Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E53845DED0BF11EFB6CAAF7C762E951A.roa
File: E53845DED0BF11EFB6CAAF7C762E951A.roa (raw, json)
Hash identifier: VH/S+a+H/9aMmC7K8SyAlh+mHcPYgUOa2Rtz1PEqsfw=
Subject key identifier: 59:37:F0:33:59:9A:B2:EC:56:82:C9:2D:A4:A3:0B:AF:B9:64:5D:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010633
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E53845DED0BF11EFB6CAAF7C762E951A.roa
Signing time: Sun 12 Jan 2025 08:33:28 +0000
ROA not before: Sun 12 Jan 2025 08:33:24 +0000
ROA not after: Fri 14 Feb 2025 08:33:24 +0000
asID: 142032
IP address blocks: 45.192.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67123 (0x10633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 12 08:33:24 2025 GMT
Not After : Feb 14 08:33:24 2025 GMT
Subject: CN=67837e57-e4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:2e:c4:06:cc:50:cb:ad:41:f9:21:63:98:
03:7b:e2:8f:9d:92:a1:63:e3:70:08:70:03:8e:a4:
83:8b:97:3c:3a:4c:48:29:53:4b:b0:37:ca:ab:7c:
9a:95:d8:e8:0b:ea:c3:05:4f:17:b0:18:c1:b9:4c:
c4:80:b3:39:f8:fb:43:a0:93:c7:34:29:11:bb:cf:
c8:b0:d5:0e:58:6a:f1:d5:1f:88:39:07:9b:fa:11:
a4:52:0b:af:a8:07:ed:67:d4:b4:0f:4e:47:34:3a:
7f:07:15:21:04:b5:dc:84:b4:7e:28:82:10:ac:0b:
c0:c4:1b:53:b5:21:b1:91:0f:9d:9b:cb:66:c1:71:
84:7f:a1:27:d0:97:17:d2:e6:9f:d7:67:7a:ab:cf:
c3:72:14:7e:2c:a4:73:b2:7d:4f:0f:cf:df:c5:02:
7a:6f:da:da:02:84:10:80:b8:24:bf:33:cb:5a:ad:
80:a5:d6:9f:a9:e0:af:2e:50:6e:f1:9a:d5:55:28:
0a:71:7d:56:b8:89:aa:95:57:b7:d4:25:5b:48:ce:
0f:5c:d0:44:7d:28:fe:15:6f:d8:dc:b0:bc:a2:80:
00:57:ec:53:cd:e2:df:0c:d1:bf:cf:01:1c:a1:8c:
a8:d3:73:28:e3:6d:50:c7:93:f1:a9:b0:87:e5:e3:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:37:F0:33:59:9A:B2:EC:56:82:C9:2D:A4:A3:0B:AF:B9:64:5D:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E53845DED0BF11EFB6CAAF7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.104.0/21
Signature Algorithm: sha256WithRSAEncryption
17:20:e8:4a:5c:58:bc:29:80:f5:41:a2:4b:37:62:0d:2b:5c:
62:13:c2:e8:a0:06:ca:d3:98:a3:9a:d9:e0:7a:86:a6:4b:ec:
ab:73:57:cb:76:26:2c:c0:e2:6a:cd:9a:11:55:5b:71:3c:45:
68:63:5d:9c:61:d3:67:7c:be:2f:d5:6d:35:d1:e1:ff:68:93:
7e:9b:80:a1:58:d0:40:8b:4c:c3:9f:78:63:c9:bf:61:c3:0c:
a0:21:af:19:40:57:63:af:c1:67:ef:f9:29:2c:85:98:88:06:
c5:d5:21:54:84:80:1f:c2:08:1e:77:96:7f:12:20:3c:aa:ef:
33:95:23:a9:4a:92:df:f9:6f:4f:a4:83:6d:b8:68:b0:49:a8:
f0:64:a7:f0:aa:fe:ed:09:aa:ed:c1:ca:7d:16:e6:d0:4b:39:
69:ab:00:35:10:70:2d:f2:7a:70:16:25:40:83:91:81:45:ef:
1a:d9:86:02:da:fc:22:65:50:d9:24:9c:f8:8a:59:c0:a9:a4:
f0:37:42:dd:ca:0a:90:8a:46:ff:2c:ef:d3:1c:a7:b8:11:ea:
99:72:39:30:b6:a5:49:00:3e:e9:29:a5:32:ea:85:a7:57:6b:
33:f6:41:b7:fc:15:ef:48:8e:f4:91:d2:a4:99:c2:87:6c:53:
a7:17:f0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:23 2025 by rpki-client