Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A23EBF82BDB511EF9E1544AB762E951A.roa
File: A23EBF82BDB511EF9E1544AB762E951A.roa (raw, json)
Hash identifier: x4bim3W/XUJNScX3hC2BjzzV4vMHbb1BlZ17TOoeWpE=
Subject key identifier: 35:33:14:04:ED:F9:C6:BB:AF:97:C0:58:85:B4:17:15:D0:19:F4:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A23EBF82BDB511EF9E1544AB762E951A.roa
Signing time: Thu 19 Dec 2024 03:02:08 +0000
ROA not before: Thu 19 Dec 2024 03:02:04 +0000
ROA not after: Wed 10 Dec 2025 03:02:04 +0000
asID: 984
IP address blocks: 45.204.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58603 (0xe4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:02:04 2024 GMT
Not After : Dec 10 03:02:04 2025 GMT
Subject: CN=67638cb0-0cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:94:71:d4:f0:4f:f5:21:7d:48:64:88:7f:
ea:7f:31:b4:f2:d7:9b:c7:c1:d1:fb:47:a3:df:51:
43:52:a1:c4:82:a2:5d:70:75:9b:6a:e4:79:39:e6:
42:a4:c1:ab:59:25:1b:de:c7:c4:c8:31:3b:44:02:
0a:17:bc:0e:a0:2d:ef:8d:fc:b4:05:8b:cb:9e:00:
a5:d5:c4:58:8e:a8:e9:ee:cb:0a:46:91:be:eb:ea:
97:d6:3e:65:63:c1:05:c7:73:aa:7c:bc:d6:13:73:
81:09:45:31:6b:d2:5f:2f:04:f9:f4:37:d0:3e:4a:
b5:0c:ec:7d:62:24:08:c1:5c:0b:39:4b:d4:fd:00:
b8:c3:93:cf:71:0e:06:d4:45:ec:a4:c5:68:d2:be:
4b:7b:21:19:bc:91:b1:d1:d7:b7:af:ee:ba:c2:c3:
84:c8:40:eb:05:1f:c8:31:25:9a:b3:bc:5d:b0:1b:
36:8d:78:c8:1a:56:14:ef:25:27:4e:8d:f7:fd:23:
fa:41:4d:ac:41:c4:71:0f:d7:c1:7d:8c:2e:8e:1f:
1d:31:06:5d:8e:4d:6a:b1:aa:86:fe:9e:25:1e:a1:
25:73:eb:22:b1:bb:97:3a:09:42:7e:97:4e:c5:ba:
de:e2:5c:5d:cf:11:ba:c8:11:50:53:be:9a:bb:82:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:33:14:04:ED:F9:C6:BB:AF:97:C0:58:85:B4:17:15:D0:19:F4:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A23EBF82BDB511EF9E1544AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.160.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fa:0e:12:63:2c:52:49:1a:7c:43:af:57:26:15:d1:39:19:
e2:b2:a6:6a:d9:2b:ef:5b:17:f3:a9:6d:43:19:ee:0c:c0:ca:
76:41:22:18:d5:e2:e6:ce:41:30:f7:40:00:f9:f6:15:98:64:
55:d3:92:fa:75:bd:d1:85:d2:0b:f0:04:08:1f:28:a5:2d:b8:
4e:db:bb:82:32:8f:72:70:44:02:77:47:2e:a9:f9:ef:a0:78:
b2:9e:40:e4:82:48:49:8f:f6:6b:b3:ca:38:d4:3b:72:99:3b:
c3:4a:00:1c:77:59:80:63:4e:76:9a:23:f9:07:48:13:a7:29:
4e:c2:03:f2:0a:7f:b4:2f:b8:3a:9a:23:f7:1f:c9:f0:33:00:
2b:fa:72:f3:d3:7b:54:dd:d2:03:14:f3:12:20:92:90:3f:f5:
08:44:3e:87:45:30:31:f8:da:72:d2:a5:44:ee:33:92:a1:7b:
e6:53:ae:9d:f5:1c:4d:18:c2:97:98:fc:0a:33:ae:9d:1c:ca:
3c:3b:90:de:9c:a9:07:8d:12:fa:79:90:7e:fd:ee:43:57:35:
46:fc:06:a2:a9:f8:6c:c0:e1:80:05:33:50:9c:63:e8:9c:31:
db:0c:66:31:91:44:e9:f7:63:9d:3f:57:21:b6:70:fe:03:67:
da:43:1e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:18 2025 by rpki-client