Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84871BF4BDB211EFB0A50296762E951A.roa
File: 84871BF4BDB211EFB0A50296762E951A.roa (raw, json)
Hash identifier: /d3t2bPacVCxiUArpNrUFZ0cdjK/4ar20fU7jVimnbw=
Subject key identifier: 73:75:03:F2:E7:F9:D5:1F:CE:6F:31:64:91:68:D3:3B:F9:8E:58:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84871BF4BDB211EFB0A50296762E951A.roa
Signing time: Thu 19 Dec 2024 02:39:50 +0000
ROA not before: Thu 19 Dec 2024 02:39:46 +0000
ROA not after: Wed 10 Dec 2025 02:39:46 +0000
asID: 984
IP address blocks: 45.198.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58563 (0xe4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 02:39:46 2024 GMT
Not After : Dec 10 02:39:46 2025 GMT
Subject: CN=67638776-ce46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:b6:85:d3:da:82:cc:5a:28:2c:3b:d2:d8:
96:a3:d1:7b:f0:ec:37:ac:d7:4f:ad:e6:de:35:6d:
f4:43:71:69:df:b2:0b:6c:8c:41:d4:f1:6b:c5:ab:
08:65:07:4b:93:2b:ca:fe:9f:90:8b:31:bf:7e:23:
03:c1:88:8e:e6:19:1a:1b:26:69:2f:53:e2:0b:bc:
9a:b4:86:39:aa:55:85:49:bd:00:bd:2e:04:58:a4:
9f:36:43:3b:4c:b1:92:fd:5c:f2:ba:7f:c0:74:a2:
86:31:5c:0f:b7:63:e9:7d:b3:3e:e8:f1:21:8d:57:
cb:49:ac:c0:ef:4b:af:7e:d6:47:ec:56:c5:18:7f:
b3:b6:3a:ff:52:9c:27:ec:64:9e:33:58:96:ad:9a:
19:ed:35:05:ea:f4:bd:c4:53:bb:d9:73:c0:62:46:
7a:f1:e8:18:d7:ef:07:f6:03:f7:2b:5c:52:b5:38:
ba:55:fa:3e:94:6e:72:16:39:8d:5e:23:63:cf:7f:
27:8e:78:71:9c:0b:35:75:62:af:92:08:e9:43:8f:
2b:9e:8d:b5:f9:fd:89:cd:cd:75:3d:06:d9:71:27:
ef:e5:f1:13:a1:0e:a8:8e:8d:ae:19:d2:ec:c6:3e:
22:d7:89:91:a4:03:30:58:cf:c1:4e:6a:ae:ee:48:
5f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:75:03:F2:E7:F9:D5:1F:CE:6F:31:64:91:68:D3:3B:F9:8E:58:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84871BF4BDB211EFB0A50296762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f5:c1:13:bc:f9:bd:28:4f:dc:ec:23:70:4d:68:17:10:a3:
5a:c5:52:90:46:54:6f:49:cf:aa:1a:39:dd:3b:b0:d2:3f:c4:
e5:8d:3b:05:a7:2d:e4:1a:ed:21:5e:1d:4d:c4:6c:66:ce:a9:
cb:ff:a9:7c:89:e6:1a:dd:2a:cf:5b:c3:3e:84:a1:21:28:44:
ef:6b:54:6b:c1:6f:23:54:52:5d:bd:e0:08:48:1f:72:5e:df:
6c:32:e6:d1:05:c1:39:a5:c3:34:78:fe:53:30:a4:bd:e0:31:
14:fb:79:28:b6:81:21:09:96:3f:a2:47:16:10:30:3b:be:b1:
75:fb:6b:05:eb:e4:3c:9d:9a:93:2d:67:4b:7e:76:5e:67:cc:
6a:55:78:dd:9a:85:a8:0b:e3:a6:27:c1:dc:10:ef:4d:65:ca:
be:91:f0:67:e2:e4:5a:9f:52:7c:50:fc:8d:5c:2a:60:89:0b:
85:5c:dd:6e:b3:08:08:f5:19:33:60:33:1b:28:fc:5a:6b:80:
22:1b:af:2b:5e:fc:cf:c9:ea:b1:ed:14:59:81:85:ba:81:80:
07:54:96:a6:39:48:7c:cc:9e:82:0b:72:04:56:0d:36:5b:92:
71:b5:be:db:be:2d:9f:86:17:c7:c0:ad:86:0d:e4:e8:c6:dd:
12:c0:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:35 2025 by rpki-client