Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFF2F786AA4111EF84D302B2762E951A.roa
File: CFF2F786AA4111EF84D302B2762E951A.roa (raw, json)
Hash identifier: eGN2jRQkN1DpmGpTEbCbXwEx6rTHydKCWQ80CuO+sRk=
Subject key identifier: 24:14:9C:B8:4B:C8:86:C7:0A:58:CB:00:F7:84:38:31:54:09:67:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D99D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFF2F786AA4111EF84D302B2762E951A.roa
Signing time: Sun 24 Nov 2024 08:55:11 +0000
ROA not before: Sun 24 Nov 2024 08:55:07 +0000
ROA not after: Tue 21 Oct 2025 08:55:07 +0000
asID: 58460
IP address blocks: 45.207.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55709 (0xd99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Nov 24 08:55:07 2024 GMT
Not After : Oct 21 08:55:07 2025 GMT
Subject: CN=6742e9ef-4ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:17:d6:6a:5b:3d:88:71:b4:86:de:78:26:
f6:00:6b:d5:97:03:7c:7e:1f:eb:c6:0b:f3:55:c4:
76:26:6b:90:86:f9:c4:49:82:40:32:e2:d6:f3:c3:
21:87:3d:ce:6a:8a:58:35:55:f5:fe:f5:37:e2:24:
f7:71:9d:01:13:da:62:be:cc:e4:09:7d:5d:ed:8d:
78:84:39:99:9a:e0:9b:c5:91:01:97:3d:0a:83:8f:
32:3a:c6:c3:2d:98:df:c4:e4:c1:97:4f:c3:b4:7d:
ad:04:b3:9f:24:bf:92:23:3d:7e:e3:4d:fc:2e:bd:
2e:1c:51:78:a5:15:a8:95:c3:48:b0:d0:fa:51:a7:
92:c0:70:55:39:90:d8:b1:35:ee:eb:9b:60:1d:b2:
bc:e4:62:28:87:f2:61:04:55:b9:07:1a:50:fb:8c:
e9:73:68:9c:e6:25:bb:40:7a:06:3f:39:5e:56:05:
56:95:32:1e:ab:3e:e0:e3:e7:d8:2a:49:83:01:5b:
fa:a5:d4:57:79:c3:dd:c8:ba:27:25:b5:d9:59:dc:
ba:e5:91:d0:3a:4b:00:58:31:6b:a4:08:be:8a:af:
fe:3b:94:11:74:e5:5c:11:df:42:c6:d1:32:c4:f9:
4f:45:75:a2:7d:89:a4:ec:42:fc:d8:5d:44:72:77:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:9C:B8:4B:C8:86:C7:0A:58:CB:00:F7:84:38:31:54:09:67:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFF2F786AA4111EF84D302B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.62.0/23
Signature Algorithm: sha256WithRSAEncryption
34:95:ec:3c:cd:4d:87:d6:66:c8:ec:0b:3a:da:ca:bf:a9:9c:
35:65:3c:0f:54:e3:ec:70:d5:80:e1:ba:4a:54:16:51:c6:5d:
af:ce:e3:d7:10:46:97:89:a6:04:80:f8:89:40:13:f3:0f:69:
04:b8:4e:6a:53:b0:61:71:7e:8e:59:f6:39:e0:ea:eb:fb:be:
f7:fe:e6:5a:a9:f3:3f:2e:74:5b:f5:46:0a:66:13:b7:bc:48:
3c:f3:58:60:91:56:6c:13:12:08:2b:2b:1c:d4:10:99:e2:b9:
20:d1:41:9d:de:39:fd:02:43:10:de:58:4c:9f:6e:21:ec:e7:
0e:31:77:73:0f:e4:1b:c3:e2:1b:09:0f:c2:e5:03:60:60:a7:
f7:ac:ea:52:52:a1:02:ee:06:9a:90:0a:68:18:25:48:8a:ca:
49:0b:3f:af:83:72:9d:04:f7:83:71:41:dc:67:26:59:c5:84:
f4:6c:c6:b2:74:0b:6d:b3:0a:cd:4f:a3:51:e6:5f:58:59:fc:
20:c7:6b:ac:04:f3:af:1f:7f:52:f9:1d:54:ba:ae:2e:f3:62:
f8:f6:b5:a1:cc:38:43:96:6b:bc:c5:39:38:42:af:22:ca:1b:
2e:d6:ea:47:a9:56:d6:72:4f:f7:c4:73:dd:6e:2d:f5:24:51:
c6:19:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:25 2025 by rpki-client