Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8054DE72BDBC11EF9E06445A762E951A.roa
File: 8054DE72BDBC11EF9E06445A762E951A.roa (raw, json)
Hash identifier: sfkFJ6J4YYLcAvG7tq1U48ZuEN6pzJS0URtttv+AvX4=
Subject key identifier: 86:D0:2D:53:7A:C7:BB:F1:6B:C5:BD:0A:34:F9:77:C7:31:22:E8:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E543
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8054DE72BDBC11EF9E06445A762E951A.roa
Signing time: Thu 19 Dec 2024 03:51:18 +0000
ROA not before: Thu 19 Dec 2024 03:51:14 +0000
ROA not after: Wed 10 Dec 2025 03:51:14 +0000
asID: 984
IP address blocks: 45.206.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58691 (0xe543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:51:14 2024 GMT
Not After : Dec 10 03:51:14 2025 GMT
Subject: CN=67639836-8375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:1d:15:32:28:87:9d:83:08:4e:e6:6c:24:
27:87:df:1f:5f:12:83:65:c0:6d:1d:53:2d:d7:03:
80:b1:50:a8:d9:40:f0:e2:ee:18:8d:15:38:40:ea:
b1:82:aa:40:8d:82:d3:2a:16:25:65:fe:e1:47:58:
36:aa:a1:d8:16:40:2f:33:95:c9:7c:ee:ad:1d:aa:
84:70:7b:5a:00:32:eb:09:c4:db:78:60:e3:11:be:
07:17:45:dc:aa:31:a3:f8:ec:2c:eb:04:f8:05:cb:
ea:95:3b:b6:e6:0c:81:80:44:6c:6f:8d:e7:6b:f1:
4f:13:a3:51:83:1b:2b:37:02:be:6e:ba:29:d2:f2:
c9:55:a8:3e:5a:6b:45:86:09:cf:46:21:4b:25:7c:
ed:bf:dc:12:89:c6:35:b2:62:3f:d8:71:de:fd:df:
8b:d8:cd:7d:84:2e:4f:13:42:fc:f8:0d:a9:1b:7c:
fe:da:51:54:42:6b:c7:bf:50:01:53:b7:f3:74:78:
7f:03:39:56:4f:c3:3b:47:79:ca:18:6b:a1:56:cf:
ed:bb:96:d3:1e:1b:cd:fc:7b:88:eb:a0:67:7a:ef:
db:bf:4d:df:c7:15:cd:70:36:dc:05:2b:f7:7b:e5:
12:45:13:05:44:2e:91:28:3d:2b:99:b2:8d:63:58:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:2D:53:7A:C7:BB:F1:6B:C5:BD:0A:34:F9:77:C7:31:22:E8:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8054DE72BDBC11EF9E06445A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:86:e1:bb:a5:18:9d:dc:1a:23:b3:3a:44:1f:4f:e3:eb:99:
71:a5:c5:ad:be:3b:51:12:d2:07:03:9c:6c:3f:fa:80:e7:71:
b0:aa:88:61:e5:57:b7:ab:59:f1:2d:0a:b1:ab:dd:36:f8:f1:
03:28:c5:a5:23:db:12:59:e7:7b:c8:aa:7c:68:ee:e5:70:0f:
19:0e:22:c9:70:47:cd:55:f3:d4:b9:f2:bd:a0:2b:07:fb:b0:
eb:29:08:50:8e:48:6b:f2:60:28:47:d6:92:a8:ff:6a:24:4b:
18:0c:fb:0c:61:95:c5:3b:c9:a4:54:18:0c:0f:f0:84:0f:10:
55:0f:8a:bb:87:af:d8:7f:64:1b:3e:39:f2:d4:aa:ac:45:0f:
d2:07:1d:84:a3:88:0a:38:9c:77:b6:13:7c:6d:85:82:2f:dc:
5b:f1:e1:a7:8c:1d:0e:55:cc:c4:4c:7f:94:3a:a4:72:97:2e:
1e:30:18:ea:2f:f5:34:79:e3:71:ac:cd:cf:2d:b0:2b:54:9d:
46:28:84:71:04:cd:1e:13:4b:dc:77:71:0f:74:a0:1b:0b:c8:
09:be:48:03:05:f6:57:72:a1:9a:d9:81:a5:a4:96:84:fa:ba:
88:fc:5a:cd:5d:af:d7:29:4f:aa:c8:c2:b2:4b:c8:16:ca:69:
d5:1f:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:28 2025 by rpki-client