgTIFSN4XbstD9NMj58YFiX7UQ/5AYF4lm
DWBMI7WPyht1oejY4daIFyo9/wu+oD3MLcyYBvJ6z379lahrMOdMNGmftSON7STz
XcCTXBRDcJe0tF6SjEwa2LYkPTCeFQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG94
k0HmEGgFlfpS593Q4vtlm9tJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QUFFRUZERUMzQkQxMUVGOEJFQkI1NDk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc+hMA0GCSqGSIb3DQEBCwUA
A4IBAQABkNbEVV+4qby9A2K6Qg9AMJto80HKKsAxUZa6zQCiuNoY3x2zWaL2CJXW
DyvCUyZg9mi7r7cCggUHejl1St5fzW8HEg0ChmUf8uof7aOAdUINjPaAsyEUZp+f
p4lrc+enCH5ECkEuCd34C93s2AWG/8PjOwEXmTrWw5eAeqobrpQG+tQR8HO9e96d
fci9DsqAY1jVn+vk1Mjo5GQu1FAzZDDCwa5VOmgjZ6vZdtVDomSL6/djsB7oLbTt
XLOjcXWKZMNTwhePho4OANDOMhUsGxBoI7RUEn9nFgsf+b1pY83dl8J3JtUGeqme
/7HZxeeK7ATm0ATCsucwZlNBgV/D
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:33 2025 by rpki-client