Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCA81A94BE8C11EF928EC875762E951A.roa
File: BCA81A94BE8C11EF928EC875762E951A.roa (raw, json)
Hash identifier: lm2qSy5mH2j3f1WVweCa69Ow3EYI6U7MPBPyeUUghas=
Subject key identifier: 7C:8B:61:7A:74:64:5A:B7:06:C7:A0:B1:89:36:BF:5B:53:CC:37:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E6D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCA81A94BE8C11EF928EC875762E951A.roa
Signing time: Fri 20 Dec 2024 04:41:54 +0000
ROA not before: Fri 20 Dec 2024 04:41:51 +0000
ROA not after: Wed 10 Dec 2025 04:41:51 +0000
asID: 984
IP address blocks: 45.206.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59096 (0xe6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 04:41:51 2024 GMT
Not After : Dec 10 04:41:51 2025 GMT
Subject: CN=6764f592-6e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:a5:4e:49:43:4c:10:3c:09:2d:1b:8e:d4:
a2:63:be:f5:85:ce:5b:9d:ea:16:10:23:3a:be:9b:
e6:31:4a:0b:4d:58:ad:f3:54:b4:91:b8:cd:fb:5c:
bb:25:0c:9b:6c:8f:8f:0a:a8:d2:d5:f0:f8:39:37:
20:80:6d:6a:29:76:18:98:c5:77:72:b3:24:87:ac:
65:9a:8a:bf:47:dd:b7:ac:9b:16:e2:9f:21:ba:c0:
87:00:ba:17:3d:93:c7:51:b3:e3:1f:59:82:a1:d9:
ee:03:1f:95:67:83:7c:b9:b6:41:36:51:9d:b0:9a:
84:88:74:16:10:ca:8b:bf:f3:5d:90:9c:ba:0d:ff:
c3:be:17:17:81:5c:46:78:54:f7:a6:7d:f2:26:93:
30:81:04:9f:81:e3:87:07:a3:2a:fd:02:a0:db:46:
a1:39:d6:99:58:f2:80:72:28:b6:27:96:09:b9:e3:
88:06:32:54:b0:10:5f:df:31:d6:0a:4d:a9:a3:68:
8a:6e:93:37:a6:f2:bb:ff:48:81:e9:23:4f:70:b8:
9a:86:d6:c9:6d:cc:0b:ef:e2:59:c9:76:59:45:e1:
df:a9:45:80:1c:d5:18:73:9f:93:12:5e:9d:4e:fd:
82:d7:94:f2:13:07:cd:90:29:49:f9:47:12:3b:d3:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:61:7A:74:64:5A:B7:06:C7:A0:B1:89:36:BF:5B:53:CC:37:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCA81A94BE8C11EF928EC875762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.239.0/24
Signature Algorithm: sha256WithRSAEncryption
62:63:56:a7:0c:5b:f9:24:d1:8f:26:66:6b:0a:60:70:0b:66:
67:6a:8d:11:ac:09:d3:91:ae:a2:59:a0:d4:bc:7a:d7:2d:8c:
db:21:3d:78:ac:53:e9:25:1c:64:e7:dc:13:e5:ae:c0:df:09:
01:37:66:36:93:6b:47:58:b2:38:58:5e:e4:bc:30:6c:f2:a9:
56:70:16:4d:c7:cf:00:f1:f2:09:c8:2b:ea:15:02:da:dd:7e:
84:ff:a3:25:a6:bd:cb:c4:d1:62:d2:ff:6f:2d:2c:b4:63:1c:
b4:7a:76:68:c1:bf:69:15:eb:69:80:d5:97:ec:6c:a2:a2:11:
74:d6:81:16:d2:80:b8:e2:e5:fd:9f:a3:46:ec:96:2b:ef:37:
c8:c3:49:bb:39:05:2d:23:9a:dd:a3:39:56:f3:aa:f8:28:ce:
4b:06:6d:f4:38:cf:8d:d4:f0:05:4a:ee:5a:a3:6a:ab:39:17:
98:30:47:53:1d:76:aa:3a:5b:4f:52:ce:80:90:3e:82:fe:41:
57:50:bf:d2:ac:28:f7:a7:16:d2:c2:95:8b:6b:71:62:d1:2b:
8b:92:87:d8:cf:7f:d1:a0:f6:de:9f:66:4c:19:68:b6:33:02:
8b:79:b0:88:98:10:ac:81:fe:af:4b:95:37:10:ca:46:b8:c5:
72:dd:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:34 2025 by rpki-client