Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5860788C3BC11EF8BF91145762E951A.roa
File: A5860788C3BC11EF8BF91145762E951A.roa (raw, json)
Hash identifier: z+V3PiKEj8NbowFN0M2p9ky5peRj0XIP4eaBbfFrWls=
Subject key identifier: 8E:08:88:86:C0:10:50:D4:35:45:43:F2:5D:97:34:4F:9F:C3:B4:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5860788C3BC11EF8BF91145762E951A.roa
Signing time: Thu 26 Dec 2024 19:07:27 +0000
ROA not before: Thu 26 Dec 2024 19:07:23 +0000
ROA not after: Sun 12 Dec 2027 19:07:23 +0000
asID: 17561
IP address blocks: 45.207.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61113 (0xeeb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 19:07:23 2024 GMT
Not After : Dec 12 19:07:23 2027 GMT
Subject: CN=676da96f-d8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:e7:46:e2:78:ef:05:ef:43:87:0b:e5:1a:
19:56:a1:05:14:ff:3b:c0:c1:62:44:b9:37:9d:a5:
7b:8a:7f:fb:05:7b:5f:ea:98:17:8d:27:ce:11:1e:
02:6e:83:10:16:35:a1:cb:2b:9f:d8:a0:24:be:49:
f8:de:a9:2a:97:a1:01:ce:46:2f:ed:aa:84:9f:6f:
54:d3:3a:9d:f5:21:75:27:04:ec:34:5b:70:5a:c8:
89:d3:8a:06:d9:4e:35:f9:69:3f:8f:1c:d1:96:e7:
de:f4:db:22:0a:0a:c6:a2:bd:68:31:ae:79:12:21:
f6:e5:ea:1e:aa:8e:5b:7e:c7:b6:93:66:89:23:cb:
8d:c9:d1:eb:ce:90:f7:95:04:71:db:40:02:cb:3c:
e1:cd:be:f1:64:4a:c5:c6:cd:56:0d:0d:ab:19:dd:
90:0d:be:f8:3f:e8:9d:d6:9f:4d:fb:00:ee:c1:1a:
3a:aa:86:1e:c6:35:fa:12:d4:4f:dc:b4:2f:df:98:
8d:c8:a0:87:f3:47:be:86:4f:aa:70:a8:54:02:de:
3b:53:4e:4a:60:48:49:70:7b:01:a5:40:99:3c:5e:
a2:45:fc:1a:35:e1:62:7c:02:24:d7:d8:58:ce:0c:
60:3f:c1:a5:18:39:a5:d6:3f:d5:c9:24:2c:1d:f6:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:08:88:86:C0:10:50:D4:35:45:43:F2:5D:97:34:4F:9F:C3:B4:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5860788C3BC11EF8BF91145762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b9:2a:96:16:ab:21:5c:35:bf:97:b2:ef:9e:bd:03:b3:f5:
95:65:a3:5a:bc:2c:28:c6:f0:af:a3:f8:80:90:c2:21:47:48:
0f:4f:82:5f:b7:5f:92:3c:a1:78:03:55:95:b9:63:99:06:c3:
ad:e2:52:ab:b7:3f:b0:68:33:5f:c1:55:f2:93:01:44:c4:bf:
41:87:9c:ad:c3:c5:52:e6:1f:4e:d8:52:7b:cd:e2:fc:b9:3e:
b1:bd:0f:79:28:17:ce:be:e6:12:5f:b1:fb:48:ac:58:9a:e4:
b8:35:79:d9:c5:22:69:8c:b9:17:40:a5:74:e3:12:45:a9:0b:
06:ec:a1:34:4e:7d:34:f9:60:38:06:a5:68:a0:3b:08:06:f7:
21:80:be:1f:67:9a:c6:14:34:26:bf:72:35:cb:b6:8d:22:91:
01:46:dd:fc:48:8f:a2:f3:4a:64:5c:91:bf:40:21:9e:61:b6:
36:0f:bc:3d:82:b5:a5:c1:d5:9b:2b:45:1d:d2:dd:6b:92:4e:
d0:08:84:85:91:70:1e:96:63:6d:51:b9:cb:0b:18:5d:aa:68:
03:fb:ea:fc:b0:8d:3d:64:95:e3:bd:cc:3d:8a:d0:78:7c:47:
a0:80:02:a3:18:73:b2:12:cd:f8:07:96:dd:17:f4:35:93:29:
0d:3b:1b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:29 2025 by rpki-client