Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E05EFE3EC39711EF82BB205E762E951A.roa
File: E05EFE3EC39711EF82BB205E762E951A.roa (raw, json)
Hash identifier: u1paf40O1NJx1teX8D7hayA4fgKckBYMMSza2kn5ayo=
Subject key identifier: 6A:4B:4C:94:D3:E5:2D:CF:92:BD:43:4A:93:A6:CD:A0:BC:67:2D:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED35
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E05EFE3EC39711EF82BB205E762E951A.roa
Signing time: Thu 26 Dec 2024 14:44:14 +0000
ROA not before: Thu 26 Dec 2024 14:44:11 +0000
ROA not after: Sun 12 Dec 2027 14:44:11 +0000
asID: 17561
IP address blocks: 45.197.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60725 (0xed35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 14:44:11 2024 GMT
Not After : Dec 12 14:44:11 2027 GMT
Subject: CN=676d6bbe-c5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:9c:e9:eb:44:15:d1:8f:df:0a:48:1c:2b:
7a:a5:0b:ac:4d:8c:69:93:36:c3:78:ed:59:15:31:
4c:19:7e:30:7d:47:7f:50:d1:ea:bc:a4:de:5a:46:
0c:12:9e:47:70:80:b6:fb:6e:a9:17:98:09:57:e1:
54:1c:18:1b:e5:0f:e1:82:ee:38:50:04:83:6a:d7:
06:28:95:ba:39:70:49:90:6c:1e:be:d3:2e:4e:5f:
6f:13:44:a3:ae:33:03:c1:8d:07:4b:31:89:8a:09:
0a:fe:af:1c:b9:28:4d:47:a3:b1:3d:8b:e7:cf:64:
5a:41:7d:f4:21:28:5a:2a:88:12:5b:4d:f7:29:5b:
f2:6e:a4:2a:7c:02:e3:fe:c8:05:5c:14:79:c3:cd:
7d:38:da:a7:69:3d:e6:0a:e5:57:5f:12:cb:18:6d:
ae:df:a4:88:42:a3:4c:1b:29:29:cc:2e:f7:48:06:
f5:26:c3:4e:dc:70:81:c5:ba:58:8d:76:75:bf:c7:
df:52:3e:79:ee:de:c2:cd:5b:03:d5:af:a5:c0:ca:
46:e0:5c:f4:09:b4:74:52:91:fe:cc:6a:5c:31:4f:
fc:82:51:69:aa:32:f4:a8:7d:7d:0f:60:00:ee:30:
cc:77:32:2e:47:ce:94:1c:b9:b6:7a:3c:1c:9e:bb:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4B:4C:94:D3:E5:2D:CF:92:BD:43:4A:93:A6:CD:A0:BC:67:2D:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E05EFE3EC39711EF82BB205E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.129.0/24
Signature Algorithm: sha256WithRSAEncryption
47:42:6c:30:96:c9:ba:79:19:6c:fd:98:f4:42:b0:b5:20:e5:
51:b4:cf:6f:e7:0e:80:45:44:a9:a6:4c:79:ab:cd:a6:87:b2:
95:51:05:6c:5d:5c:cf:50:3c:93:95:2a:2e:1e:3c:1a:26:c6:
b9:34:db:e1:7f:0f:eb:31:aa:2f:a0:e7:0f:8e:88:bd:58:d2:
c3:cd:7d:b9:70:a9:f4:c8:27:c5:24:ef:74:7b:ac:00:39:e3:
71:62:5e:f7:db:a3:81:57:57:b0:4f:b8:b2:15:66:2e:c2:ec:
75:2d:e6:4f:9c:c5:c9:79:2c:2b:c2:69:56:2b:46:7c:0a:c5:
e1:29:03:7e:24:4d:d0:b6:33:2c:3b:61:45:d5:9c:15:b8:15:
c3:11:74:79:58:40:df:e5:83:f0:0e:4a:6f:63:98:ab:73:4f:
2d:b1:b2:fb:51:46:22:e3:21:bd:cc:40:94:52:b3:49:ef:62:
d3:1e:d9:c8:2b:ce:c0:41:4e:dd:37:d0:10:93:65:77:25:0d:
ec:68:4a:8e:c7:96:62:82:cc:22:93:df:a3:7c:93:32:37:e9:
6a:b3:64:b6:50:75:36:01:14:d3:ad:8e:c9:1a:b9:d7:e2:17:
d7:0e:33:b4:09:b1:e6:1e:c4:6b:d8:74:4e:3e:83:65:fc:0a:
10:39:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:44 2025 by rpki-client