Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9B76DE4BE7211EF87978D44762E951A.roa
File: C9B76DE4BE7211EF87978D44762E951A.roa (raw, json)
Hash identifier: 9Y0mS3ZcTQ3wnLqtEZQQKjlc8njMoJI/bBUbm5T/InE=
Subject key identifier: 0A:B6:52:EF:77:C9:02:CF:4A:5E:32:17:CB:E9:F3:E1:36:A4:18:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E600
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9B76DE4BE7211EF87978D44762E951A.roa
Signing time: Fri 20 Dec 2024 01:36:09 +0000
ROA not before: Fri 20 Dec 2024 01:36:05 +0000
ROA not after: Wed 10 Dec 2025 01:36:05 +0000
asID: 984
IP address blocks: 45.206.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58880 (0xe600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 01:36:05 2024 GMT
Not After : Dec 10 01:36:05 2025 GMT
Subject: CN=6764ca09-56b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:e4:3d:7e:a3:97:be:59:22:ed:41:4b:da:
95:3b:cc:3a:4c:d2:a7:a7:cb:7d:95:d9:08:2c:63:
f1:8e:6c:00:62:8f:d0:bd:83:b7:96:6a:e0:af:48:
18:11:5c:1f:e8:eb:6e:7f:81:8d:5e:26:bf:58:e5:
d3:0c:2b:23:99:1f:68:d1:e1:ed:52:78:37:27:32:
10:b9:6b:0c:5b:ef:a1:09:3a:c8:be:dc:7a:60:05:
47:38:40:a4:82:33:f6:3f:0b:73:ab:5b:d8:70:e6:
3d:34:ad:2c:10:c5:a8:3d:0e:f9:8b:71:2c:3f:5c:
5c:31:a9:78:d4:9e:3c:44:d3:a1:23:8f:42:83:94:
4c:1c:91:1c:70:25:ab:d1:8a:d2:ee:3d:ca:d6:93:
b8:b1:8b:f1:35:b7:c9:fa:e9:9b:6b:1e:76:f1:74:
c7:4b:41:41:8e:fe:44:c0:09:5a:26:b3:8f:fe:3a:
3f:3d:fb:4b:23:0d:2b:c1:e7:c9:f0:fb:e6:35:6a:
b7:e7:0d:14:79:cd:05:77:04:9b:e3:de:1a:3a:f5:
8e:61:7b:13:d9:72:67:9e:f9:ec:d8:f8:67:67:d4:
11:46:a4:6f:79:c7:72:e2:a1:e7:88:fd:38:ff:3d:
c7:fb:43:c6:4d:89:d8:b1:08:b2:bf:e3:e7:98:99:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B6:52:EF:77:C9:02:CF:4A:5E:32:17:CB:E9:F3:E1:36:A4:18:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9B76DE4BE7211EF87978D44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.127.0/24
Signature Algorithm: sha256WithRSAEncryption
33:66:5d:9f:1d:cf:a1:91:43:d8:bf:82:00:c0:b1:95:f7:6d:
f6:de:5f:04:b8:ca:c5:c1:5b:ff:c8:68:e8:0a:fa:1e:c7:d9:
3d:39:ef:ce:dd:5c:4b:d4:78:0f:33:5a:c8:1a:1a:53:7e:1c:
21:c2:3e:90:85:76:15:8b:61:28:c3:5b:d7:87:a8:5a:db:a4:
04:2b:4e:06:49:ae:fe:02:04:65:e4:50:c0:d4:de:25:b0:e0:
83:62:be:03:e5:87:ea:f8:4a:6b:78:76:ae:26:bc:c6:04:74:
0e:b5:68:a9:07:06:41:4e:cb:da:40:f3:f9:37:b1:27:14:5f:
84:20:8b:d4:7a:2e:c6:dd:88:1a:07:6c:cd:6d:da:25:a8:3f:
d2:fe:be:44:ae:dc:2c:f1:6c:73:63:70:30:33:5f:dd:b6:bb:
60:0c:2a:f4:5f:12:2f:77:e0:23:25:0b:c7:4b:29:44:a0:6d:
8b:dd:60:94:74:0f:11:8b:30:6c:d0:37:d8:bf:c2:0f:30:6b:
bb:a5:48:5c:ff:d3:60:5a:26:c3:1f:a0:3f:b5:55:38:1b:5d:
5a:8f:ad:d2:92:06:4a:54:53:39:74:2c:74:07:d2:98:2c:ee:
8e:3f:50:bc:81:48:dd:00:42:e2:3f:6b:3f:b4:0d:60:2f:a3:
71:72:86:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:11 2025 by rpki-client