Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7277E21AD0C011EF8F45157F762E951A.roa
File: 7277E21AD0C011EF8F45157F762E951A.roa (raw, json)
Hash identifier: GcQl8jDgRENhF03OkEUE74DovPCIB5s2jQ2wQF2SpTA=
Subject key identifier: C7:B7:AA:1A:3F:25:54:02:49:AA:2D:D7:83:A6:3B:93:10:E9:88:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010637
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7277E21AD0C011EF8F45157F762E951A.roa
Signing time: Sun 12 Jan 2025 08:37:25 +0000
ROA not before: Sun 12 Jan 2025 08:37:21 +0000
ROA not after: Fri 14 Feb 2025 08:37:21 +0000
asID: 142032
IP address blocks: 45.192.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67127 (0x10637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 12 08:37:21 2025 GMT
Not After : Feb 14 08:37:21 2025 GMT
Subject: CN=67837f44-b42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bd:ce:7f:35:e5:81:61:64:ac:c5:6f:0d:42:
60:2f:0d:ed:ea:cb:a2:4b:07:f5:d7:e7:8c:08:4a:
1d:05:97:fb:3b:a5:be:d3:2a:0a:bc:e3:37:a7:1a:
6a:a8:2f:32:86:b3:5a:ac:a6:9d:5b:e9:04:82:0c:
6b:6b:b2:e7:c3:60:40:a6:7d:87:58:ed:a2:c2:93:
0c:f1:f7:15:13:3d:62:88:ac:d8:df:eb:ed:6b:55:
d0:3d:f5:55:65:6c:44:85:7d:e7:01:00:c3:b8:e9:
fc:10:16:ca:44:b9:3d:88:9f:a8:10:29:70:54:cf:
79:9f:4c:8b:89:0e:48:ef:e7:53:85:64:d7:6b:31:
e0:1a:83:26:7a:86:04:80:9b:63:99:65:55:1d:03:
e7:c0:89:ce:5a:24:d4:8e:38:05:8e:3a:02:c0:3e:
89:9b:2c:d3:6a:87:2b:4d:0f:46:01:ef:0b:86:aa:
f5:06:c5:a0:90:e3:ea:b7:7b:64:da:32:ee:37:79:
bd:f8:17:9b:4c:26:c0:33:e9:67:81:c7:3c:39:ed:
07:12:d6:ac:b2:ac:20:a6:46:8f:66:d9:7a:dc:70:
7f:15:3a:91:a4:83:91:d5:3d:be:49:a4:47:8f:6b:
b3:5b:e8:3e:02:35:48:55:35:ee:be:5c:b2:ab:03:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B7:AA:1A:3F:25:54:02:49:AA:2D:D7:83:A6:3B:93:10:E9:88:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7277E21AD0C011EF8F45157F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:14:d5:cd:8d:df:8d:01:4b:07:a3:7e:16:f9:39:62:47:36:
e1:81:de:25:c2:31:09:23:4a:24:9f:99:ba:37:42:50:59:8c:
80:aa:67:7c:30:07:be:9d:e6:45:bc:8e:4c:24:2e:c6:10:14:
5d:d4:70:b7:a7:d6:5d:c8:c1:c5:15:98:f4:a5:6b:85:51:c4:
8f:2e:8a:31:f5:83:3c:58:b6:20:64:54:83:99:ca:70:81:6e:
44:06:ba:4b:df:4a:91:5e:6c:31:c2:5c:57:2e:4b:6c:7e:a3:
8f:b3:0f:1c:65:6b:d7:dd:42:55:72:02:f5:61:ba:9c:80:d2:
f0:9a:b2:e8:df:5a:a7:2b:00:ae:36:84:09:d8:03:58:ea:88:
5e:ce:cf:08:1a:7d:19:63:9f:61:35:87:16:0b:f1:61:f8:c8:
65:f3:65:5c:16:31:6d:e4:66:79:9b:09:58:bf:d4:06:65:79:
f3:76:de:7a:78:95:25:24:bb:95:9a:85:9f:fa:64:1a:74:aa:
e8:00:88:00:5f:9b:c5:84:c8:5d:f0:c1:9b:20:a7:7d:0f:d4:
15:08:9f:fd:99:b7:c4:98:84:44:73:0f:7f:4e:f1:fb:c3:6a:
14:e5:1e:15:dc:2d:41:9a:f5:13:c4:aa:aa:5a:85:35:65:05:
fa:fe:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:33 2025 by rpki-client