Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3F07532C3F311EF89F986A5762E951A.roa
File: C3F07532C3F311EF89F986A5762E951A.roa (raw, json)
Hash identifier: FmGJZfc7ueLQ1Bh9nt7Ncf13VuW26xlB1DSFn6xzgJA=
Subject key identifier: 0F:51:A8:5E:8C:87:C8:69:85:08:76:C2:FA:E5:90:87:5D:00:52:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3F07532C3F311EF89F986A5762E951A.roa
Signing time: Fri 27 Dec 2024 01:42:00 +0000
ROA not before: Fri 27 Dec 2024 01:41:56 +0000
ROA not after: Fri 12 Dec 2025 01:41:56 +0000
asID: 984
IP address blocks: 45.194.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61292 (0xef6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 01:41:56 2024 GMT
Not After : Dec 12 01:41:56 2025 GMT
Subject: CN=676e05e8-31cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:44:8a:67:95:e7:da:38:16:9e:10:06:10:
fc:c2:6b:b3:7a:74:41:48:7a:30:24:b3:4a:97:83:
6a:c9:7d:cc:31:0d:ec:54:45:aa:28:27:24:79:95:
71:34:83:04:e5:7c:94:6b:8c:11:40:2f:3b:49:93:
14:50:83:b2:e0:7d:85:c7:f4:18:f9:70:41:b4:19:
9c:ae:75:2d:51:93:1d:79:64:5b:27:0a:4a:50:57:
5c:d6:b0:b5:a9:5e:dd:6e:1d:66:f0:dc:5a:08:61:
77:3f:5c:3e:ee:59:86:7d:c5:5c:78:2b:eb:79:00:
6a:5b:16:5b:7d:42:1c:0b:da:9a:a6:22:7f:e5:24:
e7:80:0e:67:02:a6:6a:41:7a:66:38:36:ff:a2:d9:
27:a0:58:39:e7:4d:11:44:e0:fe:24:44:41:33:30:
24:af:91:47:af:6d:83:ec:d7:64:3c:73:07:1c:61:
bd:a3:70:bb:03:d2:10:b3:52:98:ca:2c:fb:0d:7e:
03:5d:df:26:f0:c7:0c:fe:99:85:1c:cf:fd:ff:0e:
82:86:9e:e5:d1:24:e4:22:06:83:3d:88:55:c8:8b:
63:f8:27:74:d3:1e:03:fb:f7:6a:90:05:54:57:5e:
2f:f0:91:d7:6e:a3:e5:bd:39:2e:96:1b:61:8b:bd:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:51:A8:5E:8C:87:C8:69:85:08:76:C2:FA:E5:90:87:5D:00:52:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3F07532C3F311EF89F986A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.9.0/24
Signature Algorithm: sha256WithRSAEncryption
19:74:3c:3d:2d:9b:84:db:6a:af:4f:92:8a:01:4d:ab:5e:e6:
df:57:9e:64:d7:ab:cd:27:8a:45:4a:14:f3:55:83:a7:7d:85:
07:08:62:e8:c8:b1:f3:f6:53:56:89:9a:00:de:a2:ea:0e:00:
95:d0:65:fa:40:95:57:29:7c:ce:4d:b5:70:c8:c3:32:56:39:
5f:de:7c:9f:dc:c9:fe:f7:6d:cc:09:f7:32:29:67:03:d6:d0:
40:5d:88:92:0b:98:86:cb:eb:bc:a9:c5:42:d7:b9:e0:43:7e:
f9:35:ff:c7:2c:4f:fa:3b:d6:16:28:9d:b6:84:b2:5d:f0:06:
7d:bf:0a:55:f9:01:fa:43:7b:94:ff:48:9b:a7:cc:d0:45:42:
2e:42:87:25:3e:93:56:90:0e:88:0f:23:41:a7:b7:93:7b:5a:
f8:83:83:f3:ed:fe:e1:92:e0:b4:10:c0:e1:cb:09:4a:57:a4:
42:42:e9:4d:19:cd:b4:77:05:a8:25:b5:8d:d8:cb:44:a0:a5:
d4:14:ce:74:25:b0:21:4d:ed:e0:ca:df:d0:72:de:35:cd:3a:
2d:be:e3:d5:15:72:93:51:f3:fe:21:86:ce:4f:0d:5c:52:3a:
cc:41:8a:c4:7f:82:7a:5d:01:11:04:97:2d:80:53:19:41:25:
0e:fb:04:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:58 2025 by rpki-client