Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5A185B4BE8711EFB085A357762E951A.roa
File: B5A185B4BE8711EFB085A357762E951A.roa (raw, json)
Hash identifier: M/BWzgCAyTUs/3izSOhxw/XhDGlZkFcdW3K3kG9H8l0=
Subject key identifier: C1:6F:A8:53:E9:75:42:80:63:29:0F:A6:72:76:27:30:BB:1C:15:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E69C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5A185B4BE8711EFB085A357762E951A.roa
Signing time: Fri 20 Dec 2024 04:05:55 +0000
ROA not before: Fri 20 Dec 2024 04:05:51 +0000
ROA not after: Wed 10 Dec 2025 04:05:51 +0000
asID: 984
IP address blocks: 45.206.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59036 (0xe69c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 04:05:51 2024 GMT
Not After : Dec 10 04:05:51 2025 GMT
Subject: CN=6764ed23-fa79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:60:16:b0:30:f4:c8:80:8d:e3:55:66:cc:
0f:24:65:d9:8b:83:ec:a0:da:f0:b9:24:cf:6a:11:
90:93:9f:db:3d:42:61:64:2d:07:e4:88:2c:b3:41:
e8:6e:3f:a3:96:56:50:99:63:1a:81:87:4b:32:6a:
00:e4:03:b9:22:27:0a:43:19:d6:29:23:2b:0e:ae:
f1:0d:7c:b5:f5:29:b8:e1:4c:48:f8:35:3f:de:74:
f3:9d:33:6a:e8:92:48:de:0f:cf:1f:09:52:08:4f:
22:9e:0b:33:fd:ee:6e:11:cf:0d:21:3f:e8:6d:61:
1a:f9:e5:86:3a:6c:9b:98:33:6b:ad:0b:5b:cd:0e:
e8:56:69:09:be:79:92:42:4a:70:21:47:45:8e:f5:
e8:d2:67:6d:40:d6:df:0a:17:21:9b:df:64:0f:5e:
9c:79:a5:21:74:cb:c1:b0:62:45:2b:a6:e1:53:5c:
48:54:c5:c4:af:f2:69:56:72:61:6d:cd:57:39:61:
a5:26:22:13:d1:b5:a9:57:1c:22:3b:10:42:f5:81:
14:d0:14:5e:13:65:36:3e:74:74:2f:84:16:3a:a2:
d1:64:7e:c3:53:90:37:10:51:f9:40:57:63:b7:c9:
fe:d7:40:89:ec:f4:92:57:e1:09:0b:08:cf:d1:f5:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6F:A8:53:E9:75:42:80:63:29:0F:A6:72:76:27:30:BB:1C:15:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5A185B4BE8711EFB085A357762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.209.0/24
Signature Algorithm: sha256WithRSAEncryption
02:db:bf:3c:f1:f2:fa:f0:00:f8:97:c0:ad:02:87:85:9f:98:
19:aa:31:cc:05:75:77:40:89:16:50:7f:65:b8:78:c6:f6:d7:
64:8d:e3:aa:29:d5:45:90:bd:8d:55:81:89:44:7e:74:68:38:
4c:65:c9:d3:10:7e:8a:e2:1c:f8:28:c2:3b:3a:80:66:cc:82:
d9:8a:ea:39:59:bf:75:08:1b:c8:f9:ef:f5:80:d5:b5:ad:5e:
84:5d:03:1b:14:cd:ac:45:28:f1:05:9f:22:50:87:08:cd:da:
3d:d9:20:a1:e0:16:fc:a7:12:b2:a7:49:de:92:e9:bd:3a:e2:
db:3a:99:b7:55:7e:c0:6f:24:f1:27:6f:87:6e:29:0e:d5:48:
96:40:5d:84:0b:fd:a8:82:af:ef:1a:93:60:ac:54:a3:2a:d3:
e8:18:22:72:2c:16:6c:90:8b:e5:b2:5b:1a:09:a9:aa:8b:be:
d0:fd:8b:ca:a9:b8:56:c4:2f:1a:87:98:89:d1:e1:c8:e7:c8:
fb:77:a2:f4:a7:76:32:2c:de:91:7a:ae:79:b4:30:a5:3c:d7:
73:9e:99:39:29:c3:72:7c:7f:e2:ca:8c:8f:45:f9:4b:1b:29:
22:de:16:08:57:f1:10:2a:55:8d:39:44:f0:39:0f:f5:1c:5b:
df:67:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:12 2025 by rpki-client