Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CD31D0CC3ED11EF8D74CE78762E951A.roa
File: 9CD31D0CC3ED11EF8D74CE78762E951A.roa (raw, json)
Hash identifier: udPS5rpHcmiPHXotI8inJVj+YF6GmCzBTiWUw/MDCrY=
Subject key identifier: D1:69:D3:B8:20:20:58:41:5F:97:00:FE:48:F5:71:2A:F4:1C:06:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CD31D0CC3ED11EF8D74CE78762E951A.roa
Signing time: Fri 27 Dec 2024 00:57:58 +0000
ROA not before: Fri 27 Dec 2024 00:00:54 +0000
ROA not after: Fri 12 Dec 2025 00:00:54 +0000
asID: 984
IP address blocks: 45.192.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61228 (0xef2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 00:00:54 2024 GMT
Not After : Dec 12 00:00:54 2025 GMT
Subject: CN=676dfb96-10e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:8b:04:83:1c:ec:cd:11:bb:ef:8b:ef:76:
39:19:8b:5c:6a:c5:d5:6c:5b:d6:6e:ea:3c:a3:c3:
00:52:61:78:4f:25:f2:80:7d:75:43:bf:74:79:c4:
f6:b9:33:b3:f3:3a:26:64:88:41:a6:87:3e:fa:9f:
af:4d:39:fd:e0:51:7a:3e:27:90:d7:84:4f:6a:04:
96:98:6b:b2:21:b8:73:6e:03:90:2b:35:e7:68:b6:
1b:27:09:74:a1:e2:9d:6f:86:17:7e:2e:45:3c:f8:
ab:38:92:d6:bf:0f:a4:75:af:7d:48:68:0b:c5:ba:
33:da:f5:cc:1f:7b:8b:b9:34:00:c5:c0:e7:30:08:
0d:36:f5:96:cb:87:35:ae:c1:0e:88:2e:f3:8c:44:
5d:6f:ab:07:9f:95:59:3d:49:b7:39:ff:fc:92:1b:
ba:de:b2:be:14:50:72:5c:13:27:0f:5e:81:bf:75:
a9:6a:1f:e0:92:af:0c:56:58:34:17:c8:86:c4:ff:
d3:3b:c3:e0:39:16:bf:ba:97:5b:c7:44:76:a4:f8:
08:17:a7:92:27:ec:3c:cb:74:df:f0:d8:cc:ce:5b:
35:b7:b7:d6:a3:bd:48:36:b3:d8:f1:9e:2c:22:98:
15:12:ab:21:33:de:e5:67:b6:6f:d5:eb:78:3d:fa:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:69:D3:B8:20:20:58:41:5F:97:00:FE:48:F5:71:2A:F4:1C:06:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CD31D0CC3ED11EF8D74CE78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:bc:6b:f5:5c:5e:3f:50:47:62:3f:47:82:6d:46:02:f7:e3:
ad:80:fd:52:e1:24:91:e1:55:52:10:67:ab:6d:58:df:7e:1b:
72:0d:17:ac:df:dc:21:fc:9a:87:55:7a:7f:e1:d6:3a:2e:7a:
d5:2f:fe:8a:2d:1b:3d:d8:5d:24:51:29:27:08:ad:6e:92:f4:
e1:a3:a4:36:9b:0f:f6:e1:0a:2e:d1:94:19:b5:a4:ce:4c:9c:
6a:74:2c:ff:b7:85:b1:09:d8:a5:2a:30:4a:60:f5:49:e2:b8:
1e:55:28:35:82:31:80:ef:38:ef:54:d1:39:e3:38:02:54:73:
d7:76:a2:de:cf:fe:02:44:e2:90:0e:9a:49:e1:a1:b2:20:fb:
c4:dd:fe:db:c3:e9:99:62:6c:e0:0c:80:b5:62:2b:ec:22:83:
b3:74:b4:67:6b:a0:f8:d9:56:5b:f4:0e:9b:0d:34:38:fa:85:
87:a7:6f:4e:c8:27:fb:8b:04:ff:47:47:a3:04:a6:9a:aa:01:
4d:20:dc:9b:e0:5b:af:33:b8:a9:a1:39:43:e4:ca:a4:bc:a8:
6b:f8:41:9c:30:ae:87:60:36:2b:61:2a:c5:99:2f:c8:09:9d:
2c:31:ef:65:c3:f6:c3:5b:40:04:50:b9:a6:7b:03:f8:80:7e:
79:93:71:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:04 2025 by rpki-client