Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A51FB8DEC3E411EFA1752CBF762E951A.roa
File: A51FB8DEC3E411EFA1752CBF762E951A.roa (raw, json)
Hash identifier: 6OvVrnNZjcagZCxSdqcLGnasVzQIeZENVsPhpQZju7k=
Subject key identifier: 68:63:10:F2:09:9A:D4:CB:6D:C9:A9:5C:F9:B4:59:3B:32:FA:16:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A51FB8DEC3E411EFA1752CBF762E951A.roa
Signing time: Thu 26 Dec 2024 23:53:46 +0000
ROA not before: Thu 26 Dec 2024 23:53:43 +0000
ROA not after: Sun 12 Dec 2027 23:53:43 +0000
asID: 17561
IP address blocks: 45.192.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61211 (0xef1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 23:53:43 2024 GMT
Not After : Dec 12 23:53:43 2027 GMT
Subject: CN=676dec8a-0381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2c:11:49:73:f6:10:00:ef:85:41:a5:23:83:
61:58:8f:f3:63:de:4f:6c:55:14:ee:6b:5f:8b:69:
c5:ab:c8:81:ed:01:33:8b:b6:6c:f4:17:9f:10:81:
65:71:80:3a:66:5e:7d:d0:5f:1f:9d:4b:67:7d:83:
7e:a7:57:16:a3:c5:f7:2b:ea:08:02:db:f4:c5:33:
8d:b1:e1:8f:11:a8:0c:1e:94:3e:02:40:b3:52:53:
19:24:bf:54:30:e8:0d:6f:c9:9f:6f:3a:21:31:86:
27:c8:90:aa:83:76:64:d0:3c:f5:74:53:17:26:f1:
9a:34:7d:ec:12:43:f0:ef:db:eb:d1:ca:15:a2:88:
89:3b:b2:fc:3c:96:e1:8f:57:d4:27:4a:08:95:b4:
d0:bd:b6:d9:5f:a2:85:76:1f:87:45:3f:34:50:7e:
09:ff:12:b0:6b:9a:d8:2f:0b:a9:23:89:fd:86:37:
49:2e:00:26:45:7c:67:a3:d2:71:44:98:c9:d2:75:
fc:5e:83:3b:0c:ae:e4:6a:4d:66:bf:b7:fb:f6:d7:
eb:52:68:c1:1b:ff:a7:91:4a:f2:04:8a:33:e2:99:
28:4d:ba:82:da:97:16:6d:4d:4c:bb:74:fd:5d:95:
3d:cc:ea:11:5d:71:b9:ba:19:0e:1f:2f:d8:17:31:
b3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:63:10:F2:09:9A:D4:CB:6D:C9:A9:5C:F9:B4:59:3B:32:FA:16:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A51FB8DEC3E411EFA1752CBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e0:f6:72:de:75:60:2b:28:35:66:47:ca:83:88:c5:f8:05:
65:ee:ea:8d:d0:77:5d:98:85:d8:a8:2a:dd:61:f8:3c:2e:c1:
e3:e4:7d:c6:89:f7:ce:36:c2:16:a1:03:03:c0:0f:43:13:15:
90:19:ab:b7:a1:42:3f:1d:ed:30:ea:7c:81:45:4c:c3:32:dd:
87:36:8f:38:4b:f7:3a:54:bd:c5:98:7b:29:a8:4e:18:08:06:
3e:fc:66:b3:2f:d8:ea:18:a7:ea:27:4e:3f:89:8f:d7:63:d4:
4d:64:54:a6:79:48:27:39:2c:76:cb:e9:ab:ca:6b:67:ad:df:
56:cb:6d:70:c2:89:d6:37:c2:e3:d7:b7:5f:62:aa:c1:7c:86:
84:23:8a:6f:78:2f:5e:5b:f6:7e:a6:7e:d6:4e:57:8b:47:ea:
b6:03:3b:98:82:b1:ec:9c:ce:ec:97:ef:51:15:6f:d9:b2:89:
f5:96:30:0d:8a:07:b7:14:5f:5e:26:ad:65:5a:f3:76:b9:82:
c5:a8:8b:e2:5a:69:f6:52:02:58:84:e2:5e:4e:f9:82:aa:6b:
52:4e:9b:1b:51:29:7b:29:39:bd:27:f8:1a:2c:c5:1d:60:3d:
3c:20:fe:fa:47:ef:c1:35:03:f4:74:31:b8:67:b3:03:85:bf:
f3:8c:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:28 2025 by rpki-client