Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC8D5C3AC3BF11EFB5BB4558762E951A.roa
File: BC8D5C3AC3BF11EFB5BB4558762E951A.roa (raw, json)
Hash identifier: Y3G9NMxit7sgruY5UMHAuhIIXB4Qc2PTU4j6yPljc4g=
Subject key identifier: C2:AF:20:F7:60:4C:E9:AC:1F:34:D8:3C:35:BF:9D:8C:B3:E9:34:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EED9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC8D5C3AC3BF11EFB5BB4558762E951A.roa
Signing time: Thu 26 Dec 2024 19:29:34 +0000
ROA not before: Thu 26 Dec 2024 19:29:30 +0000
ROA not after: Sun 12 Dec 2027 19:29:30 +0000
asID: 17561
IP address blocks: 45.207.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61145 (0xeed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 19:29:30 2024 GMT
Not After : Dec 12 19:29:30 2027 GMT
Subject: CN=676dae9e-86f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:7e:33:90:6d:ef:f1:8b:36:ad:4b:d3:c8:
c7:d2:35:a0:f3:9a:3d:bb:ad:52:5b:a2:bf:9e:37:
0a:a6:0c:0c:3d:e8:20:5c:21:f4:b7:69:5c:a7:5f:
ff:cb:1d:b6:b5:1a:6f:43:33:d7:5f:d4:6f:e1:66:
fd:f7:a2:c5:d3:60:d1:38:72:dc:ff:81:9e:89:a0:
4b:9a:f8:b7:ba:a6:00:5a:09:83:9e:21:9a:8a:52:
bd:6f:6c:a5:fd:04:ec:41:93:da:ed:6c:64:46:e6:
63:07:45:14:b8:a1:18:bd:a8:51:bb:aa:20:78:e4:
37:6a:00:7b:00:46:ca:63:01:8c:72:08:1b:1f:1b:
1c:e9:1c:55:c5:f6:8f:06:ba:c1:83:55:c5:0f:1a:
7d:c3:64:22:87:3e:69:0f:bf:b5:2e:fe:90:70:02:
5f:da:2c:f4:73:53:d9:56:5c:54:21:98:17:81:97:
fc:79:4c:8a:60:e3:9f:3f:00:4d:3e:8f:81:a4:20:
d0:75:05:1e:56:ff:a8:0a:76:50:c5:36:fb:ec:58:
36:02:ae:a9:b6:70:5a:63:fb:07:5f:04:f1:18:67:
23:dd:f8:8a:30:7a:0b:d5:07:9d:16:bf:55:31:dd:
88:34:47:64:a8:91:ed:93:82:46:1f:29:01:9d:eb:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AF:20:F7:60:4C:E9:AC:1F:34:D8:3C:35:BF:9D:8C:B3:E9:34:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC8D5C3AC3BF11EFB5BB4558762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.180.0/24
Signature Algorithm: sha256WithRSAEncryption
88:28:77:c6:c0:04:e2:6f:6a:ef:31:18:0f:74:ee:9f:08:13:
22:35:63:55:f0:29:c3:36:16:fc:07:e8:20:b2:d4:17:11:16:
24:17:e3:9f:01:28:86:ab:1c:97:4f:ef:fa:10:c4:b9:90:13:
3d:e8:35:5b:da:1d:76:92:92:2f:2d:20:ce:9c:46:86:7f:35:
66:6f:59:ea:10:6a:b7:0d:4b:32:75:d0:2a:e2:27:01:c6:08:
0d:67:59:f0:bb:48:0b:a4:59:b5:d5:da:d1:30:a2:bb:41:ba:
c5:24:3b:9b:9b:6c:c2:3a:2b:88:06:d5:82:92:0c:40:d4:a1:
f6:21:51:b0:29:0e:ed:3c:3f:89:b4:e6:b2:5f:e6:e4:4f:7f:
7e:02:f9:d5:1d:1b:9f:f6:3e:1e:5a:07:bb:e8:c1:59:3b:b8:
61:fe:51:c9:0e:e4:26:13:59:cf:75:e7:6a:d0:19:37:a6:72:
3c:96:28:6c:c2:e0:c9:90:14:63:9a:a9:db:44:ec:e1:4f:1f:
4d:47:4b:35:9c:fa:58:3e:2f:8d:d1:be:3f:4a:85:69:8b:23:
59:f6:d8:83:39:0e:a6:17:b4:4a:60:4d:98:03:d8:62:0f:e6:
1c:db:ec:6c:d3:8e:f6:0b:ef:bd:7d:0b:be:04:d6:89:97:b6:
24:fb:6d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:45 2025 by rpki-client