Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B09F0A06C39F11EF8C45458F762E951A.roa
File: B09F0A06C39F11EF8C45458F762E951A.roa (raw, json)
Hash identifier: S+cUtXfBaG5X9e+5T5Iko3xHonMe59oCED7TD/w2WhE=
Subject key identifier: DE:BE:B3:12:76:E7:CC:C7:2A:59:41:B4:16:38:46:77:AB:C6:EA:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B09F0A06C39F11EF8C45458F762E951A.roa
Signing time: Thu 26 Dec 2024 15:40:10 +0000
ROA not before: Thu 26 Dec 2024 15:40:06 +0000
ROA not after: Sun 12 Dec 2027 15:40:06 +0000
asID: 17561
IP address blocks: 45.200.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60809 (0xed89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:40:06 2024 GMT
Not After : Dec 12 15:40:06 2027 GMT
Subject: CN=676d78da-01c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:a5:d2:d8:6c:6a:6b:32:8a:9b:8e:ed:1a:
92:c2:fa:e2:a9:83:e5:6b:fb:c3:e6:92:08:1c:61:
ae:ce:ae:9f:63:f5:ab:61:36:21:96:0f:cf:67:2c:
92:a3:d2:11:38:ae:e7:4c:04:d6:19:72:a8:26:3a:
25:0e:0a:f1:3f:a6:35:dc:fc:76:6f:4e:6d:bb:0f:
94:4a:0e:06:9a:50:a2:7a:38:ed:3c:e1:7b:9c:90:
93:9c:be:96:c6:3f:fd:8a:b6:cd:d4:65:35:8a:60:
9d:fd:80:62:16:63:f1:23:d1:9f:8f:cb:ac:6a:31:
bc:95:43:d5:6b:b9:1c:86:df:e6:5b:89:da:e0:65:
32:8f:c2:91:c7:a8:8c:19:0a:46:2a:b2:03:85:cb:
1f:63:06:a1:e8:9c:ca:e2:a8:e7:e3:c1:df:71:e7:
84:d7:28:8f:f0:18:6c:ca:0a:c2:4f:36:d3:a4:5c:
08:71:6e:34:b4:1c:3e:ef:80:5d:d6:11:6c:89:64:
61:73:f8:0c:d4:64:8b:41:1b:76:fe:d8:20:ee:57:
f6:be:05:3f:c9:5e:25:94:d7:a4:f0:9b:f4:02:15:
f1:87:3f:58:8c:20:ff:d2:8c:46:57:a7:a1:72:66:
ea:08:a2:e2:4d:4a:66:31:19:be:6f:da:a8:57:ad:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BE:B3:12:76:E7:CC:C7:2A:59:41:B4:16:38:46:77:AB:C6:EA:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B09F0A06C39F11EF8C45458F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.4.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f1:13:27:bb:6d:2c:45:16:6d:e7:14:98:ef:28:e5:82:d9:
50:09:01:0a:b5:17:b7:d3:78:28:7a:76:b4:1a:b6:9d:07:7f:
8f:7b:bb:a7:8f:12:22:53:90:38:c3:fe:4a:c6:e6:51:ab:71:
ba:26:93:e6:0f:a9:28:36:26:b6:d8:dc:8a:ad:6c:e2:a1:4d:
67:43:84:ac:c9:58:2d:89:81:3a:5b:8a:b2:71:ae:1e:17:fa:
13:56:c6:6f:96:8a:f1:e7:9c:65:02:76:2e:96:fc:9b:49:d9:
12:a6:ed:74:31:d2:d6:35:4b:8d:04:97:6b:0a:75:b5:51:c1:
c5:e2:4b:f0:72:39:1a:5e:4f:78:10:e0:c1:0d:6d:f9:29:2b:
c3:7c:fb:f7:fc:35:7f:35:61:3a:77:03:db:57:86:56:bf:ce:
52:94:e3:c3:e6:8f:93:ea:98:95:b8:e8:c5:43:be:ad:e7:70:
48:84:7e:26:6a:bc:ba:6c:b4:0c:9c:e8:e8:d6:5f:80:e8:54:
44:d6:30:70:a5:2f:b2:9a:08:2b:39:cc:64:2c:e8:6d:20:04:
8a:fa:41:ae:a2:d0:5c:85:c5:66:be:38:53:f4:87:69:11:22:
ad:a7:8d:27:f6:ef:b5:29:63:f1:35:c3:d3:5b:da:c6:57:ef:
0a:c8:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:40 2025 by rpki-client