Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8DB4FB6C32411EF82E29174762E951A.roa
File: B8DB4FB6C32411EF82E29174762E951A.roa (raw, json)
Hash identifier: 3lSQiyJfnGMXzFZ9i/Qxr0GKFK6XC3Gi22VCF1XCJ9Y=
Subject key identifier: C2:95:A6:83:BC:1C:BA:66:9D:3C:FD:85:1E:C8:D6:6F:05:68:E3:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8DB4FB6C32411EF82E29174762E951A.roa
Signing time: Thu 26 Dec 2024 00:59:56 +0000
ROA not before: Thu 26 Dec 2024 00:00:52 +0000
ROA not after: Sat 01 Mar 2025 00:00:52 +0000
asID: 984
IP address blocks: 45.202.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60013 (0xea6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:52 2024 GMT
Not After : Mar 1 00:00:52 2025 GMT
Subject: CN=676caa8c-1702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:0c:9d:ee:69:03:80:0f:fe:9d:0a:30:f0:
39:08:82:b5:22:fe:72:8e:ce:b7:df:b2:a6:4d:78:
e8:96:8e:bb:cb:b4:9a:55:22:80:3f:47:7b:15:0a:
b9:ba:c8:32:61:60:ec:ba:9a:fd:9a:48:01:7e:0d:
c3:f8:09:83:1b:1e:b1:14:03:b0:a2:0d:38:1b:12:
1b:a1:c8:f4:97:71:f4:eb:b5:aa:59:bb:62:98:fd:
f8:47:d8:82:75:fd:d9:c1:f2:4d:bd:a5:e2:44:d9:
bf:dd:14:21:01:87:83:6e:69:bd:7f:d9:31:9e:38:
20:da:49:9e:55:f5:39:57:b5:80:f2:cb:31:c4:4d:
10:75:4f:ff:d0:3c:3a:e2:08:07:1e:45:c8:97:c7:
75:5e:00:e5:1d:c4:c0:2a:37:7d:77:eb:2d:ce:f9:
d0:c6:87:84:3c:b0:a4:35:1f:be:bd:e4:4d:19:c2:
f2:a2:15:54:ae:ba:b8:7b:4b:ce:8b:18:c1:b5:67:
fe:e2:18:c8:d1:78:3f:81:e0:47:ae:2d:62:4b:24:
a6:5f:ff:16:44:f7:4e:78:64:bc:a5:cb:6a:4a:01:
ae:ee:ae:69:ca:97:a7:c3:93:2a:fb:ac:ee:ee:3e:
17:6b:21:8d:21:87:9b:b8:af:cd:26:06:8d:cb:c1:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:95:A6:83:BC:1C:BA:66:9D:3C:FD:85:1E:C8:D6:6F:05:68:E3:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8DB4FB6C32411EF82E29174762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:f5:6d:1f:7e:9a:53:35:38:0b:c8:e1:8c:c7:d4:4b:4d:3a:
3a:15:d9:83:4e:52:e0:86:02:38:43:12:77:26:c4:11:ac:6a:
76:00:1f:3f:7c:78:9b:21:01:67:ff:66:61:a0:77:ac:fd:8b:
be:b7:1a:45:96:1c:73:4d:77:4b:70:14:7e:89:7b:6b:23:e3:
86:a0:fe:0c:17:37:f8:f2:f4:35:2d:0b:28:46:c5:8c:c4:65:
51:9a:0a:de:9a:e9:2d:aa:17:79:79:18:2b:8e:eb:c4:63:b0:
04:91:00:89:14:07:c6:eb:98:3c:c5:ef:f6:d1:c5:17:7b:51:
c9:41:e7:37:43:13:b9:fc:f0:8a:32:67:f0:ed:dc:49:8e:72:
8c:2e:62:0c:10:bd:d9:2e:35:ba:af:1e:fc:e9:48:45:72:0e:
94:b1:4b:16:f2:7a:50:55:87:41:f9:01:da:94:fe:de:08:06:
01:e1:e3:94:fa:d2:48:48:01:4c:cd:8c:9e:79:b5:82:79:29:
fc:94:fa:93:b3:f3:71:48:b9:ff:73:0a:bd:43:db:59:75:ab:
c0:dd:99:77:c5:8d:ec:c1:e3:b0:bc:e3:4a:6e:de:ac:a2:fb:
ee:9f:73:da:86:46:13:71:28:4a:0c:52:e5:b6:19:c7:97:a7:
07:fb:7f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:21 2025 by rpki-client