Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3E6E984C3FC11EF87AA496A762E951A.roa
File: F3E6E984C3FC11EF87AA496A762E951A.roa (raw, json)
Hash identifier: r/0y4ZzbqYkos9vTAZha2etDW/8DejzZEkz87HqbC4M=
Subject key identifier: 7E:CB:B3:25:CE:A1:42:C0:C7:27:5C:85:34:D8:7F:C0:FA:CE:64:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3E6E984C3FC11EF87AA496A762E951A.roa
Signing time: Fri 27 Dec 2024 02:47:46 +0000
ROA not before: Fri 27 Dec 2024 02:47:43 +0000
ROA not after: Sun 12 Dec 2027 02:47:43 +0000
asID: 17561
IP address blocks: 45.195.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61364 (0xefb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 02:47:43 2024 GMT
Not After : Dec 12 02:47:43 2027 GMT
Subject: CN=676e1552-e2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:fd:31:bf:f2:c6:11:f1:75:bd:ff:bc:7d:
a5:28:17:cc:aa:63:b5:3e:95:c1:b5:95:a6:77:d3:
6a:d6:6b:05:27:24:d7:b6:e4:cd:48:6b:44:ae:a1:
ae:72:b5:6d:95:9a:ef:3e:cc:f7:7a:85:ef:fc:67:
a8:da:bf:3f:f6:8f:7b:75:30:10:ce:53:e9:f3:5d:
74:49:95:ca:72:65:cf:cb:37:5d:37:07:ca:4e:de:
2d:6e:24:bd:a1:0a:7f:f8:e2:47:20:fe:d1:27:62:
1d:91:cc:7a:f0:58:cf:ce:15:57:eb:d1:de:5d:b6:
1f:23:1d:3d:82:da:dd:11:58:2d:ee:15:ee:c4:09:
e1:db:f2:c6:1f:21:cf:a1:85:12:b4:6d:c2:5d:8b:
2e:e3:24:b9:df:6d:a3:e2:da:52:d9:d1:b9:a2:94:
d9:3f:cd:65:ff:20:f0:9b:87:0f:c0:06:9b:15:b1:
9e:94:31:d3:87:68:d8:29:f3:7f:51:f8:85:92:48:
3b:02:27:81:8d:13:91:50:72:7f:c4:ec:d6:b7:a5:
b9:2e:14:60:68:09:12:d3:9c:8f:27:45:a1:a8:45:
66:da:b6:d2:42:44:ab:27:c8:9c:a9:88:49:dd:d4:
df:4d:e8:22:0d:00:24:a9:d7:ba:11:88:68:0f:00:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CB:B3:25:CE:A1:42:C0:C7:27:5C:85:34:D8:7F:C0:FA:CE:64:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3E6E984C3FC11EF87AA496A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.60.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fa:dc:40:21:05:17:a8:bb:c8:49:c1:6f:d9:9f:4b:5c:df:
b8:5b:e6:d2:cf:77:db:3d:8c:13:a9:b1:2d:16:09:5e:79:30:
77:f0:0e:67:ec:5f:78:7b:b8:f8:2b:0b:44:89:01:74:e1:c5:
8a:2d:4d:d9:25:ed:cd:7c:f2:7a:20:5a:db:ec:9f:a3:fb:11:
05:9c:85:2b:c3:ad:97:d2:4e:ee:89:cd:6d:4c:f8:78:96:a2:
d2:98:cf:94:53:42:90:70:78:93:30:0d:8a:d6:d9:72:13:fe:
28:f3:ae:99:57:d8:9b:e3:63:22:ff:a7:da:18:0f:81:24:b2:
17:ae:71:f4:52:55:ce:68:c3:db:26:f3:e3:61:f5:7a:a0:0d:
55:66:b0:79:66:95:ee:a9:83:a0:1c:a6:b9:c5:38:ce:30:49:
cb:d3:c7:0f:23:56:ac:8c:ba:1f:26:7b:fc:e3:8a:29:ca:7b:
5c:6d:be:7c:a0:4b:8a:34:fb:c0:15:ac:09:f4:e8:df:79:25:
a2:c4:ef:71:4d:8a:da:4e:8c:82:03:33:7f:9d:3c:b7:a2:72:
88:1b:69:11:f5:46:b8:a0:a2:6a:7c:9d:02:7a:82:47:5b:15:
9b:c6:e3:da:c2:55:28:08:ab:b5:ad:19:ec:9c:37:f9:bb:6f:
78:55:aa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:42 2025 by rpki-client