Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF5E43F2BE7311EFA4371A4C762E951A.roa
File: CF5E43F2BE7311EFA4371A4C762E951A.roa (raw, json)
Hash identifier: F4J25JmN9GpQoGzXMiZ8W7up1gPTij551nps3weiFnQ=
Subject key identifier: 9E:0B:0A:DE:D7:AE:C7:EC:2E:E3:D5:AF:92:49:87:DB:26:4F:24:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E60C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF5E43F2BE7311EFA4371A4C762E951A.roa
Signing time: Fri 20 Dec 2024 01:43:28 +0000
ROA not before: Fri 20 Dec 2024 01:43:24 +0000
ROA not after: Wed 10 Dec 2025 01:43:24 +0000
asID: 984
IP address blocks: 45.206.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58892 (0xe60c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 01:43:24 2024 GMT
Not After : Dec 10 01:43:24 2025 GMT
Subject: CN=6764cbc0-301e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:46:28:92:62:33:b3:d2:8f:e9:fd:1b:db:
5a:04:0f:53:4a:aa:93:3b:51:df:f5:f5:74:f4:fa:
65:38:b5:5f:db:8a:1a:93:fe:41:61:75:31:e3:9e:
60:b0:ec:bd:08:80:a8:16:6f:cb:67:ef:f4:b2:dc:
ef:92:f5:a0:cd:44:86:d9:b5:ec:16:0e:f2:c0:de:
ba:82:3a:9a:8e:30:24:c5:e6:85:d2:11:79:52:11:
36:04:44:c6:d1:69:39:cc:1c:fd:c9:a9:02:bf:c8:
fd:44:a8:4b:e1:47:ff:39:1a:cf:00:fa:26:94:a5:
80:62:13:e6:d3:bf:d6:fc:bc:98:84:9d:a7:7c:40:
8f:db:4e:88:7b:91:31:b9:52:cf:d3:f5:98:75:ad:
a6:76:e0:97:84:69:63:94:bd:c5:3b:51:9b:10:87:
56:92:c5:11:07:a4:8e:cf:63:9e:01:6d:8f:a5:39:
7a:6e:c5:a1:4e:b8:98:9c:2e:ff:ef:9d:ac:51:76:
02:40:10:b1:f4:f0:c3:25:74:3b:1a:2b:0d:71:58:
90:31:b1:5e:5d:4e:33:7e:95:6d:13:a0:ff:29:81:
d2:36:2f:52:ee:21:85:77:09:78:76:6d:89:da:04:
ae:cb:09:2c:4c:0c:ef:b6:35:d5:4b:db:94:ae:cc:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0B:0A:DE:D7:AE:C7:EC:2E:E3:D5:AF:92:49:87:DB:26:4F:24:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF5E43F2BE7311EFA4371A4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.133.0/24
Signature Algorithm: sha256WithRSAEncryption
32:36:67:a1:11:4c:a8:dd:b6:c5:eb:a4:77:9b:ae:a1:36:0b:
cc:5d:e5:19:29:d9:ad:54:d9:8b:f7:92:c1:45:08:fb:26:13:
d9:0d:98:0b:6e:7c:1f:77:44:c8:80:20:30:3b:c6:87:28:c3:
90:af:58:b0:6e:42:97:f8:71:1d:95:54:2d:5a:a4:2b:c4:59:
36:9e:61:2e:a3:7e:e6:55:93:5a:4a:be:1d:a9:9c:00:30:f3:
02:92:25:a5:ba:3d:cd:01:5c:b8:31:78:bc:7c:8e:58:cb:39:
93:ce:40:47:87:83:7a:48:f3:ed:a4:5a:b1:a8:73:05:cc:ef:
e7:51:81:a4:e3:83:4a:4c:f0:70:78:28:01:64:78:9d:f9:79:
7b:a7:4e:a1:58:ec:2c:8d:53:7b:58:9b:fc:bd:ac:4b:81:65:
ea:e0:6c:07:58:cb:60:89:82:c4:d0:05:05:ec:48:59:a2:96:
2a:59:d0:27:1b:f3:87:d4:45:7a:ca:74:03:1c:c3:f5:3b:97:
00:7e:c3:ad:5e:68:cb:9f:77:1e:a8:7f:2f:b7:97:0c:98:53:
fb:6f:bc:33:ce:e4:3e:80:41:f4:e4:b3:2f:21:02:ac:c4:94:
66:34:13:c2:8d:24:c9:21:bf:0d:82:31:94:e9:d2:3b:36:67:
0e:10:3a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:11 2025 by rpki-client