Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D45DBC2AD5811EFB04D32A8762E951A.roa
File: 9D45DBC2AD5811EFB04D32A8762E951A.roa (raw, json)
Hash identifier: 49vweZRmtnWrxN2xi/wq/v3JezXNLFJWFDrYCPIRjxo=
Subject key identifier: 6F:E3:19:97:80:14:03:6A:64:A3:BA:E1:09:16:C0:68:9B:B3:EC:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DC37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D45DBC2AD5811EFB04D32A8762E951A.roa
Signing time: Thu 28 Nov 2024 07:15:58 +0000
ROA not before: Thu 28 Nov 2024 07:15:54 +0000
ROA not after: Tue 11 Feb 2025 07:15:54 +0000
asID: 7029
IP address blocks: 45.196.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56375 (0xdc37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Nov 28 07:15:54 2024 GMT
Not After : Feb 11 07:15:54 2025 GMT
Subject: CN=674818ae-cf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:ad:fe:b3:ac:a7:f1:c5:fa:ed:4f:97:6c:
cd:f1:de:10:3a:ee:4e:01:97:f8:94:98:75:b0:44:
da:f8:9e:58:44:c9:20:ca:b7:8b:77:dc:15:d8:2d:
81:e2:dd:0a:05:17:2b:ec:52:ce:81:d3:62:ba:1b:
ec:8c:42:1f:44:39:41:3c:c5:91:6b:38:43:c2:25:
e6:a5:84:b6:87:ee:cb:3b:9c:d7:83:b4:b3:19:77:
41:09:ee:e3:02:59:98:88:e2:13:71:a0:fd:fc:b5:
62:0e:6b:1d:3a:7b:87:5f:3f:e4:0f:1e:da:ee:56:
a9:a8:ae:79:89:ee:67:49:95:f2:5e:a1:6f:eb:4a:
a8:dd:65:a9:aa:72:c5:4f:93:40:08:cf:02:dc:ed:
94:1e:35:3a:3c:9a:9d:70:eb:96:3e:f0:29:73:fc:
39:2a:2b:a1:62:24:29:dd:a1:96:84:7d:98:ec:7f:
fa:d2:89:a0:1a:de:e3:c7:47:d0:ef:40:1d:b7:d9:
9b:10:f1:a6:37:2a:10:3d:84:a8:84:43:d2:b7:9f:
02:d1:2c:15:d1:c5:24:4e:b1:9c:22:28:a4:81:84:
4e:fd:d1:e0:a7:22:4f:ca:e2:9a:89:5a:b8:ba:a1:
d6:b9:85:4a:8b:64:8c:2b:28:7e:ed:59:cc:b2:d7:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E3:19:97:80:14:03:6A:64:A3:BA:E1:09:16:C0:68:9B:B3:EC:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D45DBC2AD5811EFB04D32A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.52.0/22
Signature Algorithm: sha256WithRSAEncryption
94:01:14:5d:e4:aa:67:7a:9a:97:f8:fc:15:b1:28:f5:eb:92:
1a:c1:95:78:8b:36:99:5c:86:c9:09:18:f4:28:32:20:90:92:
9d:ee:fe:bb:b0:b0:59:d2:51:96:33:b0:ad:17:ad:c4:48:df:
46:44:37:a3:ec:77:f1:9b:61:d5:37:31:e3:bf:5e:ee:f2:79:
dd:9e:2e:c7:5a:be:4f:2f:5e:cc:f7:84:ba:1e:fb:3f:46:a8:
b7:9f:4b:18:33:79:9e:a4:ac:56:77:cc:c2:20:bb:0d:ca:71:
e2:53:1a:48:d3:97:05:ac:c6:62:54:c4:b6:66:ea:02:7c:50:
d9:81:22:7f:e5:13:f8:d1:5b:49:58:19:a5:78:e7:01:b6:26:
cb:41:4f:68:8b:67:5f:ef:1d:9c:5b:40:89:7f:95:d7:a7:f6:
96:fe:db:b4:d4:38:28:b6:56:0e:71:40:7d:2b:18:e4:c7:e9:
c8:81:cc:cf:04:ee:4a:2e:32:1f:ef:c0:20:a9:8a:3e:a6:d0:
f8:76:00:76:52:8e:d5:7c:66:38:40:32:e7:f4:af:e9:f5:20:
f4:bd:5c:3f:bb:2a:a1:a1:c8:4e:89:8b:fa:3e:cf:3a:9c:f7:
57:f3:64:e9:2c:0b:eb:77:f4:74:c5:f5:79:a9:9c:70:ef:87:
be:5f:3d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:09 2025 by rpki-client