Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2107802BDBE11EF8FF14967762E951A.roa
File: B2107802BDBE11EF8FF14967762E951A.roa (raw, json)
Hash identifier: FVzBgc8GMTOKA2VORsugbPh8V4/yrDg9YNP6fj9xp4U=
Subject key identifier: 7B:E2:3E:A8:FB:65:88:D8:4F:47:6B:0E:FD:19:6E:C0:D3:E8:2F:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E55F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2107802BDBE11EF8FF14967762E951A.roa
Signing time: Thu 19 Dec 2024 04:07:00 +0000
ROA not before: Thu 19 Dec 2024 04:06:56 +0000
ROA not after: Wed 10 Dec 2025 04:06:56 +0000
asID: 984
IP address blocks: 45.206.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58719 (0xe55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 04:06:56 2024 GMT
Not After : Dec 10 04:06:56 2025 GMT
Subject: CN=67639be4-e32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:2b:33:21:92:e1:d0:8b:ad:57:c1:5f:d6:
fd:8c:25:a8:18:4f:79:51:90:f2:c8:75:35:1f:e6:
c2:f1:cc:17:41:b2:3f:40:df:41:40:84:c8:82:99:
1e:4d:43:16:13:ef:3d:9f:0a:ff:53:d4:3c:aa:8c:
27:99:d4:a2:fa:2c:22:2c:d5:ed:0b:fb:88:c4:03:
be:65:8a:4e:f4:93:50:a2:19:b0:6b:2f:a3:e5:b8:
ea:10:ca:8f:11:fd:59:60:de:c6:cf:be:8b:11:1f:
43:dd:68:98:6e:5f:4c:b4:32:e9:20:03:fe:53:63:
c1:26:0f:27:16:05:69:13:88:bc:55:61:61:c4:b5:
68:f5:95:45:fe:45:6f:7d:00:7f:50:1a:1d:84:b1:
c3:6f:8a:82:f8:7c:90:d9:fa:e3:62:a8:1b:a7:ce:
c9:11:6c:ba:5b:3a:0a:1a:e1:5e:a7:b7:91:b6:90:
ae:b8:6f:d3:85:f7:e7:c3:89:4b:1c:03:de:98:73:
38:53:f6:83:f3:7c:db:3a:69:d8:32:b0:fe:71:7e:
ac:0a:07:b7:49:74:9a:d1:0a:33:1d:e5:de:bf:b9:
f9:17:63:46:2f:6f:ff:8e:45:bf:b6:11:1d:fa:c2:
0d:a4:1c:4c:2d:14:02:ff:5d:68:76:05:b4:87:1d:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E2:3E:A8:FB:65:88:D8:4F:47:6B:0E:FD:19:6E:C0:D3:E8:2F:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2107802BDBE11EF8FF14967762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:59:67:79:df:59:f3:15:99:14:40:01:55:11:c9:1d:e4:d9:
15:d4:2b:df:73:89:11:31:d0:b6:f5:ae:aa:c4:f0:8f:cf:5f:
c3:39:d6:b5:d3:31:da:55:c1:f9:8a:a2:21:97:f2:90:81:03:
45:f9:95:85:43:bd:4e:34:eb:d8:61:46:76:e7:f6:e4:58:98:
09:21:9e:73:4b:6f:13:2b:59:4a:21:dd:ed:0a:70:8f:4b:28:
f1:8f:46:15:72:10:d1:e3:57:a8:b7:fa:aa:75:f8:cf:5e:80:
c7:87:a0:17:cd:33:a7:d9:97:da:49:02:71:9c:38:61:e9:34:
29:2a:3e:19:30:9a:e9:05:8d:33:92:99:1b:57:86:ba:89:4b:
60:14:d6:38:ac:95:ce:e9:d0:62:a7:48:46:2a:30:6f:a0:04:
20:70:c1:46:4b:80:de:76:cd:99:9d:fd:50:ab:d5:7c:a6:f6:
ed:dd:ad:b3:56:5a:0d:dd:9a:95:aa:3d:dc:c0:89:43:a9:73:
40:b5:a2:11:10:64:40:e0:cd:e8:0e:ba:0e:c7:78:fe:30:7c:
e4:c3:a1:c2:64:1a:f7:15:b1:42:0c:e0:85:8b:d4:88:93:01:
09:3a:4a:b9:e8:e9:cc:ac:1b:7d:36:89:96:63:36:49:d4:6d:
23:a4:35:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:18 2025 by rpki-client