Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CD53C8AF42B11EFB06BCAAF762E951A.roa
File: 0CD53C8AF42B11EFB06BCAAF762E951A.roa (raw, json)
Hash identifier: zUxrm9FShQQW0SG5EqFiQMlUmb6uWPFlUdUfzeefzyw=
Subject key identifier: B4:B4:21:88:CA:84:5C:C2:6A:0E:F7:B6:28:74:B8:AD:24:05:B3:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CD53C8AF42B11EFB06BCAAF762E951A.roa
Signing time: Wed 26 Feb 2025 10:18:41 +0000
ROA not before: Wed 26 Feb 2025 10:18:37 +0000
ROA not after: Sun 20 Feb 2028 10:18:37 +0000
asID: 17561
IP address blocks: 45.203.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78058 (0x130ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:18:37 2025 GMT
Not After : Feb 20 10:18:37 2028 GMT
Subject: CN=67beea81-885e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:41:07:37:dc:b2:bd:96:66:d4:ab:40:bb:45:
93:7b:29:ac:ec:e6:f6:76:a1:8b:eb:ab:d0:be:4b:
ac:90:b4:03:08:2c:1c:c1:58:32:ff:17:1c:85:4b:
97:e5:73:26:80:97:fc:12:aa:0b:f6:6d:a5:1c:17:
73:53:11:ac:df:69:b8:00:32:e8:56:cb:7b:a1:af:
6b:66:fe:d8:1d:ec:80:88:0d:18:e9:24:62:28:5d:
35:29:70:24:24:9b:ca:7a:f8:14:2c:25:ca:e2:89:
1e:a0:02:9b:8f:00:d0:4d:24:cb:25:08:0e:fd:10:
7d:15:a8:0b:85:bf:17:19:fd:bf:c4:dd:29:a6:fa:
bc:2e:f0:85:b5:ca:99:2a:60:a2:cb:d4:53:b5:4f:
10:61:36:dc:e8:61:7c:05:2b:b2:cf:22:ab:ba:80:
b0:c6:fc:4d:6b:98:8b:6a:11:12:5f:3e:70:39:76:
64:04:b4:4f:a4:f7:81:b1:2b:c4:a8:09:4f:5a:db:
cd:a0:b7:14:a5:99:be:bf:59:82:6d:77:59:2c:5b:
e4:da:35:15:3c:dc:fb:c3:00:40:58:e1:7e:9d:b5:
b1:04:38:e9:c3:67:99:9c:d6:bf:25:f6:e1:5b:99:
8c:36:e9:9a:55:f0:49:ef:2d:b9:32:0c:7d:04:c0:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:21:88:CA:84:5C:C2:6A:0E:F7:B6:28:74:B8:AD:24:05:B3:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CD53C8AF42B11EFB06BCAAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:87:37:81:51:17:be:f9:f3:61:bf:50:8f:6a:b5:3f:33:a4:
33:b9:43:40:98:2e:7f:db:cf:6c:6f:f5:89:2f:ff:de:1f:d3:
27:7b:5d:1e:c2:0b:8e:f3:20:1d:69:49:eb:da:12:1c:d7:2b:
d1:cc:2c:8a:32:5a:89:b5:98:f0:4a:b4:9e:19:05:bd:08:ca:
29:1f:88:20:13:2b:bd:61:0e:c8:9f:0f:a7:83:fb:d8:b7:42:
f3:d7:d1:2a:9a:88:7b:bb:c9:5e:aa:9d:86:13:87:07:81:0d:
91:67:e7:95:36:78:03:e4:f8:39:05:af:db:0e:6b:33:4f:28:
12:68:5c:9d:e8:17:14:4a:40:6a:22:47:a1:3b:8a:a8:64:f3:
3c:2e:4e:22:ce:6a:87:9b:66:cf:87:6e:10:5b:c0:c6:2b:08:
58:e7:a7:6d:32:34:57:17:32:f7:5e:69:00:66:ca:64:45:31:
63:b0:ec:e9:1c:ce:26:0a:e0:b3:00:f5:fe:fc:9e:60:c6:e6:
a5:3a:95:cc:9c:a5:96:f1:09:01:9a:ae:89:27:7b:43:a8:0a:
a6:8d:5e:af:44:3a:68:fb:b6:35:09:1a:61:ef:1f:5b:c9:6a:
ce:09:82:99:1d:7c:85:4d:39:e9:e0:23:79:b7:6b:9a:d7:b3:
82:7b:77:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:12 2025 by rpki-client