Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA28F58D4A211EFA2ED7050762E951A.roa
File: EEA28F58D4A211EFA2ED7050762E951A.roa (raw, json)
Hash identifier: 90vwz52v2X3a4Qx2iOlAItlokQ1NWb0OwGQi7nyc9aE=
Subject key identifier: E5:ED:3D:6A:AA:38:50:5D:38:DA:5A:B5:DA:6C:B2:81:41:71:D4:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010909
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA28F58D4A211EFA2ED7050762E951A.roa
Signing time: Fri 17 Jan 2025 07:16:13 +0000
ROA not before: Fri 17 Jan 2025 07:16:08 +0000
ROA not after: Thu 21 Jan 2027 07:16:08 +0000
asID: 27947
IP address blocks: 45.194.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67849 (0x10909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 07:16:08 2025 GMT
Not After : Jan 21 07:16:08 2027 GMT
Subject: CN=678a03bc-1463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:be:3c:39:4d:ef:e1:f4:12:da:ab:6f:b3:
41:79:2d:6f:f8:38:81:9d:b5:e6:0d:8a:d2:6c:94:
a5:46:49:48:d0:11:b8:f7:0f:10:df:4e:b3:87:c3:
c1:15:50:9a:98:d5:68:1b:27:c7:58:e8:9c:29:26:
f7:e0:80:e7:bd:35:6d:4f:78:4f:72:64:fd:2d:da:
c7:5e:e0:1d:7a:6a:72:31:cf:c3:4d:dd:16:a1:29:
da:d7:2f:e0:5f:39:30:a2:d2:49:99:6c:8a:d7:8a:
c8:7c:ac:c0:84:88:e5:03:fc:a0:14:de:62:83:97:
79:35:ca:61:35:a1:ac:a2:6b:4e:da:51:5a:d0:9b:
b1:3a:6c:75:2a:07:78:5a:eb:62:7c:af:84:06:9f:
17:c9:69:21:15:46:13:26:a3:f6:5b:57:40:9a:22:
e3:10:4c:84:5b:c5:fe:07:a6:26:9a:2e:40:79:dd:
26:51:34:69:dd:83:e9:41:f3:83:76:b0:1f:1d:7a:
f2:cd:4c:14:41:db:80:38:17:1f:7c:65:c8:b8:92:
bd:90:a2:be:f2:cf:8e:62:a7:69:4a:27:2c:6d:f8:
ed:27:25:4b:18:31:ea:ae:e6:df:33:d9:7a:3e:a9:
f1:9a:d9:1b:17:50:01:8d:ac:39:7c:3f:ee:a9:e0:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:ED:3D:6A:AA:38:50:5D:38:DA:5A:B5:DA:6C:B2:81:41:71:D4:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA28F58D4A211EFA2ED7050762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.29.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:9f:ce:c4:28:00:1d:f4:93:05:aa:8a:29:bb:86:a8:1b:50:
06:a8:b9:8c:09:93:7d:8f:78:68:05:fc:b6:14:2e:eb:e1:92:
3c:61:7e:1d:76:f3:28:0c:ce:81:1d:d6:a4:4f:3b:e8:5d:10:
d7:32:f3:00:03:84:9b:13:cb:2a:7a:31:fa:b9:1b:cc:1b:3c:
6c:b1:c7:05:7b:b4:78:16:f1:33:e7:64:bb:2f:e7:b8:ec:53:
39:c4:ec:3c:0a:78:7c:6f:85:2d:ab:b4:3c:28:c6:78:c1:42:
11:37:d8:34:65:f4:c1:b0:06:2b:d2:d7:c2:2e:5b:21:bc:88:
b7:1c:37:40:7e:f8:f9:72:42:7b:03:f6:a8:4d:d1:25:ea:64:
db:fd:ad:a9:74:80:60:3e:ae:8a:68:d7:a2:16:d8:2b:de:64:
7b:dd:81:bd:e6:5d:95:06:b2:3f:24:2b:c7:38:81:63:65:13:
23:45:20:81:1a:86:4e:8b:ea:49:09:94:2d:58:e9:60:fc:a3:
2d:d4:c8:2e:e6:cb:54:cb:40:36:b7:51:14:81:fb:1c:7f:e8:
de:5c:33:a1:10:d5:16:bf:67:ea:ed:8a:58:81:c3:18:f7:12:
19:7e:a5:e5:0d:22:fd:cd:99:8a:29:cb:01:7c:1f:90:c7:af:
49:a3:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:37 2025 by rpki-client