Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B73F8DEE54B11EF84644D6A762E951A.roa
File: 0B73F8DEE54B11EF84644D6A762E951A.roa (raw, json)
Hash identifier: MycX6ygTBGtsyWFPPAanJa3OovFECav+TGUUA6k9x+4=
Subject key identifier: 83:14:20:3A:75:39:C7:A3:15:DE:9C:84:13:1F:3C:AA:25:B3:0A:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B73F8DEE54B11EF84644D6A762E951A.roa
Signing time: Fri 07 Feb 2025 11:59:55 +0000
ROA not before: Fri 07 Feb 2025 11:59:51 +0000
ROA not after: Fri 21 Jan 2028 11:59:51 +0000
asID: 17561
IP address blocks: 45.192.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73041 (0x11d51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 11:59:51 2025 GMT
Not After : Jan 21 11:59:51 2028 GMT
Subject: CN=67a5f5bb-83b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:7f:dd:44:79:2c:c4:63:77:f1:4e:99:2d:
02:94:44:02:e4:05:fa:ae:e4:b7:8a:51:c1:23:80:
2a:64:9d:45:46:1e:ea:01:0d:dc:d6:5e:7b:d1:f8:
83:ac:5f:a7:8d:52:37:48:e9:f6:9a:83:86:68:1a:
04:eb:19:5e:5e:e6:ce:a3:cf:65:79:68:70:ca:4d:
09:1c:45:48:75:d4:cd:2c:b2:47:e3:ba:b9:91:20:
d5:a3:5d:e0:e5:05:c0:12:7f:56:b6:7c:d1:b2:af:
81:86:91:7c:4d:cb:82:db:53:f3:83:2b:e6:8e:7b:
3c:e4:de:c6:76:20:c9:9b:7c:c2:76:2f:b3:69:27:
1f:e7:99:d4:3b:7f:aa:19:e6:74:19:95:7f:d0:09:
2d:69:50:00:61:7a:41:71:06:06:b4:8a:36:4f:91:
84:8f:f7:d1:30:6f:a8:08:e0:fe:43:53:37:57:73:
20:1f:fa:d6:8a:b5:b8:8c:d6:8b:62:a5:d1:88:cd:
aa:36:69:ff:cb:4e:f7:a1:ba:71:3a:8b:b7:73:9b:
07:5b:68:36:c8:10:8c:55:1f:8b:c1:1b:b6:43:23:
9b:74:c4:95:52:ff:23:e7:96:f6:b0:d3:81:72:45:
17:d1:3c:b6:05:67:8e:7e:87:8a:fd:12:75:16:30:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:14:20:3A:75:39:C7:A3:15:DE:9C:84:13:1F:3C:AA:25:B3:0A:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B73F8DEE54B11EF84644D6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.11.0/24
Signature Algorithm: sha256WithRSAEncryption
11:89:18:21:7c:e7:b4:dd:50:f5:0c:82:3f:39:32:05:79:3c:
58:91:63:da:bb:38:3a:33:f0:f3:b7:ae:dc:75:62:d4:3c:80:
c6:28:ba:b0:19:f3:20:7f:4d:16:fa:52:93:9d:e8:01:ad:5a:
6a:65:23:2b:ed:af:86:98:c3:06:b9:2c:f8:14:e1:bf:01:67:
b1:25:c2:ef:c9:9a:10:5f:2c:8f:81:56:8e:69:82:31:04:d2:
33:df:c7:67:09:70:8c:30:2c:b7:3f:63:54:22:2e:51:23:13:
87:68:3d:9a:64:67:3d:4d:8f:e4:1b:a7:cf:28:ea:a8:3f:c6:
4d:5d:8c:01:df:8c:16:96:99:15:e8:bb:a1:9e:c6:a3:96:1d:
22:dc:29:ea:b2:c5:68:f8:ef:8f:4b:ee:60:34:7e:d2:2e:ea:
be:06:70:97:a8:4c:1f:6f:81:e5:2b:1a:db:dc:b0:a2:cd:5a:
f9:ad:5a:4d:43:41:68:9b:4f:37:a4:11:4c:c7:45:6f:8b:77:
1b:ab:64:b3:73:02:3a:4c:0c:57:7b:36:36:a6:79:3b:8e:7c:
42:71:4c:2c:39:e2:03:d4:8c:db:82:7e:72:18:a1:f9:f2:21:
3b:b2:14:14:81:fe:70:e3:69:ba:e6:d3:ea:2a:5f:f5:4d:65:
a3:fe:ef:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:50 2025 by rpki-client