Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5AA000EC3F811EF99EFB04D762E951A.roa
File: D5AA000EC3F811EF99EFB04D762E951A.roa (raw, json)
Hash identifier: uSwSVpDs18D5kc2bDsMVAh8cPqea+um3emkrD/CjxF8=
Subject key identifier: 81:76:BF:7E:9C:72:18:16:08:08:19:6B:C5:8C:E0:C4:7F:9E:67:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5AA000EC3F811EF99EFB04D762E951A.roa
Signing time: Fri 27 Dec 2024 02:18:17 +0000
ROA not before: Fri 27 Dec 2024 02:18:14 +0000
ROA not after: Sun 12 Dec 2027 02:18:14 +0000
asID: 17561
IP address blocks: 45.194.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61322 (0xef8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 02:18:14 2024 GMT
Not After : Dec 12 02:18:14 2027 GMT
Subject: CN=676e0e69-7f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:ca:de:40:1a:97:45:0a:81:08:78:1d:94:
bb:97:0f:d4:78:db:47:c2:7b:bb:da:80:09:3b:b6:
f7:80:68:c7:9e:11:90:4e:2b:76:20:56:98:37:f9:
16:19:0d:9b:6f:8d:36:6e:e4:1e:76:16:d3:ca:50:
04:f1:96:80:24:b4:2c:bb:3d:dc:99:ca:51:41:60:
8e:ed:64:0e:96:38:ee:08:23:73:50:a6:60:08:e0:
a9:79:b7:c4:72:a6:ab:53:d0:89:7f:77:a3:cc:9d:
a7:c1:d3:87:e6:83:96:50:a8:6f:e4:d2:02:3f:21:
31:5b:92:97:ab:81:d0:09:7b:3c:7f:e4:6d:8d:9f:
74:cf:c1:aa:6b:c5:b2:0b:1d:af:9a:3d:82:de:e7:
51:1e:e7:f3:05:4a:ac:43:83:83:c2:61:82:4e:a1:
8c:1e:07:21:f7:5f:d7:12:5f:a2:7d:67:38:72:b2:
c0:cd:d3:83:f4:09:ae:a3:cf:6c:ca:f0:74:d3:f4:
79:eb:e0:8b:33:df:e6:41:fd:66:94:d1:71:51:09:
09:01:de:8d:7b:3a:bb:a4:0d:ef:87:e7:98:0b:93:
5e:14:ca:bb:59:e5:68:d7:da:c9:e4:b8:75:54:5a:
e9:7e:8d:f1:e9:9c:b6:4f:50:c4:0b:bd:66:54:f3:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:76:BF:7E:9C:72:18:16:08:08:19:6B:C5:8C:E0:C4:7F:9E:67:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5AA000EC3F811EF99EFB04D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.86.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c7:f4:dc:95:64:3d:6e:75:76:12:23:dc:27:79:9e:b5:71:
f4:bc:d0:36:90:df:95:d7:3e:4e:99:b2:e7:6b:7d:bf:f6:9c:
31:31:12:a3:f7:1c:ee:7e:44:a0:ea:d2:ef:81:17:31:c0:97:
1b:9c:b9:77:a8:29:41:9b:54:74:59:b1:b4:a4:7a:cc:ef:60:
73:b1:a7:d7:71:8d:06:8d:79:2b:35:ce:c2:53:af:e2:0f:0e:
de:a7:fb:cf:b9:54:49:ec:d3:b6:72:eb:5c:20:b6:3e:25:7b:
3b:dc:3e:4d:58:bd:f5:77:e6:f0:b7:0c:2e:23:d6:fc:60:e3:
ad:ec:f5:1c:cd:47:ae:5e:4c:fe:3f:ce:3b:bf:91:bf:a8:28:
f4:35:34:b6:08:a1:5d:0a:81:a0:c6:06:7b:d0:9b:ed:98:32:
e7:cc:a5:29:ce:08:31:41:26:ce:ee:dc:9a:17:46:53:2c:c7:
f1:7c:62:81:d4:49:4c:e8:58:d9:3c:4a:3d:a2:21:c2:ab:f9:
09:b0:5e:91:0b:5f:9e:b1:33:27:02:12:7f:7e:01:14:6a:71:
3b:6b:e8:ca:f2:a9:97:99:95:31:a7:9d:53:07:af:7c:b8:90:
29:52:d5:11:c6:a2:e6:24:4f:4b:c0:1c:95:01:b7:08:ba:ca:
16:61:00:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:35 2025 by rpki-client