Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD581266CDD111EF87087C6B762E951A.roa
File: FD581266CDD111EF87087C6B762E951A.roa (raw, json)
Hash identifier: kwe2MBgANNhmHe2BSoeN5YR4rcgi09pAXv89tnx1w+w=
Subject key identifier: 5C:8B:86:C7:04:F5:28:62:20:97:5B:3B:CA:D8:FE:BB:84:29:09:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010210
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD581266CDD111EF87087C6B762E951A.roa
Signing time: Wed 08 Jan 2025 15:05:25 +0000
ROA not before: Wed 08 Jan 2025 15:05:22 +0000
ROA not after: Sat 03 Jan 2026 15:05:22 +0000
asID: 984
IP address blocks: 45.197.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66064 (0x10210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 15:05:22 2025 GMT
Not After : Jan 3 15:05:22 2026 GMT
Subject: CN=677e9435-6e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:cc:b0:a5:36:95:dd:95:cc:72:26:f7:4e:
99:32:e7:05:4d:fb:98:e6:22:f6:ed:14:74:b1:e1:
34:bf:6d:a1:c1:12:0a:19:22:5e:d6:4f:8a:09:1d:
af:03:0d:2c:3b:cc:4a:a8:bc:1d:75:4b:65:91:fa:
eb:54:71:d3:28:e1:48:2c:f8:b9:d5:9d:65:11:41:
ef:46:93:f1:bf:fd:a9:59:3d:50:45:44:6f:fc:da:
d6:ab:54:86:8f:93:08:16:1e:9c:94:ad:57:3b:95:
1c:cb:20:a7:67:24:2b:e9:c8:9c:f8:f6:78:a4:b2:
67:dc:5b:fa:d4:86:07:8b:f0:57:42:9d:f3:da:df:
ec:09:38:74:a0:ce:3c:fb:04:ce:59:b7:ee:97:3b:
cc:ae:02:01:58:a4:92:ca:b7:76:28:af:5b:4e:bd:
56:41:fd:ae:c1:a2:8d:c2:d1:3a:2c:63:f8:18:23:
b4:e4:40:26:8b:77:49:21:d8:99:11:80:a9:8d:14:
2c:af:01:ab:4e:6e:c4:cf:f5:92:f2:ac:88:f3:c7:
86:9a:ba:f0:60:44:fd:72:b5:66:1b:aa:9c:d3:c7:
20:24:53:ae:6d:9d:60:0f:f2:b8:32:b3:67:8e:37:
58:e2:88:d6:95:04:b2:08:f7:3c:a2:3d:d7:1e:bd:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8B:86:C7:04:F5:28:62:20:97:5B:3B:CA:D8:FE:BB:84:29:09:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD581266CDD111EF87087C6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.170.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3e:08:f1:b2:1f:4f:42:58:bc:f9:56:c8:77:2b:e5:62:05:
de:c2:19:b2:2b:11:ba:e4:52:50:ac:d6:6a:9d:cd:96:bd:6d:
5e:e0:d7:4c:ed:4b:90:05:f5:61:4b:b0:97:60:cb:6d:b3:a2:
fd:8a:fa:1f:98:7c:68:b1:92:3b:ab:ff:eb:84:e2:8a:25:ff:
58:e0:e0:8c:df:d1:33:cf:d5:36:29:60:84:ed:be:a6:8d:38:
80:c2:12:d2:5a:9a:04:dc:64:82:c3:d9:73:f3:2f:3b:12:8f:
d3:09:45:96:9b:16:3d:b3:77:52:c5:43:9c:91:77:9b:6c:92:
56:d3:0d:70:5c:fa:03:f9:89:25:d1:71:2b:91:ce:be:c3:7c:
75:47:ee:64:71:70:76:79:1f:6b:60:7f:7f:5b:1f:53:25:68:
c7:01:e8:02:92:a4:19:6d:a0:d0:62:86:44:7d:02:0b:37:af:
fc:95:95:d6:77:d6:b8:7b:db:b5:34:eb:fe:57:40:a8:60:51:
a9:bd:d9:d6:b9:f2:06:1a:41:0a:f1:e8:a4:16:74:3b:cd:b0:
6a:3e:fd:f4:98:6b:09:49:4a:f6:91:e4:d7:d1:ab:e1:4a:b9:
87:c9:77:b0:92:c6:14:f2:c5:09:13:de:e1:85:ed:25:1f:c5:
bf:0f:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:37 2025 by rpki-client