Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EF7ACF6C3AF11EFBD9C8D70762E951A.roa
File: 1EF7ACF6C3AF11EFBD9C8D70762E951A.roa (raw, json)
Hash identifier: KVck8VKUwRUq6hXUOiiChL+rGL75eMx2GOztqkllu14=
Subject key identifier: 37:84:B2:65:99:44:F5:7F:7C:98:82:90:A2:47:FE:5B:43:84:B1:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EF7ACF6C3AF11EFBD9C8D70762E951A.roa
Signing time: Thu 26 Dec 2024 17:30:38 +0000
ROA not before: Thu 26 Dec 2024 17:30:34 +0000
ROA not after: Sun 12 Dec 2027 17:30:34 +0000
asID: 17561
IP address blocks: 45.202.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60973 (0xee2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 17:30:34 2024 GMT
Not After : Dec 12 17:30:34 2027 GMT
Subject: CN=676d92be-11f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:20:9a:c7:6f:00:bc:b0:fc:bc:f9:79:74:
e4:de:2b:39:63:70:c3:3b:49:28:f7:76:4e:98:50:
20:0f:ab:90:76:47:6c:ba:96:b0:b6:1b:cf:fe:d7:
e5:57:b5:f0:49:69:3a:b2:bd:64:32:c3:a3:a5:43:
74:d1:8f:d2:fb:47:cd:b0:b1:08:0e:9d:da:7d:d3:
07:7b:96:22:9b:3c:7a:6c:41:67:37:53:b8:64:03:
95:f9:75:c4:1e:1f:2c:40:9b:ac:47:4c:8d:4a:0d:
0e:c3:2d:77:bb:a3:1f:72:d7:dc:21:2b:78:f9:ab:
ae:3b:8d:76:04:6c:ab:6c:2a:04:93:36:7a:da:2f:
3b:67:fd:0e:d3:30:d4:84:ab:c5:16:23:13:0c:57:
24:30:04:99:5f:0b:fb:21:2a:41:ad:8c:73:e1:b7:
14:82:9c:e0:2b:b7:31:66:45:24:7d:83:e4:4a:e1:
34:cc:9f:bd:94:d5:93:0a:fd:09:42:29:b6:2f:07:
cb:8b:c3:1a:bf:bb:a8:a1:6e:f4:84:f4:30:c3:e2:
86:bf:0b:89:f2:19:69:a5:71:86:ea:a8:93:a1:90:
0f:a1:00:45:27:aa:49:3a:2f:20:a1:4e:84:00:88:
16:3e:03:dc:d3:c7:a2:1b:5e:01:64:64:06:0e:17:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:84:B2:65:99:44:F5:7F:7C:98:82:90:A2:47:FE:5B:43:84:B1:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EF7ACF6C3AF11EFBD9C8D70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.9.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d1:3c:9a:77:21:77:31:84:e1:ac:fb:0e:08:15:ff:f8:99:
6e:dd:c7:9e:1e:e5:04:49:57:70:9f:aa:82:6f:72:1a:63:f8:
7f:8e:d9:56:23:2b:e9:ca:f7:92:84:c1:ae:1b:cf:a0:24:64:
39:bd:c7:6f:99:47:37:60:69:da:49:6b:e4:d4:44:c2:f1:ad:
ff:44:b8:8b:fe:0e:15:b0:98:cc:56:f0:78:ea:2b:51:a3:fe:
8b:d9:3d:72:50:eb:b5:ee:92:57:9c:e7:5d:9e:cd:1b:e9:8d:
a0:e1:fa:a2:d1:87:6e:d9:20:1f:d6:bb:f4:ed:d5:8e:c2:e4:
b6:7f:02:dd:b6:7c:7f:9d:26:f2:be:c1:27:fd:53:81:66:be:
a8:e6:66:ae:37:29:b6:52:73:c7:4c:51:83:5f:bd:3a:23:b7:
bd:99:9d:6b:b2:87:2e:a4:13:07:86:37:d0:1f:b4:cd:59:49:
84:8a:c2:8f:d5:17:05:eb:7d:73:24:ef:14:8e:7b:25:4e:b3:
45:f4:31:d9:45:5a:24:92:2a:57:f3:f4:95:ff:0d:de:cc:59:
ab:90:30:fa:7c:6c:da:e3:61:75:44:ca:8b:c1:49:e7:2a:b7:
d4:b6:50:76:1e:e9:ce:b8:59:c0:a3:b4:e9:fc:1e:02:f5:dc:
e4:ec:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:49:11 2025 by rpki-client on console.sobornost.net