Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E09185DEBDB611EF99D9A5B3762E951A.roa
File: E09185DEBDB611EF99D9A5B3762E951A.roa (raw, json)
Hash identifier: ynKgrHa5UJdwe/Qz/adjTJEiXeF/FaL9GCGHSoIZuf4=
Subject key identifier: 9B:B2:1F:D1:75:73:05:54:30:02:50:4E:84:7B:F3:B6:FC:A0:E7:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E09185DEBDB611EF99D9A5B3762E951A.roa
Signing time: Thu 19 Dec 2024 03:11:02 +0000
ROA not before: Thu 19 Dec 2024 03:10:58 +0000
ROA not after: Wed 10 Dec 2025 03:10:58 +0000
asID: 984
IP address blocks: 45.204.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58619 (0xe4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:10:58 2024 GMT
Not After : Dec 10 03:10:58 2025 GMT
Subject: CN=67638ec6-738a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:4e:b6:28:56:c0:70:70:3d:bd:c4:62:62:
f9:d0:75:99:af:cc:61:56:85:8c:5b:2e:fe:cf:3e:
98:26:7f:78:3b:94:cc:d3:64:2a:fe:c3:4a:fb:c0:
0c:f7:ab:03:55:1a:12:b4:94:99:3e:21:e7:c6:c1:
cb:4e:8f:9a:3f:e4:4e:d0:5a:c9:67:bf:d2:97:24:
d7:22:2b:50:ec:42:31:2b:df:11:4c:02:2e:b2:d4:
48:35:31:48:6b:42:ab:72:ba:e9:f2:45:ce:73:a3:
4d:7d:a3:65:57:2c:22:ba:b3:b6:d1:ae:ac:ad:e8:
69:75:50:80:d5:bf:82:90:60:2d:35:e9:4f:15:33:
e9:fe:f4:76:6c:24:94:27:e0:25:16:5e:b9:c2:a1:
9e:b7:ee:8c:62:f2:42:fa:5a:36:60:b7:c9:7d:7d:
bd:c4:05:1f:0f:a4:05:30:fc:f6:14:3f:87:22:95:
81:17:05:5d:1e:b5:b4:78:fb:09:80:84:3f:a0:49:
70:df:51:a1:94:4c:38:d3:ca:12:ee:ba:b3:1c:f5:
65:ac:7f:17:c6:bd:32:82:be:45:13:f2:98:e6:b6:
e3:9b:6b:5c:f9:40:8b:60:90:f8:03:8f:cd:ab:10:
ea:b3:f9:5c:87:2a:54:b1:f1:ed:27:de:5c:5a:0d:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B2:1F:D1:75:73:05:54:30:02:50:4E:84:7B:F3:B6:FC:A0:E7:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E09185DEBDB611EF99D9A5B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.170.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d6:b8:20:a4:c9:48:30:c7:ab:f9:d9:db:5d:18:b0:ae:62:
cc:a6:2a:c4:62:29:ee:80:77:97:64:8f:d3:ca:29:0c:1d:d8:
b0:85:88:0b:0c:b3:7a:05:a9:2f:9c:92:d5:82:b0:0b:06:13:
93:27:54:d5:42:df:76:bb:62:38:f1:53:fb:93:08:2c:fc:f4:
1c:5a:03:0d:0b:a7:cd:9f:a2:9b:9f:d4:bf:25:51:eb:16:34:
28:bc:ff:44:68:88:d7:5f:01:38:c8:36:e5:19:03:bb:7b:ae:
3f:90:d9:71:1a:de:e5:ea:a5:d1:e4:dd:58:0c:89:5c:92:70:
ac:ac:0f:2a:ca:15:97:8b:c3:c5:66:21:19:6a:6e:87:e8:12:
89:a6:85:12:52:b9:a7:dd:22:82:16:f3:47:c1:08:59:c6:a7:
b1:a0:85:cc:34:7e:95:41:55:f2:76:46:43:6f:ad:dd:98:46:
65:14:08:df:61:4b:34:10:80:1c:34:0a:81:8e:e9:14:aa:30:
d5:b9:e1:3c:5d:11:b2:1f:b7:71:b0:7d:46:56:a7:83:41:4b:
bd:a5:d5:1f:00:cf:bc:27:19:d9:8f:7f:37:52:36:6a:86:55:
5f:f7:65:23:c2:41:d9:fd:72:c5:b2:64:d4:31:56:b2:85:fd:
8b:7f:27:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:25 2025 by rpki-client