Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B1824C8BDEF11EF94ADC594762E951A.roa
File: 6B1824C8BDEF11EF94ADC594762E951A.roa (raw, json)
Hash identifier: vZ6/XmWOQ+zdSepKxQxlQUgxSfD2GXLRfd90D0xw/cE=
Subject key identifier: B2:39:F5:55:18:3E:B9:B5:B1:C5:07:16:DA:93:66:25:46:B2:EB:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B1824C8BDEF11EF94ADC594762E951A.roa
Signing time: Thu 19 Dec 2024 09:55:46 +0000
ROA not before: Thu 19 Dec 2024 09:55:43 +0000
ROA not after: Wed 10 Dec 2025 09:55:43 +0000
asID: 984
IP address blocks: 45.206.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58859 (0xe5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 09:55:43 2024 GMT
Not After : Dec 10 09:55:43 2025 GMT
Subject: CN=6763eda2-c643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:62:78:fb:26:f8:7d:fa:6b:51:94:ae:40:
d4:0c:6c:31:75:f7:2e:87:b9:a7:ac:15:87:dd:1a:
27:34:70:4e:66:30:b7:58:86:22:4c:db:3a:ad:4c:
9d:3c:c7:5f:79:4c:57:dc:aa:f2:3d:8f:5a:d7:4c:
33:91:d2:12:33:07:63:dc:ba:4f:7e:0d:8f:6d:47:
cf:b1:f4:c9:63:94:81:59:04:bb:47:e0:74:59:9b:
18:fc:98:e8:95:14:d8:a6:e9:fe:73:e9:fd:e8:01:
87:87:0e:38:b5:af:7a:1e:7a:b1:2a:28:46:2e:91:
0c:6b:bc:78:67:e3:5c:f8:18:b0:50:0b:a0:d8:e5:
8c:d6:07:28:9c:d6:6b:2d:fe:e0:35:71:78:cd:02:
fc:3c:e7:6f:0d:b9:9a:07:43:6e:63:f4:05:2a:15:
74:e2:a2:73:54:69:e1:b8:56:fe:a3:4a:84:c2:b7:
b9:d4:01:01:84:d4:3d:f9:b4:95:0e:4b:89:34:62:
8d:7a:f1:06:11:96:8c:06:83:ca:77:8f:ca:f6:d2:
b6:13:5b:1d:22:dd:84:03:91:67:e5:20:c6:37:82:
4b:6b:7d:2a:89:96:35:5c:7f:2c:f6:ca:84:b4:4a:
31:33:fa:81:a5:6a:9a:69:20:ab:59:d8:1d:0c:34:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:39:F5:55:18:3E:B9:B5:B1:C5:07:16:DA:93:66:25:46:B2:EB:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B1824C8BDEF11EF94ADC594762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.118.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ba:35:66:aa:9b:d6:4e:d4:0b:6f:80:15:0d:ff:80:32:16:
f4:e5:e7:f8:a6:96:ff:8b:8b:56:da:32:05:d8:0b:9f:69:2c:
c9:19:d8:63:54:51:c7:0e:38:cc:b8:39:b9:0f:1e:31:8b:5c:
fb:6d:f7:11:c9:10:f8:ef:6c:46:34:72:ad:b7:fb:24:1b:0b:
fb:7f:a9:64:e7:cf:76:9b:e5:31:86:95:a6:f7:04:3b:a1:87:
c0:76:aa:25:ff:d9:ed:d8:2d:1e:b6:4b:25:5d:96:02:1f:21:
b8:ba:1f:aa:1e:b2:91:26:03:fa:fb:68:be:52:a2:d2:ff:6f:
cc:ee:ce:05:1a:02:45:e1:91:65:5d:1b:ff:00:eb:78:0d:b6:
11:7b:cb:4c:4d:c3:9d:e4:ca:0d:15:96:f9:47:ae:73:30:f2:
a2:02:d2:a6:22:72:06:3e:76:f5:7f:1c:29:a8:43:dc:8d:ef:
8a:49:34:92:4f:f0:66:f5:23:00:1f:b6:98:28:f0:f7:49:98:
af:4a:8e:b1:aa:83:06:08:6e:35:e1:e7:33:bf:dd:71:e7:16:
45:c2:71:7e:89:7a:01:dc:c2:15:31:c2:2f:18:4c:c1:c9:b5:
83:91:36:df:a9:77:a8:c1:57:32:64:0a:89:9c:b1:03:aa:dd:
23:f9:a1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:37 2025 by rpki-client