Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D1F12B4C8F011EFABDFE65E762E951A.roa
File: 8D1F12B4C8F011EFABDFE65E762E951A.roa (raw, json)
Hash identifier: po6uMyrbUkPUleg0j+JcoPpp30V+89nCe/G8QCiMjDQ=
Subject key identifier: 98:91:26:FB:2E:06:82:37:DE:28:73:80:8A:6A:A4:CC:8C:74:97:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F334
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D1F12B4C8F011EFABDFE65E762E951A.roa
Signing time: Thu 02 Jan 2025 10:01:36 +0000
ROA not before: Thu 02 Jan 2025 10:01:32 +0000
ROA not after: Thu 06 Feb 2025 10:01:32 +0000
asID: 215691
IP address blocks: 45.198.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62260 (0xf334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 10:01:32 2025 GMT
Not After : Feb 6 10:01:32 2025 GMT
Subject: CN=67766400-d4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:73:4f:60:c8:ad:a6:40:bc:10:85:dd:15:
6e:7d:5e:2a:57:82:19:dc:9f:8a:2d:9e:50:50:b5:
b2:6f:c1:58:63:02:51:d4:fc:4d:a2:61:40:b6:ac:
ed:fe:19:8a:a9:8c:37:39:02:18:ae:46:ad:be:06:
65:5f:96:f8:aa:50:79:b4:23:28:c8:12:db:4f:f0:
79:ae:af:31:72:e3:30:76:a2:3d:68:67:e6:04:16:
b9:21:e6:81:b0:93:81:b2:df:47:23:df:09:cf:d3:
22:8f:e1:f8:b6:19:22:60:88:1d:63:3d:5c:0c:56:
13:a6:cd:57:f6:4d:5f:cd:fe:46:ea:cc:23:a0:ce:
a6:1a:ea:83:04:71:9e:3b:49:38:eb:9e:8d:79:51:
47:86:8d:b4:85:a0:da:a6:6d:43:2e:e4:3f:ff:5f:
0b:c0:b8:3e:1f:7e:bb:26:d0:0c:30:d9:f5:f3:b1:
60:4d:e8:b1:f8:55:b6:4f:83:e4:e7:4a:9f:79:dd:
ba:9d:51:8c:c8:2d:1c:4f:15:3b:c2:07:95:ec:21:
77:03:77:30:18:f2:7a:e4:87:6b:fd:83:92:9f:c5:
f9:19:36:81:ea:38:0b:02:a1:2c:72:de:3a:42:ae:
79:c7:86:68:aa:76:38:29:f1:9c:9d:fb:bf:14:17:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:91:26:FB:2E:06:82:37:DE:28:73:80:8A:6A:A4:CC:8C:74:97:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D1F12B4C8F011EFABDFE65E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.54.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:28:a3:8a:2f:99:fd:f6:bd:3b:15:ee:25:d0:6d:ea:e7:28:
49:33:fd:0d:2e:0c:8a:c3:b0:fa:09:4c:58:fd:65:83:33:8f:
d0:a2:cc:e3:71:5b:e8:ae:47:b7:c4:11:de:aa:e3:13:97:59:
65:f6:0e:4c:17:5c:66:1a:80:b4:f9:f4:2d:f5:b4:90:49:43:
e7:84:94:99:1b:85:e7:26:e4:7c:ea:a5:df:45:9e:aa:47:37:
66:62:72:e7:3c:35:80:18:c5:93:ea:35:64:3e:90:fa:56:53:
9d:2f:76:7d:66:d2:f4:3d:29:7e:15:d3:02:8d:6e:a3:89:73:
a3:98:15:bc:0a:95:d6:1a:7a:00:20:34:c1:6f:66:80:19:e2:
ba:c2:0f:2c:13:15:56:5b:10:0b:1e:62:af:e9:de:14:a1:a6:
ab:4e:be:7c:5a:69:3e:85:5e:76:fe:33:70:0f:be:91:fc:63:
48:4d:cd:96:87:6e:f5:42:31:59:f0:9a:b5:68:3d:d9:0f:3c:
2f:45:2d:9e:2b:9d:cb:a8:e3:53:fc:56:e1:ad:9c:48:09:3a:
9c:aa:a8:fc:71:01:99:39:a7:74:a2:f6:fe:69:d6:fc:b8:a7:
f8:70:86:2b:c4:7b:c9:06:a4:db:7f:63:3f:e7:e0:1e:d0:bc:
e2:88:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:33 2025 by rpki-client