Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90229836BD1111EF97E202A3762E951A.roa
File: 90229836BD1111EF97E202A3762E951A.roa (raw, json)
Hash identifier: /vVPRhkgv1VHgX5/1y3tPj3CkuwgEd7HfbpF07J8lIw=
Subject key identifier: E9:68:29:BC:20:4F:57:8C:0D:14:84:82:0B:BD:BA:48:A4:3E:1A:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E488
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90229836BD1111EF97E202A3762E951A.roa
Signing time: Wed 18 Dec 2024 07:27:40 +0000
ROA not before: Wed 18 Dec 2024 07:27:36 +0000
ROA not after: Fri 26 Dec 2025 07:27:36 +0000
asID: 152711
IP address blocks: 45.202.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58504 (0xe488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 18 07:27:36 2024 GMT
Not After : Dec 26 07:27:36 2025 GMT
Subject: CN=6762796c-eb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:92:a4:d8:23:8b:ab:a3:78:b7:0d:fd:16:
03:8c:f3:1b:d3:a6:f5:5e:89:19:fb:ce:ff:2e:c2:
1d:32:e9:87:d0:9b:a0:16:e4:14:04:3b:05:f8:ff:
13:8d:66:b6:35:21:13:2a:0f:95:19:24:06:58:8b:
a2:e4:63:fa:b1:78:d2:f1:9c:3d:e1:65:fa:ab:d5:
26:fa:c6:f1:90:ce:33:2a:1e:63:fc:ca:6f:9b:cf:
b1:e1:0e:a4:44:bf:90:3e:f2:32:27:61:49:d3:dd:
25:52:7a:f0:4c:bb:79:6a:45:1b:0f:94:ef:14:22:
62:d4:60:c9:9e:0c:e4:61:b7:ee:47:1e:e6:fc:52:
94:26:af:b9:f0:7e:56:63:85:de:09:74:6e:7f:1e:
97:21:05:ea:1f:e3:2a:6e:d3:92:72:83:8f:c4:00:
e6:0c:5f:d7:67:8c:50:5e:c8:26:5c:06:ca:9f:66:
dc:0a:71:dc:9a:4c:22:f6:05:dd:fd:6f:77:25:93:
e9:be:cb:99:a8:07:d5:4c:18:a1:ce:bf:69:fe:9f:
24:9b:55:59:73:ec:58:46:1c:be:d1:34:b4:1a:d0:
51:75:55:73:9e:e5:9c:04:4e:fd:bf:bd:e6:02:a6:
d1:d4:8e:f3:11:75:d4:9f:bc:0e:2c:94:ef:68:27:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:68:29:BC:20:4F:57:8C:0D:14:84:82:0B:BD:BA:48:A4:3E:1A:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90229836BD1111EF97E202A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.210.0/23
Signature Algorithm: sha256WithRSAEncryption
38:af:14:aa:8e:16:de:d1:15:9a:d3:c9:f0:6c:cc:ca:20:71:
ec:56:f2:b0:a2:44:d0:47:64:ff:2c:89:cb:37:48:b5:0c:b1:
a6:ae:19:ee:22:b1:0a:a3:69:38:38:1f:92:cd:8a:b4:cb:4b:
0c:e2:54:fa:d9:80:cc:7f:6e:54:cd:e4:85:c4:4f:59:11:c3:
61:76:57:30:ed:a5:04:6b:02:0e:b3:4f:b5:f6:a9:98:3a:31:
a2:0a:f4:82:be:c9:ab:8e:f3:84:d0:5c:c7:fe:00:80:d5:df:
5b:8d:97:ab:42:3a:3d:03:0a:ff:dc:52:bf:b5:f4:f5:fd:8f:
51:82:34:08:d9:25:2c:a7:9c:74:85:66:62:66:5f:59:b1:89:
44:7e:4c:62:22:08:32:54:ed:4b:25:2d:5a:0d:0d:94:ab:f1:
6b:bc:35:11:22:a4:6a:46:08:ff:72:4c:5d:c9:96:7f:3c:1a:
d1:58:d6:cf:b3:c4:52:6f:a0:61:35:c1:aa:5d:7f:b2:42:99:
7a:a2:61:b9:ed:5f:a6:65:93:79:08:aa:84:09:06:44:24:5e:
7c:17:e4:ef:42:d2:be:40:8b:05:14:10:76:f8:e7:5d:09:24:
f9:3c:4e:14:cc:1e:9b:33:3c:57:16:5d:0b:aa:9e:3a:26:02:
5f:56:0a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:13 2025 by rpki-client