Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7746D7CCADB11EFADA0A788762E951A.roa
File: D7746D7CCADB11EFADA0A788762E951A.roa (raw, json)
Hash identifier: sLVp1st3QcXK6mezGm7f+nyfJM8ex2FBB0SAekEvFck=
Subject key identifier: BC:3C:EA:7D:D6:BB:57:FB:32:E4:A8:E9:7F:29:04:96:55:22:4D:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F79C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7746D7CCADB11EFADA0A788762E951A.roa
Signing time: Sat 04 Jan 2025 20:38:23 +0000
ROA not before: Sun 05 Jan 2025 20:38:20 +0000
ROA not after: Sat 08 Feb 2025 20:38:20 +0000
asID: 215691
IP address blocks: 45.198.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63388 (0xf79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 20:38:20 2025 GMT
Not After : Feb 8 20:38:20 2025 GMT
Subject: CN=67799c3f-574d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:03:86:88:88:25:d5:4f:e1:83:8e:2a:7a:
23:92:f3:99:9a:2d:a7:b2:c8:9c:16:3a:d2:a4:21:
8a:47:3a:f0:11:a1:d2:8d:a5:05:b7:76:04:9f:04:
19:22:bc:d3:a7:ac:7c:be:45:4b:fc:3a:fd:f2:2d:
25:0b:22:34:b2:71:d8:ef:8a:d2:21:6d:51:f2:60:
70:ed:b9:2f:de:bc:e7:d2:1e:02:8d:76:4f:cc:42:
eb:d9:69:fb:4d:10:da:d8:7c:27:e0:02:46:d4:68:
20:96:0b:32:99:13:00:26:ae:6f:10:fd:22:10:15:
ca:9c:83:f9:45:6e:64:01:d4:ed:a5:ca:bd:9d:ee:
f7:44:84:73:02:ae:2d:fe:86:14:56:5c:e4:4a:0a:
b2:95:59:3e:50:59:15:bd:bf:d3:0c:9b:bc:78:30:
1d:45:bd:b3:6e:61:d9:22:4e:c5:67:74:d0:69:bf:
62:0e:0f:99:a5:e5:16:71:f6:ad:4a:58:a8:e3:16:
48:43:cb:f5:ae:36:45:5a:54:81:c0:56:c3:98:57:
ed:f6:c7:28:18:71:31:a1:96:9f:1f:3d:76:4b:08:
4c:18:e6:a3:0e:82:da:fb:0f:67:40:4a:a3:7f:21:
a6:fe:61:4b:ba:bb:b3:5b:d6:40:b9:19:ae:95:ea:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3C:EA:7D:D6:BB:57:FB:32:E4:A8:E9:7F:29:04:96:55:22:4D:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7746D7CCADB11EFADA0A788762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.55.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f2:5c:92:65:e4:ea:90:fd:b0:b1:c7:f8:79:51:52:e7:6d:
8d:f8:e1:90:36:bc:1f:4c:ed:7d:b6:91:db:ef:b3:d0:bb:c1:
af:0b:16:d0:60:04:31:08:14:07:36:f0:f3:b4:8d:df:08:1f:
db:28:5b:c3:68:b9:cb:bd:5b:ff:8a:2b:39:f7:b0:c3:e1:ba:
63:d9:d4:e4:d1:09:be:1e:41:1c:ec:4a:4d:17:9b:07:3c:47:
7d:22:6a:58:bd:ff:9f:23:0b:1d:18:02:57:be:19:de:b8:4e:
2b:aa:8c:b0:e2:3a:7b:84:5d:5d:c6:cc:d4:90:01:f4:60:ec:
32:c0:bd:bd:f3:c9:fd:5f:1f:b3:67:4e:8b:9c:6d:f0:87:d0:
78:e5:a6:a5:91:4b:c3:b6:f2:d0:83:db:30:56:90:2d:79:cf:
c3:50:b9:98:bb:f1:ab:cd:21:50:2b:14:96:d5:ba:65:6f:54:
08:f0:e8:69:d8:5d:f0:00:e0:2e:96:2d:13:dc:a3:97:29:b2:
a8:75:98:71:ff:25:99:44:6c:e1:0c:33:49:29:d5:64:b9:73:
7b:fd:44:da:ad:a6:93:00:8b:68:8e:05:b5:79:34:b0:5d:45:
45:30:09:d7:d4:44:8f:dd:de:21:13:86:02:e9:8f:5a:e9:82:
46:b4:2d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:07 2025 by rpki-client