Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCFF881ECF2811EFAE32827A762E951A.roa
File: FCFF881ECF2811EFAE32827A762E951A.roa (raw, json)
Hash identifier: soScr1ExKpEHQFqeYyq68m+sm5Tl5kZRR5YYeHJ+IkM=
Subject key identifier: 16:35:86:89:2D:8C:3E:63:27:6F:0B:F6:A5:93:9D:B8:8C:5E:B6:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010503
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCFF881ECF2811EFAE32827A762E951A.roa
Signing time: Fri 10 Jan 2025 08:00:42 +0000
ROA not before: Fri 10 Jan 2025 08:00:39 +0000
ROA not after: Sun 16 Feb 2025 08:00:39 +0000
asID: 6079
IP address blocks: 45.205.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66819 (0x10503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 08:00:39 2025 GMT
Not After : Feb 16 08:00:39 2025 GMT
Subject: CN=6780d3aa-31b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:05:03:9a:da:15:ec:79:c7:03:2e:37:6d:
d7:42:62:91:d4:8a:15:49:a3:3a:43:52:2a:e7:8f:
38:70:30:13:43:e2:6b:7f:4b:7e:47:f0:eb:e0:6d:
2c:1a:a8:38:b4:05:2f:62:3a:ba:81:41:13:d9:89:
a7:1f:6d:ac:40:78:fb:3a:84:9c:f5:31:76:2f:ee:
c6:46:83:ba:3c:41:f8:8b:a9:f5:e1:27:4a:dc:0e:
5f:ce:81:83:bd:88:7d:f1:0d:ce:0e:91:ba:b1:6a:
34:5c:1c:d5:16:ed:9a:c7:d2:b3:27:a4:8e:c5:f4:
42:11:fe:80:6b:67:c4:70:83:4d:ed:3c:02:37:f6:
f5:1d:8d:d2:4a:ba:9e:bf:65:b9:98:a1:dc:04:ef:
63:d7:18:30:a5:12:8e:f5:ea:11:99:9d:a4:9f:e4:
19:19:cf:4f:f5:bf:6b:16:df:23:51:6f:39:df:aa:
48:e7:28:db:42:bb:3d:06:17:1d:be:a8:e3:e3:10:
79:03:52:d7:b7:4a:a2:ec:29:10:32:59:1b:30:2b:
72:89:34:12:03:11:9b:3c:63:8f:93:8f:88:6e:6b:
d5:d9:e9:df:6b:cb:70:10:5a:06:45:d9:e1:3c:fb:
3d:37:c1:ab:c5:49:e5:01:6b:83:59:8c:52:0d:df:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:35:86:89:2D:8C:3E:63:27:6F:0B:F6:A5:93:9D:B8:8C:5E:B6:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCFF881ECF2811EFAE32827A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.152.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:9a:c0:87:60:85:5a:e3:ea:a9:21:3b:28:6b:9b:77:a4:e3:
60:54:03:cf:26:96:4e:d5:df:66:7f:02:55:ea:0b:a6:a0:c6:
41:9b:88:12:6b:7f:80:f0:0c:2f:ce:51:b7:97:90:28:89:ad:
fa:6a:70:92:66:f1:0d:4c:e7:89:08:5b:4f:40:2c:24:f6:be:
06:e3:c0:e4:db:0a:11:1c:bd:bf:12:c1:04:8f:93:0e:e9:dd:
d7:6d:43:65:05:42:84:ff:c2:8c:d1:f5:3a:e9:fb:10:53:fd:
0d:f1:f8:b9:23:ff:55:40:43:f0:ef:68:5f:26:d1:44:44:44:
df:9a:e8:88:09:78:b1:57:c1:c2:6d:72:7e:9a:ff:14:ff:70:
c9:ac:57:22:3e:4a:4c:44:70:48:8f:63:77:33:e0:67:09:92:
31:76:19:c1:15:74:7f:82:bb:d8:86:99:8b:39:5f:40:98:f5:
83:e8:70:f7:82:d8:13:b4:ed:93:c1:e4:fd:58:64:d9:38:7d:
1b:4c:2d:d8:7b:ee:bf:26:7f:7f:e1:63:5d:72:9e:90:86:2e:
65:3b:80:4a:d6:d4:9b:00:43:6b:40:b2:cc:4f:3b:5b:53:e7:
0e:95:66:ba:40:77:e2:2b:1e:21:52:cb:87:24:d8:32:74:da:
9e:cd:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:17 2025 by rpki-client