Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4C5388AC3E011EFA06886A6762E951A.roa
File: B4C5388AC3E011EFA06886A6762E951A.roa (raw, json)
Hash identifier: NGvAcuIIum8gabBa+TchOnnoth3kLE6Z0Kprohm1xX8=
Subject key identifier: 28:58:A1:C1:53:84:78:1E:DE:84:25:9F:2D:7A:A8:3A:D5:86:42:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EEF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4C5388AC3E011EFA06886A6762E951A.roa
Signing time: Thu 26 Dec 2024 23:25:34 +0000
ROA not before: Thu 26 Dec 2024 23:25:31 +0000
ROA not after: Fri 12 Dec 2025 23:25:31 +0000
asID: 984
IP address blocks: 45.192.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61171 (0xeef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 23:25:31 2024 GMT
Not After : Dec 12 23:25:31 2025 GMT
Subject: CN=676de5ee-4570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:78:e4:fd:b6:06:37:1d:03:b6:14:ec:87:
37:05:fd:c4:16:5e:8c:68:d1:75:36:17:c4:71:7e:
f1:10:0f:a6:7f:39:f2:df:27:ee:f4:77:8a:ac:4e:
d5:d8:0d:2b:ee:c1:41:fc:38:8d:11:9c:5a:85:ba:
8a:e9:64:63:72:4e:57:d9:0e:1a:03:8c:1f:32:71:
6f:d5:05:b4:d4:eb:6e:18:26:24:8a:72:52:ca:51:
25:55:c6:a6:de:2e:60:8c:be:3b:98:d3:74:af:74:
4d:63:38:58:c9:6a:9f:c2:b6:26:a1:79:17:dc:b4:
94:f7:66:37:88:ec:21:cc:05:aa:6d:8f:d2:d2:7e:
3b:ad:5d:c1:a1:8b:a8:01:5b:4e:9d:71:8f:db:98:
98:70:c6:e1:ba:7f:10:91:01:52:47:25:15:0f:79:
02:61:44:c6:54:c0:46:cb:c8:69:d2:89:2a:24:8d:
1e:ee:84:39:35:b4:df:54:8f:8a:50:27:d8:f4:30:
5c:5f:32:ff:62:e4:9b:d2:57:b6:c6:e7:9d:dd:9d:
fd:b6:31:7e:90:07:c5:57:f9:99:a2:61:3c:39:2c:
dc:ea:11:3f:4e:c8:ff:06:88:5c:b6:ca:85:d5:e4:
d0:4d:e2:04:ca:c2:64:92:5f:60:9d:e7:ee:3d:45:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:58:A1:C1:53:84:78:1E:DE:84:25:9F:2D:7A:A8:3A:D5:86:42:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4C5388AC3E011EFA06886A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.166.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d7:3d:5a:e0:ca:25:fa:f3:61:4d:4a:0f:0b:1b:b4:b9:d5:
20:26:67:4c:4a:78:b8:56:36:c9:fe:ab:24:59:de:a2:ad:29:
f2:e2:8c:84:c6:a8:14:60:08:41:12:79:b6:3d:df:21:9a:0c:
41:54:b9:cd:1f:f4:ca:28:4c:d9:6a:51:76:f2:92:a7:6b:b4:
34:ba:1b:f4:4c:d8:51:54:6e:59:48:63:d6:95:43:87:bf:75:
6c:42:2a:3f:13:26:c5:91:f9:ce:80:8d:59:56:cb:88:ac:fb:
01:28:6e:fd:c3:60:bc:96:2c:89:59:3f:20:d1:53:9e:cf:2c:
29:7d:e1:d8:e0:04:6f:78:d1:32:8c:81:6e:93:77:45:ce:d8:
a8:11:8d:d9:ec:20:8f:90:b1:5b:7f:2a:29:37:4b:07:34:10:
df:2d:fd:3f:2e:15:58:bf:24:91:a2:93:96:0d:fd:db:6e:8f:
ad:01:66:7b:eb:7e:46:36:a5:d7:56:c3:06:29:66:df:e9:e5:
73:87:5a:15:1f:18:a2:2e:05:2e:f6:28:8f:46:c6:1b:c4:1c:
cb:62:6b:6f:c2:5c:a4:77:85:23:75:9f:f1:1c:bb:f3:ab:59:
79:80:04:6e:45:3d:36:f0:7c:12:b9:24:51:a7:1f:d4:76:d1:
07:c4:7b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:43 2025 by rpki-client