Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E0AAE34BE7911EF929FAC76762E951A.roa
File: 9E0AAE34BE7911EF929FAC76762E951A.roa (raw, json)
Hash identifier: 8NRU8KxKdnV6tOLVuBNvTuDFimSteZFd5PynatsGAA8=
Subject key identifier: 80:F4:B8:3C:E4:A4:CF:FD:20:46:04:27:F9:45:A3:54:12:44:6A:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E652
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E0AAE34BE7911EF929FAC76762E951A.roa
Signing time: Fri 20 Dec 2024 02:25:02 +0000
ROA not before: Fri 20 Dec 2024 02:24:59 +0000
ROA not after: Wed 10 Dec 2025 02:24:59 +0000
asID: 984
IP address blocks: 45.206.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58962 (0xe652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 02:24:59 2024 GMT
Not After : Dec 10 02:24:59 2025 GMT
Subject: CN=6764d57e-1cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:66:7b:2f:8d:64:c2:48:78:47:52:9a:ed:64:
f7:95:5b:62:ac:3d:cc:bf:8a:be:55:e8:c7:d1:7b:
fe:f3:42:73:3e:c7:b4:70:0c:b4:9d:a2:a4:4e:41:
a0:e3:f2:86:a2:82:53:d0:06:25:1f:03:68:1f:b8:
8b:d0:a7:1b:e5:07:3d:f6:16:4e:94:53:9b:77:99:
13:98:85:f3:30:5b:95:94:9c:0c:b7:2d:1d:fa:a6:
a7:29:1c:89:e3:8b:79:3a:42:ff:ec:39:f9:bb:97:
73:3b:46:57:e2:5a:8e:90:f6:11:c0:39:63:c6:76:
e1:ef:72:77:af:9d:f5:6b:2a:76:8a:a5:7a:f3:8f:
54:b9:2c:f9:ed:f9:47:b3:7e:6d:98:27:8e:23:a2:
4d:6f:42:d5:6b:63:67:d4:f2:7f:0f:3d:e3:cb:25:
c8:f9:aa:97:5d:d8:4c:d0:bb:91:78:cf:1f:a5:73:
76:1b:ca:26:01:b0:b0:4f:32:fc:d9:dc:51:9e:20:
a0:6f:c1:99:09:db:6c:68:bf:a5:83:0e:a1:bb:d8:
41:57:a8:3a:42:a4:76:b8:f6:0c:fd:5a:3a:90:d2:
03:33:a0:52:28:91:cd:42:ad:42:db:1b:ba:a2:b9:
ca:59:d6:3e:b7:9b:80:cf:4a:34:fb:c0:ca:0c:20:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F4:B8:3C:E4:A4:CF:FD:20:46:04:27:F9:45:A3:54:12:44:6A:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E0AAE34BE7911EF929FAC76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.170.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8d:cd:f3:11:aa:5a:9d:2b:73:be:9c:58:59:40:87:7a:1b:
4e:4f:93:51:9b:04:f2:0f:ce:a8:ae:35:e4:41:b1:1d:1a:0a:
30:9e:f0:8d:f0:1e:29:c7:da:a5:1b:c0:7f:d7:7f:5e:fa:8d:
28:d0:0b:e6:a5:2e:73:ec:71:84:c9:0b:4f:62:d3:a1:a8:8c:
86:d2:2a:68:bf:3d:a9:93:21:32:30:8f:7b:d7:1e:cc:7c:ba:
f0:65:5e:4b:c5:06:32:e3:31:51:75:e5:a5:da:b7:92:8b:c4:
06:47:b9:b6:67:33:77:bc:02:a4:ab:32:89:84:54:3a:a0:c8:
2b:40:f1:10:7f:72:65:f2:f9:c0:b4:ca:dd:2c:f0:bd:cc:46:
19:24:4d:92:14:77:74:21:3c:1e:81:d3:1d:0e:f2:c7:67:11:
94:e9:53:47:c3:97:ee:64:e1:bb:83:b5:fa:dc:07:04:c6:bf:
ae:09:ff:68:13:f4:af:05:10:dc:30:f4:5a:9a:70:da:34:28:
66:7f:72:c2:06:48:47:2c:92:65:56:7a:67:9a:6a:ec:2f:3f:
b1:fe:68:1f:0d:97:5c:63:83:22:79:1f:a4:c7:4d:de:eb:d1:
f2:5d:fd:16:3d:41:e1:16:6c:02:66:60:8d:6f:da:d4:ea:b6:
84:76:5a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:35:48 2025 by rpki-client