Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEB24D04C3F711EF8A628C45762E951A.roa
File: AEB24D04C3F711EF8A628C45762E951A.roa (raw, json)
Hash identifier: DN8/DJVarLPjgJO52G/tvkngnNrU68PveQbJwE05we8=
Subject key identifier: E9:05:D0:F2:F7:B9:34:4E:64:C3:D5:91:4E:FD:DA:36:EB:9B:8D:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEB24D04C3F711EF8A628C45762E951A.roa
Signing time: Fri 27 Dec 2024 02:10:03 +0000
ROA not before: Fri 27 Dec 2024 02:09:58 +0000
ROA not after: Fri 12 Dec 2025 02:09:58 +0000
asID: 984
IP address blocks: 45.194.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61310 (0xef7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 02:09:58 2024 GMT
Not After : Dec 12 02:09:58 2025 GMT
Subject: CN=676e0c7b-f783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:0a:55:12:a9:7f:3e:3f:58:06:54:30:58:
d6:4e:5a:76:4a:47:2a:1c:d5:81:fe:82:26:64:67:
3e:a4:33:2f:02:31:7a:1b:ac:df:09:1f:ff:39:b3:
61:73:b6:9a:7b:04:9a:1f:25:e4:87:eb:df:5c:6b:
8c:74:0f:7a:a7:99:20:fc:4f:6c:e2:80:a7:98:b2:
47:97:ea:95:78:9c:ce:a7:60:0e:58:83:50:b4:7e:
6f:59:68:17:e2:14:3e:9c:52:ad:7c:4d:ec:b5:29:
3a:1c:bf:73:7f:7f:36:88:8f:bb:8e:0b:6d:fa:a5:
cc:57:ea:09:b7:79:18:da:f6:f0:cd:80:8f:86:a5:
65:6e:07:86:76:9f:a7:10:05:ba:74:63:d7:bf:f0:
91:3e:09:d1:af:31:ef:c2:4d:0c:50:b3:44:de:18:
28:88:01:e5:e3:c5:7c:ce:9e:be:20:d9:1a:87:8c:
2b:75:e7:97:67:81:48:a7:ec:78:e7:4e:1e:3d:43:
1f:a8:ac:67:de:54:9f:79:36:90:a3:94:e3:4b:fd:
0a:21:1b:5a:58:1e:e1:0b:0e:7b:af:22:21:5b:c9:
a2:6d:29:d2:2e:03:0c:ec:60:91:6f:a0:ff:6e:12:
bc:48:e2:52:4a:f1:e9:cf:27:5d:07:19:1d:9c:72:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:05:D0:F2:F7:B9:34:4E:64:C3:D5:91:4E:FD:DA:36:EB:9B:8D:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEB24D04C3F711EF8A628C45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a4:e9:bb:a1:0c:f0:53:8c:7b:ea:5d:4e:41:92:fb:14:43:
be:36:6f:61:33:7f:de:b0:b1:45:8b:47:70:5a:5c:b6:60:91:
b5:80:9f:57:b3:f5:03:b5:9e:74:d6:24:0b:2e:fe:10:ab:a4:
7c:86:07:98:1a:fb:07:74:93:e7:42:e2:02:fc:12:9d:1e:73:
20:5b:44:d1:0f:38:9f:61:56:69:0b:5d:d3:49:94:23:c5:4f:
33:f4:b5:9b:c5:8f:ec:0b:53:05:53:e0:32:c2:8e:78:3d:67:
d3:1a:f0:79:54:d0:78:de:cb:85:58:e2:39:c8:ae:1c:a9:56:
b5:64:ed:c6:6b:ed:66:d0:dc:4e:c9:29:af:ae:07:25:2b:a9:
ca:81:c2:43:1b:27:f1:69:c6:cb:ae:69:f5:68:9e:a0:96:f7:
7f:a7:65:0f:0f:d4:07:db:22:b7:56:a2:52:de:94:9f:18:54:
dc:ce:f0:48:e4:6d:df:f6:9a:e9:d8:12:cd:32:cd:ba:7c:cb:
54:77:5c:a6:9a:c7:05:d8:28:7c:f4:20:60:e2:5a:29:82:10:
b2:de:e9:74:a0:61:f9:7d:3c:be:d4:25:1b:a5:05:9c:fb:b6:
46:6a:c5:15:e3:2e:e4:99:59:98:4e:6c:44:39:0f:97:69:03:
72:0b:b1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:31 2025 by rpki-client