Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6EC94B0CBE611EFA0DB14B1762E951A.roa
File: B6EC94B0CBE611EFA0DB14B1762E951A.roa (raw, json)
Hash identifier: DdF5rtjH7cjTWkREFm9rzdF6EQ8Y+CLmv+d8IX4323k=
Subject key identifier: 87:D3:48:F8:CA:29:53:AC:B2:AD:84:55:78:51:46:EB:6C:F7:34:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F812
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6EC94B0CBE611EFA0DB14B1762E951A.roa
Signing time: Mon 06 Jan 2025 04:28:44 +0000
ROA not before: Mon 06 Jan 2025 04:28:41 +0000
ROA not after: Sun 09 Feb 2025 04:28:41 +0000
asID: 137897
IP address blocks: 45.204.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63506 (0xf812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 04:28:41 2025 GMT
Not After : Feb 9 04:28:41 2025 GMT
Subject: CN=677b5bfc-101d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:55:0a:e1:bb:2a:ec:e4:10:ff:c0:ec:33:
1e:ca:54:b9:f6:53:07:48:05:81:72:3e:8d:f6:32:
5f:36:1d:1d:c5:72:41:3d:30:c6:92:21:48:a5:ac:
a7:84:c1:2e:86:3e:66:6d:f4:2f:88:bc:0d:a9:15:
53:5d:48:14:97:78:2a:72:72:61:da:9b:e3:84:fa:
f6:21:00:fc:d7:4f:4f:58:47:bd:96:dd:94:df:80:
23:e2:f5:f8:6b:47:cb:1d:25:6f:26:a6:cc:66:83:
6f:59:cf:0a:8a:9d:24:e9:76:59:ac:76:ee:63:57:
cd:06:00:04:26:2c:77:1d:ea:1d:bc:f2:59:58:96:
51:33:cd:35:84:b0:2e:5e:bf:41:21:cb:f9:d1:ca:
19:d9:a5:2b:29:03:2c:55:c5:6d:10:56:2b:73:9d:
1f:fb:82:65:cb:6a:40:a4:c1:d7:bc:91:2b:bd:33:
20:31:0e:9f:45:46:1f:d3:3b:91:30:68:f7:7c:94:
b2:e9:aa:05:59:6a:ba:4d:77:d3:64:43:a1:58:b3:
53:5c:c4:0b:f7:a8:df:b1:f7:08:2a:0d:d4:ad:1e:
c5:7a:d6:02:20:60:03:a4:52:e6:aa:bb:4e:7e:75:
bd:0a:2f:74:8d:6b:13:5d:70:d1:f6:d3:a5:f8:c2:
e9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D3:48:F8:CA:29:53:AC:B2:AD:84:55:78:51:46:EB:6C:F7:34:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6EC94B0CBE611EFA0DB14B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.142.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:99:25:0c:db:30:1f:7a:93:df:73:a0:58:ba:de:3a:9d:ef:
36:ff:d5:31:45:bd:58:52:cd:1c:19:82:8c:58:49:6f:d8:fd:
c6:82:21:96:14:1e:5f:33:dd:0e:c4:d6:f3:a9:4e:62:70:c2:
9b:a1:b4:61:04:5b:da:f7:da:45:9a:ad:c6:6d:1b:04:f4:cf:
f9:8d:6e:e0:c9:b4:bf:aa:36:a7:f5:69:38:12:a7:f1:3c:1f:
46:7d:87:5e:5b:74:86:3e:f1:6c:61:39:cf:82:35:c5:61:76:
b7:ea:98:98:f7:17:18:c5:6c:01:9f:a2:25:23:9f:75:7f:e2:
f3:9f:ac:9f:ca:72:6b:53:c4:39:ab:20:9f:b5:4e:5a:bb:5b:
b4:db:47:7c:26:da:f4:c6:f2:5a:da:49:ed:7b:6b:de:67:2c:
a1:60:e1:93:44:22:2e:32:ee:ec:4c:8d:d3:c2:2d:0d:88:6b:
f2:9b:b0:a5:71:11:d2:c3:5b:79:dd:3b:69:fe:09:8b:82:50:
9f:c8:99:0e:7b:64:52:47:2d:ca:0e:49:9e:6e:3d:5e:8f:5f:
3f:44:f6:99:51:6b:ae:2d:12:72:89:87:ba:96:88:2f:03:90:
f6:38:02:94:19:3e:2b:fa:5d:a4:d4:2f:6e:ae:89:af:a9:2f:
e8:ab:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:58 2025 by rpki-client