Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EEEECAEC39811EFBFB84C62762E951A.roa
File: 6EEEECAEC39811EFBFB84C62762E951A.roa (raw, json)
Hash identifier: s+wLOgG8xPeo3K5SvOkXPwLpfKLDDhbV+0nT5Ff4PF0=
Subject key identifier: D3:CD:AE:D7:0C:38:9E:3E:B7:CF:7C:40:FD:BC:69:5F:06:AD:0B:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EEEECAEC39811EFBFB84C62762E951A.roa
Signing time: Thu 26 Dec 2024 14:48:14 +0000
ROA not before: Thu 26 Dec 2024 14:48:10 +0000
ROA not after: Sun 12 Dec 2027 14:48:10 +0000
asID: 17561
IP address blocks: 45.197.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60731 (0xed3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 14:48:10 2024 GMT
Not After : Dec 12 14:48:10 2027 GMT
Subject: CN=676d6cad-2ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:a8:9a:9f:82:2f:f6:62:a9:e5:9b:bc:c3:
a3:5c:75:97:21:3d:7d:57:1e:d2:ae:86:3f:8a:e7:
65:19:81:83:67:ce:4e:ce:33:fe:4c:a3:54:46:87:
9e:81:ae:c0:86:2e:30:52:64:ec:c4:88:65:d3:b1:
d1:cc:5c:37:ef:87:f4:0f:38:e2:1f:78:67:54:e5:
61:f9:1d:0e:dc:a7:b1:55:09:18:12:0e:0a:ce:72:
12:df:e8:88:1b:62:82:bc:41:6a:3e:f3:35:5c:6f:
01:44:4b:98:34:b1:f6:87:78:b9:24:66:2c:19:b8:
a0:d8:c2:70:e3:a1:1f:18:87:a1:ff:95:8d:0a:4b:
52:6e:11:f0:f6:9b:34:0e:2d:cb:53:50:07:40:22:
12:34:11:10:32:71:8e:a3:1b:c3:17:3f:eb:49:66:
57:7e:e9:3a:80:07:48:39:d7:0f:a9:b8:1b:d1:56:
97:14:02:6e:8c:d3:c6:1c:06:b0:bf:4b:a7:e9:4c:
d4:34:db:1a:9a:95:28:09:e2:bd:2a:7c:63:60:1c:
df:81:53:d1:2f:4a:a0:d9:40:37:a6:6b:85:de:de:
c4:3b:b0:0c:6c:cf:7b:63:20:b1:ca:e1:0a:21:c4:
d7:8e:67:f0:eb:4c:ac:66:b1:8d:e9:d8:7e:ff:4d:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CD:AE:D7:0C:38:9E:3E:B7:CF:7C:40:FD:BC:69:5F:06:AD:0B:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EEEECAEC39811EFBFB84C62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.133.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c1:5b:e3:6a:ee:11:c9:4a:dc:0d:74:bb:18:90:37:62:c6:
10:26:12:c2:16:60:f0:29:5b:5d:a4:57:45:be:0b:a7:2e:99:
95:e3:66:67:93:5e:ff:af:d7:2f:b5:4d:da:71:4d:6b:59:3a:
ed:8e:18:35:56:4c:bf:d5:c4:1a:b4:7c:7f:ca:22:0f:d2:8c:
7c:72:61:ab:49:a6:a7:47:89:90:cd:66:54:49:6c:48:63:96:
11:73:3f:51:58:71:46:45:db:29:ce:40:39:da:0f:bc:05:b3:
d9:d8:e1:90:b4:77:18:74:a9:97:7e:56:e5:7f:d2:c0:e4:80:
25:e5:74:e7:ac:ea:22:9d:31:32:5f:80:94:6b:43:70:62:29:
72:3e:bb:a0:75:b9:6f:48:18:d9:76:45:6a:e6:ed:a3:0a:9a:
5e:76:43:05:2c:e2:f5:16:3e:22:3f:65:a8:d4:06:9f:5a:df:
2e:23:de:53:bb:3c:0c:ab:2e:a9:50:de:40:0b:c8:20:58:6e:
d7:13:63:37:c4:59:e8:d7:4d:46:f8:64:3c:5e:aa:98:c9:0f:
76:fa:a9:be:73:87:39:5d:6e:17:7f:cc:8b:bd:60:8c:f0:e3:
e9:f4:1e:dc:94:6d:17:e5:f8:6f:27:2e:6e:a1:e6:16:0b:e8:
4c:89:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:56 2025 by rpki-client