Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B265044C40511EFA19091A4762E951A.roa
File: 7B265044C40511EFA19091A4762E951A.roa (raw, json)
Hash identifier: q3xCU1+Ayd7AN9T2yBRvp+TKRbshQ6XAnbgo7jFKcKI=
Subject key identifier: 3A:B8:B6:10:07:7A:17:9B:98:C7:73:5D:93:71:63:F8:E4:B4:6F:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F004
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B265044C40511EFA19091A4762E951A.roa
Signing time: Fri 27 Dec 2024 03:48:49 +0000
ROA not before: Fri 27 Dec 2024 03:48:46 +0000
ROA not after: Fri 12 Dec 2025 03:48:46 +0000
asID: 984
IP address blocks: 45.195.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61444 (0xf004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 03:48:46 2024 GMT
Not After : Dec 12 03:48:46 2025 GMT
Subject: CN=676e23a1-fde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:6a:26:36:1d:55:4f:8b:72:81:13:5c:22:
64:eb:a4:5d:81:d0:05:28:4b:ac:87:d7:ba:61:46:
2e:b9:a9:53:aa:fb:3f:5c:c7:da:9c:36:b2:47:3e:
f6:45:9c:17:bd:dc:b1:08:cf:7a:6b:91:db:f3:c4:
37:8c:25:4d:70:07:9a:b4:5f:24:2e:26:12:41:d4:
84:ee:b7:7e:07:a0:da:14:5a:8a:56:60:85:2e:cf:
f8:4c:19:2e:5a:03:74:02:ad:43:af:0a:9d:ac:c2:
cc:1f:b5:d6:6f:3f:55:84:62:ce:0b:a1:ec:63:52:
1c:8b:8a:f5:fe:73:26:e6:17:66:a4:de:0f:56:fa:
8d:03:1b:50:35:48:7f:9d:35:2a:a1:3f:24:9e:32:
7b:32:6b:f9:68:f2:a4:66:0f:9e:c2:57:12:06:07:
86:07:18:13:ba:ba:fd:a0:7f:f0:db:5d:30:16:be:
80:06:0d:14:6f:4a:aa:6a:1e:21:2f:f8:17:98:a6:
8c:73:f1:26:7a:ff:e6:8b:8e:a5:c3:77:a8:98:2d:
70:39:31:10:f8:ee:d9:dd:6f:e0:d3:d0:a7:3a:8c:
e2:ab:ce:55:04:a7:eb:68:8a:d9:9d:86:31:40:17:
75:d8:ef:dc:04:60:9b:e0:98:eb:ab:47:c6:b8:58:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B8:B6:10:07:7A:17:9B:98:C7:73:5D:93:71:63:F8:E4:B4:6F:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B265044C40511EFA19091A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.254.0/24
Signature Algorithm: sha256WithRSAEncryption
60:17:42:77:7b:d0:b3:f8:d1:53:46:a8:c9:cf:d8:cf:2b:da:
d5:ad:b1:cb:0a:ae:c1:5c:f9:8d:0d:c0:1d:29:50:7f:68:3b:
93:0f:73:d8:64:b3:13:50:73:03:42:96:bf:d4:77:b5:a3:2e:
a1:65:1c:a7:b4:0d:e0:ab:58:84:d0:08:2e:98:d2:8e:e7:54:
9f:04:09:33:36:f8:b8:fd:9d:a4:81:e4:fc:a6:89:30:83:91:
42:a9:74:ea:17:22:c5:98:aa:07:cc:b2:7b:eb:ae:9e:ee:2d:
a9:03:db:17:dd:70:3c:2a:42:e9:9e:0f:46:ff:42:84:9c:1a:
28:e5:88:ef:0a:50:ce:66:9d:57:6d:27:5b:11:00:c0:e4:08:
85:c2:a8:c7:75:60:9b:e4:77:46:89:ec:73:9c:07:90:4c:96:
26:9e:50:54:96:68:52:53:8c:f1:8e:1d:11:56:dd:31:1d:ad:
ee:c4:19:22:72:18:09:6e:a0:9e:db:6c:f9:50:c2:a4:0b:7e:
21:b5:b0:90:3d:9b:c6:58:1b:77:cf:9f:ae:88:bf:12:88:c9:
d2:fb:b5:5f:19:e8:61:29:53:47:8d:da:69:de:0c:30:50:b1:
79:b2:43:1e:0d:a3:89:f8:7b:1c:8b:c0:a9:0b:ff:35:79:19:
90:64:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:23 2025 by rpki-client