Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D8A5462CEF011EFAA66A283762E951A.roa
File: 6D8A5462CEF011EFAA66A283762E951A.roa (raw, json)
Hash identifier: HumEHyeNMaUG0q0HsrsEnIGtIN2xY2B2rYMZILGWPN8=
Subject key identifier: 1D:36:1E:3A:45:06:E8:11:0C:0D:37:D8:8A:90:E0:5A:96:79:D0:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01046F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D8A5462CEF011EFAA66A283762E951A.roa
Signing time: Fri 10 Jan 2025 01:15:50 +0000
ROA not before: Fri 10 Jan 2025 01:15:46 +0000
ROA not after: Thu 13 Feb 2025 01:15:46 +0000
asID: 54801
IP address blocks: 45.204.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66671 (0x1046f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 01:15:46 2025 GMT
Not After : Feb 13 01:15:46 2025 GMT
Subject: CN=678074c6-2f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:70:52:b0:42:d1:0a:f5:cd:f1:42:78:7e:
ea:a0:bd:6c:42:82:9c:ba:8a:6d:f4:1f:47:ea:d4:
b8:08:ab:71:af:20:13:aa:74:a1:3b:1f:f8:a6:bb:
8f:be:99:a0:59:74:88:df:27:e9:4a:bf:84:0e:09:
a0:fc:29:26:d9:13:8c:5b:e9:9f:60:28:ed:c3:6d:
03:b7:de:c5:8f:df:43:98:52:1e:dc:74:1b:6f:13:
97:cb:b9:0d:50:13:56:58:d2:34:6f:db:88:02:60:
96:06:e0:6f:4c:a4:e5:7a:bd:23:05:f0:df:cf:fe:
eb:9d:85:16:03:7b:b4:6d:da:cd:f8:ab:27:42:41:
2d:de:6f:42:b6:04:29:3a:37:ff:a8:d2:c2:4c:d5:
85:40:32:5a:d4:7a:e8:90:93:4c:0f:b0:4c:1b:24:
40:ce:f5:0b:70:d5:78:27:e9:82:a2:3d:2c:20:3e:
78:ba:e4:53:83:1c:92:4b:71:3d:c9:28:49:6d:cc:
27:c8:1b:bf:e0:12:9e:5e:04:85:39:5f:84:a5:56:
eb:19:a2:a5:49:07:f1:2f:be:6a:60:45:4d:dd:c7:
b9:1d:cb:f5:c2:e9:74:24:e2:6a:db:4d:57:c7:f7:
45:48:64:98:13:7f:f1:8d:7b:ad:dd:65:b9:8f:a9:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:36:1E:3A:45:06:E8:11:0C:0D:37:D8:8A:90:E0:5A:96:79:D0:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D8A5462CEF011EFAA66A283762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.1.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3d:ce:d3:fd:1d:9b:87:88:13:2e:55:c3:48:8d:c9:07:0e:
10:b4:fc:b7:6b:75:c7:da:0d:31:59:89:da:c0:7c:0f:db:0a:
49:78:68:de:72:02:cf:48:c0:16:e0:bb:12:51:e0:11:3d:b4:
a5:6d:a7:7e:9b:06:4f:c7:ec:9b:78:57:23:ee:e9:4d:a3:7f:
79:48:d8:82:93:bb:fa:e1:ac:89:f4:cd:32:2c:f0:96:d3:7e:
49:47:21:8a:ab:c0:be:a2:3e:31:f4:b2:41:6d:a4:1a:fb:a3:
ed:9f:e0:da:e0:70:74:a2:ee:aa:52:af:48:b0:43:fe:a5:cc:
1b:e7:fb:7e:e6:f3:8d:a4:a4:ee:dd:95:94:ae:17:ba:ee:03:
10:c4:96:7f:cd:8b:10:52:4b:00:8e:21:76:12:a2:2e:1f:ae:
32:5f:85:54:cb:1c:b4:3d:c5:b9:bb:a7:d0:5f:c7:9e:5b:3a:
43:32:6d:18:0e:f8:c9:1a:1e:69:1d:c1:81:97:da:fc:cf:1d:
31:08:0e:ac:e6:24:ff:07:e8:88:84:99:00:e3:fe:24:5c:1d:
c6:8f:2e:d0:de:78:9a:f4:f9:ea:29:6e:11:e5:28:c4:6b:7f:
16:2c:a9:fb:90:46:c0:82:5e:42:93:fa:34:5f:b0:4c:51:a8:
35:53:e3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:56 2025 by rpki-client