Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A11BA8CCBE7811EFB669676F762E951A.roa
File: A11BA8CCBE7811EFB669676F762E951A.roa (raw, json)
Hash identifier: 5HGmLhUhAOpDkbsmSiNLzHdG7c/fQ+/qeEn7Er0wqnM=
Subject key identifier: DE:E1:16:97:CC:43:48:7F:32:12:EA:E6:5C:14:62:4F:F5:55:A5:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E646
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A11BA8CCBE7811EFB669676F762E951A.roa
Signing time: Fri 20 Dec 2024 02:17:58 +0000
ROA not before: Fri 20 Dec 2024 02:17:54 +0000
ROA not after: Wed 10 Dec 2025 02:17:54 +0000
asID: 984
IP address blocks: 45.206.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58950 (0xe646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 02:17:54 2024 GMT
Not After : Dec 10 02:17:54 2025 GMT
Subject: CN=6764d3d6-0b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:bd:8a:bb:7e:77:12:81:a4:8b:b8:b4:b6:
e0:6e:08:c1:15:f3:f2:a9:30:27:1b:d9:2f:ac:bb:
91:80:d2:e0:4b:25:95:c5:7a:1d:3d:c9:71:f4:90:
17:ad:cb:32:60:c8:c9:1f:7f:d0:c2:88:83:21:52:
89:15:82:45:d7:d5:52:7d:c5:04:39:06:83:36:a2:
53:ac:8b:4c:63:fe:88:3c:97:e5:8d:c5:09:ae:1b:
b6:c0:6a:67:42:27:4f:34:c3:88:1d:97:94:5b:79:
4a:80:7c:6e:21:0c:60:ec:ac:c9:ff:bb:a6:64:18:
ab:0d:7d:07:44:1f:69:14:b6:1e:f5:ad:0f:a0:e6:
9c:fb:8e:45:d7:3d:10:df:b3:02:05:46:8f:e1:c8:
d9:4b:51:9c:4a:c6:44:c9:52:3a:8b:ab:f5:c4:c9:
5a:45:a3:1a:97:97:ee:fe:1c:61:b3:15:9e:a9:e7:
11:dc:1c:7c:28:d2:8f:fa:25:a0:a3:8b:eb:9d:e9:
e4:22:2f:c5:9f:38:53:ca:f4:6c:4e:00:98:fd:e7:
1f:d1:03:b7:35:e8:c1:d3:fa:1f:ca:ba:90:26:e5:
3e:e2:9b:7b:dd:9d:27:43:2d:ef:0a:03:6f:e1:b7:
40:88:39:50:f8:49:98:b2:ea:1d:37:85:7b:69:37:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E1:16:97:CC:43:48:7F:32:12:EA:E6:5C:14:62:4F:F5:55:A5:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A11BA8CCBE7811EFB669676F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.164.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c1:60:7e:53:64:b1:54:8e:ec:bf:4b:c2:d6:30:93:6f:6c:
90:dd:e5:d4:11:90:ec:fc:78:39:09:00:30:a0:25:06:81:ad:
b1:b6:5f:61:c1:3c:76:20:87:73:55:3f:05:11:d0:3c:30:c4:
5d:d4:d5:31:dc:0f:20:fc:1e:e2:df:0d:c1:dd:9e:5f:2a:af:
33:f7:bd:2c:40:a1:d5:e4:db:c0:f4:e1:02:08:98:bf:82:f5:
6e:6e:72:23:79:d9:33:0c:83:f4:a8:84:a7:ed:88:3b:60:0e:
a7:bc:5b:44:f5:09:5d:80:6d:23:a7:a1:d6:d1:52:fe:f8:bd:
01:b4:25:1e:1a:1a:8f:c0:3e:ae:a4:d8:28:15:42:08:52:d2:
c8:15:41:52:d8:09:b4:da:a2:4e:b9:dd:aa:5c:03:b0:8d:d9:
da:44:e6:bb:9a:e0:64:d8:66:aa:2c:54:e1:81:d2:f5:c4:86:
6b:ea:24:a4:a0:99:2c:06:a7:8e:cc:85:ba:ca:e8:12:58:02:
41:31:de:f0:56:21:18:69:0e:5e:60:95:16:50:70:de:96:86:
01:04:e3:87:9d:73:2e:fa:3d:04:69:93:d2:8c:6e:e2:b8:79:
bf:1c:9d:b7:7e:47:91:f3:73:93:12:b3:8e:3e:c7:c2:12:2e:
b6:63:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:47 2025 by rpki-client