Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C5423FEC38E11EF97A978A1762E951A.roa
File: 8C5423FEC38E11EF97A978A1762E951A.roa (raw, json)
Hash identifier: E680rjXVZ0dio2FAGU72mkBlBh5pUuZrFI3YyJbFYdU=
Subject key identifier: 2F:89:8D:89:92:94:30:1A:69:EF:2B:6B:02:12:8B:B0:49:13:69:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ECCF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C5423FEC38E11EF97A978A1762E951A.roa
Signing time: Thu 26 Dec 2024 13:37:28 +0000
ROA not before: Thu 26 Dec 2024 13:37:24 +0000
ROA not after: Sun 12 Dec 2027 13:37:24 +0000
asID: 17561
IP address blocks: 45.196.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60623 (0xeccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 13:37:24 2024 GMT
Not After : Dec 12 13:37:24 2027 GMT
Subject: CN=676d5c18-1694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:5c:9a:2a:19:16:6c:cd:f9:57:bc:87:47:
cd:b4:c1:63:1b:6d:57:e4:cd:d4:1a:d0:3f:37:d9:
b0:84:ec:fa:53:73:64:b1:54:cc:46:c9:b9:fc:d0:
cd:7d:d6:49:18:b8:87:12:05:bc:62:2a:e8:43:27:
06:dc:ec:9b:e7:ae:c5:41:0d:83:57:2a:f1:df:28:
7c:eb:f8:ed:a8:6e:05:26:1d:6a:1f:fc:51:6e:5b:
e6:c1:95:b1:d3:6f:da:12:3c:13:04:be:2d:fc:e4:
c8:1b:ec:04:cd:c0:bd:bf:1d:24:de:3f:63:d0:27:
2f:52:83:50:c8:42:0f:be:b2:98:3a:d0:4a:7b:f5:
5e:b7:a7:0d:9d:3c:52:c5:c7:67:c8:75:95:b7:dd:
26:b5:8c:c2:03:9b:73:1c:79:05:e1:b7:95:a3:96:
d1:5f:2d:ff:53:14:6c:20:05:90:5e:68:e5:b6:a4:
c9:c8:77:86:47:1f:3b:af:af:25:95:55:1a:e0:d9:
b2:d4:90:27:88:53:0c:34:86:47:4f:f2:81:e7:d9:
76:14:36:b5:97:60:65:b5:ad:48:19:f4:0a:15:51:
bc:5d:e5:c8:92:0c:42:27:a3:05:85:23:f5:80:4e:
87:5d:b3:01:b3:c7:2a:fc:e4:f2:3d:63:5c:43:30:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:89:8D:89:92:94:30:1A:69:EF:2B:6B:02:12:8B:B0:49:13:69:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C5423FEC38E11EF97A978A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6c:9e:c1:8d:26:13:de:3a:63:b8:38:70:6c:c3:ed:8e:02:
5e:36:bb:8d:ad:0d:ce:86:82:27:f8:34:6f:ff:10:16:2a:7b:
5f:09:f2:1d:99:3e:c2:bc:05:2e:02:53:c6:1c:bc:8b:30:3c:
3c:d7:20:88:6f:12:b5:de:b1:10:81:34:04:31:5f:4f:2d:05:
91:ba:6c:ba:71:fc:1a:a0:5a:05:78:53:a5:d9:be:26:41:5b:
da:d4:a5:ff:7b:d2:37:33:fe:10:95:86:2c:49:ad:43:39:7c:
50:b3:0e:b0:b3:31:5d:21:ca:a7:05:5c:46:66:77:55:59:94:
a6:a5:3b:d5:4b:11:61:a9:99:09:2a:37:79:78:d2:99:fe:a4:
ed:e3:8a:66:74:1a:4e:1c:1b:6f:4d:dc:21:56:65:8b:e4:d1:
14:9a:ad:19:2b:cc:29:9b:b3:65:8d:d3:5b:e6:32:7a:58:6d:
0c:5e:45:ee:49:a3:2e:25:70:81:3f:86:80:c7:3f:4f:c5:a8:
a2:df:60:6c:b3:53:3f:98:cc:f0:04:67:28:84:2d:6f:61:e1:
8b:03:57:bb:83:3e:55:88:24:d6:d0:16:3c:3d:4e:fe:ef:a6:
59:cd:23:12:b7:5c:94:db:26:b1:1c:b8:62:8f:de:7b:f7:59:
27:a3:2e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:57 2025 by rpki-client