Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95AB07D4C6C611EFA0A47891762E951A.roa
File: 95AB07D4C6C611EFA0A47891762E951A.roa (raw, json)
Hash identifier: mt9kGlR+jdFbNmHX+bOts0SM9vsf+lCIdrgDXoegm7g=
Subject key identifier: 69:A5:D0:CA:9F:7A:E8:AA:66:BD:75:F3:1A:46:84:02:47:BA:DE:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F25B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95AB07D4C6C611EFA0A47891762E951A.roa
Signing time: Mon 30 Dec 2024 15:56:09 +0000
ROA not before: Mon 30 Dec 2024 15:56:05 +0000
ROA not after: Fri 14 Mar 2025 15:56:05 +0000
asID: 142002
IP address blocks: 45.197.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62043 (0xf25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 30 15:56:05 2024 GMT
Not After : Mar 14 15:56:05 2025 GMT
Subject: CN=6772c299-6b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:27:2a:ff:56:1a:3f:24:04:45:e1:cd:e2:
3b:ed:1e:94:9e:7c:74:35:6a:cf:10:73:2d:de:e1:
b4:c4:75:84:98:d7:2c:da:77:e2:4b:c3:d9:99:fe:
02:77:c6:b3:e7:96:4a:5c:3a:e3:65:d7:99:8f:c4:
9a:58:0e:31:41:f7:97:3c:f6:02:df:7e:09:65:b4:
6a:ba:64:ad:36:85:1f:ed:9e:c6:14:b2:ec:59:66:
9b:1e:47:30:25:98:ad:08:dd:e2:c9:18:ee:f5:6f:
a9:8f:e2:31:f4:01:3d:bb:1d:c5:39:1f:9a:67:35:
8d:64:31:fb:65:d0:e8:ea:5c:14:2a:1b:8c:9e:74:
f8:f5:1c:e7:30:be:78:eb:4b:01:7e:f2:25:e3:02:
ca:e2:81:53:b5:ec:09:d1:76:a8:30:b6:e5:d3:3e:
12:f3:a1:1d:be:c8:f1:77:ea:21:ed:21:4c:6f:14:
a1:34:3b:a4:db:7b:10:31:6a:6b:b7:db:f3:d0:fb:
d9:de:ae:61:be:1a:fb:3f:e7:d1:c7:b4:f6:4e:34:
c5:15:35:ca:f4:dc:21:31:9b:63:af:45:fd:62:3b:
5f:a3:08:6c:5e:bb:98:74:e3:a9:da:94:cc:f0:b9:
41:ad:ff:da:31:88:ad:1e:ac:8f:f3:f8:cb:de:5e:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A5:D0:CA:9F:7A:E8:AA:66:BD:75:F3:1A:46:84:02:47:BA:DE:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95AB07D4C6C611EFA0A47891762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.13.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d1:49:9a:17:ab:79:0a:9f:f5:8b:7a:97:cb:ba:68:75:3f:
f9:b8:ff:f9:f5:bd:5c:09:dd:60:0b:14:fc:fa:53:4e:cf:03:
7e:ea:86:5d:ba:10:00:a7:4b:15:11:c8:a0:4a:73:d1:96:f7:
5e:17:75:1a:71:2f:50:2b:c9:41:5d:80:78:2f:c7:cc:c3:d5:
d0:b4:b4:c2:7d:83:4c:77:57:4a:4e:f1:0b:a2:b9:25:6e:33:
40:77:03:b4:3c:c0:f1:c0:c6:fe:78:2d:b3:3a:74:30:08:dd:
d1:6c:c7:c1:3a:c6:1c:4b:23:87:91:82:a2:f6:ec:56:65:ee:
67:2c:e7:45:14:91:df:a7:04:e6:d3:9a:a5:95:85:56:6c:61:
ba:6e:10:11:ce:06:35:6c:dd:4e:33:3a:52:1b:d0:a8:62:40:
8c:d1:73:0d:43:44:26:a3:0a:6a:d9:e8:3e:e8:8a:d7:cd:2b:
60:e7:81:05:e4:43:39:7b:8f:fc:39:79:63:5b:34:f4:21:93:
44:78:20:e4:51:ef:e6:b7:71:92:50:db:e7:f3:b9:3a:3c:8b:
02:a3:39:a1:ff:66:f1:0b:13:ce:20:84:32:31:48:b3:c8:e5:
83:26:57:f5:2b:c9:ff:01:b3:cf:c0:bf:64:f5:7f:17:c8:17:
aa:a9:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:25 2025 by rpki-client