Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA43CBE4A8BC11EFBBB70D98762E951A.roa
File: BA43CBE4A8BC11EFBBB70D98762E951A.roa (raw, json)
Hash identifier: hWiHV72RHnFTdlK6ChlDVGhhhe8KaXkZ0XMb0eWot1c=
Subject key identifier: A6:55:F8:AE:ED:FD:9C:55:FF:DF:26:B7:1A:1A:07:CA:08:AB:79:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D7B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA43CBE4A8BC11EFBBB70D98762E951A.roa
Signing time: Fri 22 Nov 2024 10:30:00 +0000
ROA not before: Fri 22 Nov 2024 10:29:57 +0000
ROA not after: Sat 08 Nov 2025 10:29:57 +0000
asID: 133847
IP address blocks: 45.200.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55221 (0xd7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Nov 22 10:29:57 2024 GMT
Not After : Nov 8 10:29:57 2025 GMT
Subject: CN=67405d28-8f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:97:a0:67:c4:1e:16:c0:85:27:52:90:77:
06:f0:b6:20:54:cc:72:41:5e:ab:a7:ad:a1:92:f5:
62:c9:a3:74:e6:05:e1:ff:3b:a0:8e:54:58:61:67:
df:c7:07:ca:74:cc:5c:54:74:ac:25:5e:73:b8:d8:
92:7d:ff:37:01:b5:50:57:f2:82:9e:99:cd:cb:17:
a2:25:f0:dd:cb:e6:55:ed:8a:4d:75:47:46:2b:ec:
e9:9f:34:54:a0:3f:5d:29:88:21:f2:62:fd:89:61:
b3:16:40:85:dc:df:e8:77:36:b4:03:2d:12:70:93:
c8:3f:ff:48:2f:a2:59:3a:ff:5e:86:c3:ae:91:83:
54:eb:34:40:b1:d5:47:de:6b:00:90:49:5f:52:6b:
d9:cf:36:9b:20:9f:59:0f:f1:67:be:dc:f2:91:ba:
0c:fa:0c:b8:47:28:22:a1:c3:1d:ac:0e:12:6f:c2:
4f:99:5a:88:14:2a:2a:83:7f:f3:1e:04:4a:fc:63:
14:70:eb:5c:0d:d9:29:35:d9:c2:d4:9d:a3:b9:bd:
a7:e8:a8:fb:08:0e:a2:be:d8:38:69:0d:b3:05:60:
70:3e:68:1f:72:55:4c:ce:01:fe:fe:bc:7d:65:4c:
c8:f2:f5:af:ac:44:fb:7b:f8:c4:22:85:db:b3:0d:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:55:F8:AE:ED:FD:9C:55:FF:DF:26:B7:1A:1A:07:CA:08:AB:79:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA43CBE4A8BC11EFBBB70D98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.92.0/22
Signature Algorithm: sha256WithRSAEncryption
40:d0:27:3c:2b:a9:37:31:2a:2c:32:ab:b8:60:08:ac:bd:c3:
7a:6a:a5:4a:62:d1:49:79:99:03:54:fd:14:80:e5:23:51:42:
56:c3:14:ea:57:18:39:db:6d:f1:7f:42:78:f7:a1:f2:ca:ca:
6e:26:bf:42:81:23:22:c7:43:4a:9f:6b:49:e5:3c:39:81:ff:
3c:69:77:44:79:35:a3:7f:d2:15:63:a4:c5:0b:c6:3c:84:d9:
a4:2e:09:cd:04:d5:80:9f:40:80:47:99:7e:de:e4:45:0d:f6:
84:dc:ea:21:b2:ca:63:f4:03:d0:a5:07:8b:06:42:9f:a3:b5:
18:13:23:67:78:f9:7b:9f:07:40:b9:d2:92:db:17:7f:37:15:
9c:2a:7a:17:06:82:b6:17:5b:0c:4e:37:27:d9:d8:68:34:8a:
d6:18:b0:11:d2:55:90:d5:04:98:d1:55:69:8e:09:bf:78:3a:
cb:7d:06:db:69:15:16:df:9c:c5:b3:81:31:8f:bd:58:5b:8e:
2c:b9:06:ee:b4:d1:e8:bc:39:c2:12:f7:30:ba:00:7f:dd:4f:
0f:d3:08:08:ff:89:51:07:f7:de:64:8f:41:76:79:97:5b:38:
66:24:7a:a3:04:77:80:1f:2f:a9:7c:38:0f:8d:97:06:8a:53:
41:f4:89:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:29 2025 by rpki-client