Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02C5C750F43F11EF8B3B51BD762E951A.roa
File: 02C5C750F43F11EF8B3B51BD762E951A.roa (raw, json)
Hash identifier: iAMC5ri3bRAMfQE9dutM8GVWvc8lClAzgD9dS3CwFro=
Subject key identifier: 96:8D:96:DA:77:61:EF:82:A5:5F:1A:34:A3:FA:03:2B:5F:37:47:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0132A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02C5C750F43F11EF8B3B51BD762E951A.roa
Signing time: Wed 26 Feb 2025 12:41:34 +0000
ROA not before: Wed 26 Feb 2025 12:41:30 +0000
ROA not after: Sat 19 Feb 2028 12:41:30 +0000
asID: 17561
IP address blocks: 45.198.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78497 (0x132a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:41:30 2025 GMT
Not After : Feb 19 12:41:30 2028 GMT
Subject: CN=67bf0bfe-107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:1c:09:15:39:50:ae:b9:66:55:73:00:c4:
8e:d7:cb:72:d1:15:11:1b:55:14:64:b2:f9:94:b1:
b7:3e:04:1c:62:dc:cf:c7:63:7a:fd:11:08:a6:a9:
98:e2:27:ec:1b:90:d7:b8:3c:2d:1b:7a:5a:01:37:
20:f8:f8:51:d6:ee:77:c6:c7:8a:5c:f9:ae:f8:b7:
13:10:b2:d3:7b:4b:df:e9:37:3d:44:ce:a5:a0:42:
ab:fc:5f:4a:e9:ac:31:e9:35:ac:6d:6a:a7:8f:2f:
a2:17:28:bd:3d:b1:0c:f7:dc:47:bb:67:5c:e3:da:
1d:8c:16:30:fd:7c:3e:49:81:99:22:2f:aa:56:c2:
a9:e3:4f:4f:71:c8:6e:52:fd:21:80:03:f6:59:53:
53:9c:dc:26:be:30:64:7d:65:bf:ed:4b:cf:6e:2e:
5c:91:21:17:bb:65:8b:6e:de:8d:69:b7:00:d4:49:
22:2e:ca:77:b9:50:ec:8b:b0:f4:a3:70:ee:48:13:
10:23:55:ac:c0:6d:52:5e:22:6a:1a:74:f0:c9:ad:
ed:90:44:1c:c6:cc:dd:cd:d8:18:95:82:1a:02:94:
a1:b6:85:0e:ae:9c:31:77:8f:13:73:15:ef:b6:65:
f8:df:06:2c:ec:ab:fc:4e:78:de:c2:9c:1a:93:39:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8D:96:DA:77:61:EF:82:A5:5F:1A:34:A3:FA:03:2B:5F:37:47:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02C5C750F43F11EF8B3B51BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7e:ab:d9:6f:6e:c6:88:dd:8c:21:2b:16:32:15:9e:2b:5b:
b0:67:c4:28:30:e3:a1:ea:02:6d:19:8a:ca:ae:0d:54:de:6f:
c7:e4:47:36:45:80:e5:81:cc:aa:19:9e:a7:e8:84:45:00:20:
51:5b:5c:c1:9d:e5:33:94:1b:06:27:90:a2:49:55:5c:97:5f:
d6:8f:65:e0:08:d3:1c:35:3f:e3:03:af:bb:d1:4f:3d:38:0e:
3a:84:b5:80:17:c5:fb:f9:7b:16:66:e3:85:16:4f:5d:bc:92:
80:83:8c:8a:3a:e9:95:fe:26:91:40:ef:4f:13:fc:38:e6:8a:
f8:1d:c6:37:1c:ce:08:af:4a:d4:7a:e9:8d:dd:ea:ed:1d:65:
16:b3:c2:3e:6e:d7:9a:53:32:c2:5d:0f:b0:3f:c7:bb:06:92:
e8:cd:ed:96:98:bb:f7:e4:39:c1:a7:21:5b:ed:76:07:08:bc:
79:27:9f:b3:83:df:6e:e9:9c:72:08:3c:70:bb:47:f2:e8:5d:
81:3d:52:b8:6e:08:00:d5:25:b0:56:fb:c9:58:1d:5e:67:08:
65:19:64:04:85:83:65:d7:be:08:e8:2d:e9:f6:f4:fd:ab:9c:
99:46:2a:30:40:24:42:9e:39:14:98:ba:c2:c2:5c:4d:eb:c4:
67:3a:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:41 2025 by rpki-client