Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5056A5AC39A11EF9AA6416F762E951A.roa
File: A5056A5AC39A11EF9AA6416F762E951A.roa (raw, json)
Hash identifier: nJ3pnyUuWtp8+SXAMkdDxEVpjutnQJh3qjIFVkKFC1s=
Subject key identifier: DD:83:37:D5:21:10:1D:D1:65:7F:9F:80:0A:0E:CD:5F:87:51:6E:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5056A5AC39A11EF9AA6416F762E951A.roa
Signing time: Thu 26 Dec 2024 15:04:03 +0000
ROA not before: Thu 26 Dec 2024 15:04:00 +0000
ROA not after: Sun 12 Dec 2027 15:04:00 +0000
asID: 17561
IP address blocks: 45.197.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60755 (0xed53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:04:00 2024 GMT
Not After : Dec 12 15:04:00 2027 GMT
Subject: CN=676d7063-6379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:43:fc:8b:8d:31:1e:22:a9:32:12:8f:68:
2c:a3:0f:f7:bd:ba:0b:04:f0:16:a9:01:7f:44:a4:
ae:06:6c:c2:ba:3f:2b:ab:07:c0:a6:10:f6:61:2c:
b7:db:3f:29:f4:6c:30:75:20:15:0c:34:1a:11:8f:
04:ad:77:63:62:bf:57:4f:cd:2b:24:13:5d:bc:69:
1f:d0:be:0d:dc:a0:64:aa:5a:fa:ec:bf:25:2e:4d:
fd:1e:89:03:07:4c:75:25:7a:1f:84:82:a6:18:e8:
59:b1:d4:49:77:50:eb:27:e5:40:10:e2:25:0e:60:
b5:cd:dd:67:35:c5:96:cc:02:c6:41:f4:c0:21:94:
ca:af:0b:f1:91:90:5f:37:c6:c0:ee:25:f3:f2:c4:
ac:70:4c:83:74:70:d2:8e:5f:e5:a0:15:5c:38:c6:
42:06:47:9c:cd:cd:5d:df:c9:7e:c6:83:cc:da:3b:
07:8b:da:0f:fe:44:99:97:c4:2d:70:71:90:66:03:
6e:24:f1:91:b7:6e:00:98:2d:db:a6:8c:cc:65:ad:
91:9a:80:b1:a0:dc:28:c8:fe:cb:d7:b8:eb:8b:b7:
d6:91:26:57:4c:3b:35:56:83:be:c1:f0:13:29:09:
d3:8f:81:f4:ab:c3:f6:c3:96:fa:c4:cb:d8:df:e6:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:83:37:D5:21:10:1D:D1:65:7F:9F:80:0A:0E:CD:5F:87:51:6E:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5056A5AC39A11EF9AA6416F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.154.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9e:29:90:91:57:e5:6c:6d:0a:38:c0:6f:b4:27:88:79:94:
3d:7d:98:3e:68:fd:5f:d7:18:0d:56:f9:2a:98:7c:05:9c:49:
0f:8d:5f:7b:cb:84:29:52:38:33:44:c7:f9:d1:e3:a8:e1:30:
9e:9d:86:33:53:aa:e0:e9:33:5e:64:82:d9:cb:9a:79:3d:96:
79:e4:b4:07:01:00:f9:fd:31:1a:8b:a6:ba:46:1d:f5:6a:e8:
11:1f:8e:e8:c7:6b:ef:76:67:54:e6:73:b5:22:6b:03:c1:99:
35:96:70:65:8a:51:a0:23:e2:f0:62:5a:8a:60:98:5f:b9:1d:
fd:03:4e:63:58:dd:99:ee:db:ee:90:dd:0b:dc:10:71:db:5d:
af:47:41:26:15:bc:37:4c:17:17:19:4c:82:5c:f2:72:9f:03:
79:d4:a8:cc:01:9b:af:75:78:bc:88:71:e0:7c:82:83:dc:a7:
19:ef:fc:79:44:ce:46:66:14:dd:34:ab:94:61:e1:39:35:5f:
26:85:25:57:14:bd:84:e5:35:73:46:f0:ed:05:8e:c5:2b:b9:
05:d0:c6:8a:ec:62:ef:d1:ae:b3:75:2b:43:43:a8:09:de:01:
20:c2:06:9e:9f:91:b6:fb:b6:ec:ac:bc:dd:67:38:ff:f3:e8:
2c:60:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:12 2025 by rpki-client