Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB567554C3BB11EFAC74ACBE762E951A.roa
File: AB567554C3BB11EFAC74ACBE762E951A.roa (raw, json)
Hash identifier: hy6o+0q8fW84DeNQlV+Umqtio6CFipK8r97JWTPrg3U=
Subject key identifier: 5B:BD:6C:AD:06:13:FD:61:E4:EE:F5:16:A7:A9:1D:35:B4:AD:46:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB567554C3BB11EFAC74ACBE762E951A.roa
Signing time: Thu 26 Dec 2024 19:00:27 +0000
ROA not before: Thu 26 Dec 2024 19:00:24 +0000
ROA not after: Sun 12 Dec 2027 19:00:24 +0000
asID: 17561
IP address blocks: 45.207.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61103 (0xeeaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 19:00:24 2024 GMT
Not After : Dec 12 19:00:24 2027 GMT
Subject: CN=676da7cb-cd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:c0:5a:b5:b9:4b:10:04:6b:58:37:7c:b6:
56:5d:42:9e:4d:48:8b:71:be:ee:1c:24:ea:0e:ef:
39:8d:88:3c:f7:4c:ee:0a:47:c7:0e:e6:e8:f0:63:
86:de:f8:8e:ad:67:b8:11:32:ef:2d:60:8c:cb:61:
26:1b:b1:9c:90:87:5c:c2:34:dc:6e:46:b2:3b:17:
60:50:32:fb:e0:97:b7:c2:58:74:6f:6f:4b:3e:bb:
59:0a:a9:88:1c:21:41:68:bf:76:d3:9a:a7:57:ff:
ab:ad:63:ab:1e:3b:dc:ef:f4:58:ff:b1:0d:05:2e:
11:a4:72:65:0f:a4:18:7b:1e:4f:96:c8:80:91:fc:
84:ca:38:0a:dc:e0:67:6c:c2:75:83:0d:f3:5e:bb:
7c:b7:4c:15:fb:0e:54:db:d3:ed:e9:fc:23:43:bc:
91:c8:43:f1:6d:6d:04:49:8f:fe:c4:7a:6f:ea:68:
e0:a1:30:82:da:f9:18:55:4a:52:30:76:f6:82:75:
84:12:b0:8e:a8:d3:bb:7f:4f:46:47:b9:a3:13:f8:
80:a3:b1:49:dc:12:97:85:75:1a:cb:2c:75:b6:9c:
4a:8f:9c:0e:77:9a:be:82:fb:1c:3b:ce:da:fc:3d:
06:9d:dc:b4:4f:74:9a:59:7d:6a:e6:d4:77:2a:db:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BD:6C:AD:06:13:FD:61:E4:EE:F5:16:A7:A9:1D:35:B4:AD:46:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB567554C3BB11EFAC74ACBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.152.0/24
Signature Algorithm: sha256WithRSAEncryption
48:45:8c:98:c2:3a:d8:e2:d0:96:95:21:1a:e0:9a:c4:4b:5c:
fa:52:63:02:c8:22:bc:11:f2:6a:a6:3a:ba:ff:19:84:70:cc:
dc:4a:77:d6:a8:3b:bc:30:7f:b8:5b:53:a7:ac:30:8e:a7:67:
58:e5:f5:46:21:35:16:53:0b:a6:bc:85:62:1c:96:0b:13:b0:
eb:0f:4e:a5:52:21:79:cb:0e:8c:26:ba:27:26:43:4b:e6:e8:
7b:92:f6:5f:b2:2b:79:d7:08:95:1c:40:dd:65:b0:6a:0a:32:
a4:60:88:60:f9:22:5e:5f:d0:b1:e2:c6:90:a2:5b:89:f2:1f:
53:90:9a:41:7d:49:f3:30:e5:33:d4:21:5a:59:de:0a:43:2b:
fe:49:9b:ec:79:24:b6:48:04:1a:2b:57:44:a9:c5:d7:70:c1:
0a:53:b7:4b:b3:db:fa:5a:b3:74:8d:6f:f9:ad:16:4d:9f:12:
29:32:4e:a2:e9:73:84:b6:db:88:5d:aa:93:00:de:01:b6:45:
9d:9c:e6:97:b2:d6:9e:ce:bc:c1:93:16:26:9f:21:64:9f:d7:
c2:53:57:d2:41:e9:bc:ec:4b:b2:b5:7c:97:3d:3b:40:14:e6:
5c:74:cd:d6:46:9e:9d:2b:9a:ef:fc:c3:7c:39:16:ba:b1:01:
0d:17:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:36 2025 by rpki-client