Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB8BFC0EC3EF11EF8E008987762E951A.roa
File: AB8BFC0EC3EF11EF8E008987762E951A.roa (raw, json)
Hash identifier: dlgQjslCtWnY4FaZWmSR9OJcRPTgEmTQq6azJVvUdD8=
Subject key identifier: 26:66:73:4D:63:98:06:6E:F1:81:F2:35:BC:21:28:A1:29:3C:C5:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF42
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB8BFC0EC3EF11EF8E008987762E951A.roa
Signing time: Fri 27 Dec 2024 01:12:41 +0000
ROA not before: Fri 27 Dec 2024 01:12:38 +0000
ROA not after: Sun 12 Dec 2027 01:12:38 +0000
asID: 17561
IP address blocks: 45.192.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61250 (0xef42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 27 01:12:38 2024 GMT
Not After : Dec 12 01:12:38 2027 GMT
Subject: CN=676dff09-7094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c9:ba:45:57:7c:4d:45:88:f8:f9:de:58:75:
f7:44:cc:43:66:b9:5e:e7:31:40:6e:03:a4:26:14:
1f:6c:4b:59:47:70:d8:66:97:20:4a:d6:8c:43:b4:
11:a1:92:27:eb:69:20:c1:e3:6c:11:f5:d9:8b:03:
22:c3:e2:7c:65:ca:d2:3b:43:9b:bf:e8:03:ee:b9:
ee:a3:26:38:c6:1c:e6:ef:2f:c9:b2:32:a8:d1:ca:
f8:d3:42:87:c0:a5:c1:b0:16:be:d5:8b:64:20:76:
a7:00:c9:7a:10:eb:86:54:24:80:aa:82:6c:70:dc:
b6:54:41:7e:b6:51:c4:2b:09:72:93:66:b1:c6:9d:
75:5a:d3:5e:5e:b1:67:4b:1d:b3:e1:71:0c:ff:3f:
43:35:33:9c:61:dc:75:2b:03:3c:6c:20:b9:44:e0:
c0:02:96:99:65:58:aa:3a:c8:ac:5e:e7:ec:5d:12:
44:44:c1:4c:2d:a8:a7:d2:32:94:db:6a:3a:7e:62:
6d:90:ee:a6:d9:3a:e8:48:8d:cf:e3:87:f1:5e:65:
a7:6d:16:8c:43:1c:dc:07:00:eb:e1:60:d9:c6:9d:
dd:bd:16:4f:d3:34:68:70:a6:b4:6e:09:31:78:24:
22:53:5d:55:3e:45:86:a0:72:10:eb:4c:f1:89:e0:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:66:73:4D:63:98:06:6E:F1:81:F2:35:BC:21:28:A1:29:3C:C5:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB8BFC0EC3EF11EF8E008987762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.241.0/24
Signature Algorithm: sha256WithRSAEncryption
30:91:99:27:be:bc:0a:bc:0f:6a:19:8e:2d:91:2e:41:b1:df:
5d:be:ca:86:a6:8c:29:4e:18:97:c0:34:73:cb:37:b3:17:4b:
88:29:52:2f:b9:3a:3a:d6:ce:1a:d7:e8:f3:10:77:4c:75:43:
b6:df:ec:6c:5f:c2:ff:2e:72:7f:ca:3e:27:d8:07:19:69:e0:
ca:88:01:63:df:bf:fa:d1:3e:a9:35:05:d1:cc:5d:cf:c4:19:
ff:09:51:aa:6e:ba:50:c9:2f:40:d9:9e:15:88:2a:53:59:70:
4a:cf:7d:32:fa:2c:b4:32:b2:a0:1f:5b:42:ef:6b:7a:9d:42:
11:73:9f:44:f6:da:21:9b:f2:08:27:64:19:03:9e:36:c6:e9:
d8:4f:80:e4:99:03:7b:b2:bd:72:9c:cd:31:db:b9:c6:35:62:
3f:6e:88:e6:51:57:46:33:ac:92:24:4a:2b:22:a3:15:1f:e7:
9d:a2:83:12:d8:80:d9:f2:17:4f:41:84:e3:26:56:a8:c6:c3:
c9:61:ad:16:ca:da:1d:39:71:5b:f0:3e:ec:95:e7:f5:87:05:
99:de:5a:db:93:7e:db:5b:86:83:73:9e:a5:9e:6e:b4:be:07:
70:dc:cc:9b:f8:fd:96:8e:53:41:b2:15:9e:fb:97:09:09:dc:
f9:b2:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:02:39 2025 by rpki-client on console.sobornost.net