Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8344A30EC3E011EFADCF84A4762E951A.roa
File: 8344A30EC3E011EFADCF84A4762E951A.roa (raw, json)
Hash identifier: U5UOSZE+VyfV8Cns5bf/i3CaLLdkir18mXJW59RaI2o=
Subject key identifier: E9:B4:AD:0A:DD:C7:55:5D:F3:A4:55:46:FA:B7:D7:04:1A:88:2C:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8344A30EC3E011EFADCF84A4762E951A.roa
Signing time: Thu 26 Dec 2024 23:24:11 +0000
ROA not before: Thu 26 Dec 2024 23:24:08 +0000
ROA not after: Sun 12 Dec 2027 23:24:08 +0000
asID: 17561
IP address blocks: 45.192.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61169 (0xeef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 23:24:08 2024 GMT
Not After : Dec 12 23:24:08 2027 GMT
Subject: CN=676de59b-e4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:4b:47:bd:f4:8d:66:94:43:ac:a3:7f:5c:
89:29:2d:c1:ef:e0:b5:d6:ff:e0:66:2a:c6:b7:7d:
a1:cf:61:ed:b7:60:82:b4:7f:8e:15:e4:d2:c2:cd:
b8:e9:f7:8b:10:90:c1:f9:0d:b7:c7:a5:f1:61:d1:
8b:cd:86:45:27:bd:6a:82:b5:4a:b5:67:4c:87:5c:
45:81:53:79:08:ea:b9:4a:71:92:71:ad:15:10:b3:
9b:32:62:7d:84:7a:a2:02:f5:be:be:35:ac:b6:71:
bf:c3:d8:ea:33:09:c8:ea:b9:71:bd:2b:65:77:f8:
e8:bc:43:c7:0f:ba:9e:06:0a:a6:37:78:d3:a7:7d:
cd:27:b3:9d:e8:cc:1d:18:7f:68:27:20:f4:ed:a8:
84:a0:df:d6:9e:7c:50:c0:8f:aa:b6:9a:78:9c:b2:
c6:72:23:16:91:7f:c8:6e:26:bb:71:1d:3a:20:6d:
d5:8f:b7:96:70:ab:22:04:10:25:fa:40:ef:bb:bf:
6a:2f:b8:60:59:0f:2c:ec:a7:2d:d7:c9:d1:f3:c5:
fe:e9:b1:16:06:3d:69:99:ec:52:0d:32:0e:b4:1a:
3d:7e:36:51:9e:63:19:e5:bd:1f:53:9c:73:c7:ff:
0c:f9:b5:06:86:a4:56:05:92:43:99:ef:f9:20:f3:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B4:AD:0A:DD:C7:55:5D:F3:A4:55:46:FA:B7:D7:04:1A:88:2C:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8344A30EC3E011EFADCF84A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.165.0/24
Signature Algorithm: sha256WithRSAEncryption
74:76:29:43:6f:29:32:fb:9c:43:cd:0c:bd:68:d5:ae:22:3f:
6c:89:1e:e5:67:60:84:95:3a:b4:c8:94:13:c4:37:5a:93:f7:
5c:ef:1d:69:b6:54:ee:05:6f:5a:8c:1a:0e:71:b6:ca:de:c8:
86:f1:49:bd:52:6d:ce:68:29:a7:c1:8a:ee:c9:36:d4:cb:83:
75:aa:b3:c2:57:78:7b:67:21:11:94:ca:f4:5d:0d:b9:d0:89:
5c:ea:f5:08:53:4d:ed:c4:85:93:9e:f1:fc:93:6a:b9:9b:8a:
de:7f:80:24:3e:4f:3e:80:2c:d3:d8:75:fe:7c:61:14:24:62:
bd:74:5b:38:a4:84:dd:49:fd:d3:c8:f2:92:a6:be:95:ea:70:
4f:55:49:c7:51:9d:c4:d7:e0:4e:97:01:c1:4d:be:54:08:2a:
71:a4:e8:67:b2:d7:43:56:54:6d:26:8e:6b:e1:4b:43:4e:c3:
98:ce:73:78:27:0c:54:59:f5:d6:82:6c:d9:11:d2:2b:cc:f7:
88:17:59:61:2f:bc:cd:73:6b:10:33:11:e7:a1:c8:9a:d6:2e:
5d:5e:b2:f0:9d:cc:0b:3a:6f:c1:e4:b6:7a:f1:2e:b3:e9:05:
a6:18:e8:bb:b8:a5:2a:56:91:d3:80:0f:66:52:c1:95:f9:bf:
62:bf:1f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:31 2025 by rpki-client