Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C88C272C3A311EF93DC1EA5762E951A.roa
File: 6C88C272C3A311EF93DC1EA5762E951A.roa (raw, json)
Hash identifier: tC9pq/tU/KJm8qHIqCstXgVhOEJJQekysTBBkdlnU98=
Subject key identifier: 74:52:04:73:F3:5D:3A:89:C6:D3:D1:84:BD:45:C7:E4:DB:55:DA:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EDB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C88C272C3A311EF93DC1EA5762E951A.roa
Signing time: Thu 26 Dec 2024 16:06:54 +0000
ROA not before: Thu 26 Dec 2024 16:06:50 +0000
ROA not after: Fri 12 Dec 2025 16:06:50 +0000
asID: 984
IP address blocks: 45.200.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60849 (0xedb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 16:06:50 2024 GMT
Not After : Dec 12 16:06:50 2025 GMT
Subject: CN=676d7f1e-232e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:35:eb:3b:b5:23:56:2b:68:e9:f4:48:2b:
81:4b:d5:0b:c6:ab:af:fe:69:c1:17:2a:24:46:a9:
ac:27:6d:24:d5:22:eb:ac:48:b3:65:86:42:88:2a:
7b:a3:12:42:62:ff:59:ba:50:80:ce:ba:b4:e2:ac:
e2:3b:af:77:6e:65:90:45:22:4e:b6:7e:4b:de:6e:
ef:e1:7e:6e:78:91:cb:3e:74:ad:13:f4:cf:c0:ad:
f9:5e:6e:15:d0:29:c7:70:e1:46:36:53:62:69:88:
6a:b7:5f:21:da:cf:90:98:39:7f:0f:c7:23:62:75:
89:25:87:51:a4:f9:19:dc:89:e4:35:91:e0:ed:2c:
ac:c6:d7:68:7c:7e:4f:db:10:a9:88:16:5f:fc:38:
99:5c:1e:bf:1c:ca:d1:cf:59:fd:b1:17:b4:c4:6b:
3e:39:9f:54:be:a8:dd:e6:ad:68:32:c6:b4:d4:ca:
93:8c:c1:90:45:fb:e2:78:78:e5:11:48:62:5e:0c:
72:75:f0:cb:2c:1e:a6:90:af:cf:14:84:61:36:03:
13:65:a9:b9:c1:13:69:9d:39:f0:ec:51:65:06:73:
3d:cc:ac:63:6e:51:9b:d0:38:e6:ef:d3:a6:ef:93:
5d:21:dd:01:e6:71:db:34:a9:39:9d:40:c4:ac:a6:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:52:04:73:F3:5D:3A:89:C6:D3:D1:84:BD:45:C7:E4:DB:55:DA:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C88C272C3A311EF93DC1EA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:36:f8:62:bb:7d:d2:8d:12:9a:d7:0a:65:f1:f5:d6:8e:ee:
80:8d:f1:57:fa:8f:31:dd:67:ee:71:96:2f:63:91:1b:86:e3:
bb:5d:47:cd:54:77:47:6e:39:42:30:2a:ad:fb:71:d6:0f:59:
e2:22:47:48:12:42:1f:b7:29:c8:d1:2e:c4:5d:ce:cd:0d:86:
99:d7:5a:b1:12:49:a6:eb:f7:ac:82:68:12:26:8a:e5:f0:b7:
32:0d:11:51:89:b9:ca:0e:48:fd:1c:7b:97:bf:08:e1:c2:03:
2c:5c:0b:7a:6b:3e:53:06:67:c2:ed:86:2c:00:5a:8c:9c:ab:
64:c1:e9:c1:90:e7:13:f6:ee:ae:dc:1b:ce:07:04:41:51:6b:
50:28:df:29:1f:05:9e:9c:ff:be:5d:4b:ca:f2:8e:87:56:ea:
e0:54:b2:49:63:32:d0:0a:18:b7:98:88:9d:7d:c1:44:e3:c9:
ff:f3:fe:bc:30:25:cb:6a:d2:1f:60:bf:09:9f:a9:78:dd:5f:
3f:d6:06:6c:d9:a8:d5:64:89:6a:d4:ea:00:b6:53:f3:ed:3c:
37:5e:e6:18:fb:68:1c:6a:2c:9e:f2:5f:17:bb:9a:ad:19:a4:
d7:eb:55:fd:c4:2c:15:b9:c8:22:59:a4:87:e1:7a:6e:de:fb:
f5:82:b9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:15 2025 by rpki-client