Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7482EEF49F11EF8137B454762E951A.roa
File: 0D7482EEF49F11EF8137B454762E951A.roa (raw, json)
Hash identifier: dKik1C547eykhbOak+4lzsGd9uBHmLNLlWCUqgJ1ydQ=
Subject key identifier: C4:71:2F:91:1D:7F:FC:FD:51:99:DB:A5:57:19:BA:78:2E:3C:55:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013857
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7482EEF49F11EF8137B454762E951A.roa
Signing time: Thu 27 Feb 2025 00:09:03 +0000
ROA not before: Thu 27 Feb 2025 00:00:00 +0000
ROA not after: Thu 19 Feb 2026 00:00:00 +0000
asID: 984
IP address blocks: 45.201.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79959 (0x13857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:00 2025 GMT
Not After : Feb 19 00:00:00 2026 GMT
Subject: CN=67bfad1f-966b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:44:84:86:71:5d:8f:a5:0a:09:ac:98:0a:
8f:8c:a0:7b:02:73:65:65:6c:91:0c:e5:14:c6:38:
46:a1:09:7f:04:27:4d:5a:29:53:d3:1a:33:e9:09:
a8:fa:2a:f0:72:e7:40:ce:a5:cc:c9:16:ae:44:c4:
08:f1:07:5f:b0:74:c4:cc:96:cf:7d:dd:1d:68:47:
4a:99:96:7c:ff:8a:20:6a:9a:df:4e:69:33:bd:4b:
5d:a3:a5:c2:aa:26:f8:49:d4:a9:50:71:84:9e:03:
4f:cd:86:78:fe:88:92:99:35:52:12:9a:e1:4b:10:
de:cf:ac:a6:ab:4b:37:64:2e:55:a0:e2:e8:8e:28:
44:c3:0d:ac:fa:a3:b6:18:47:d4:22:fa:85:2d:16:
d2:70:d6:36:2d:08:03:44:59:d2:ed:cb:6d:7e:d1:
b4:54:ec:fa:65:2a:6b:9e:a6:6f:21:4f:95:13:65:
b0:5b:d8:ff:a7:b8:ce:f5:24:d4:2b:de:f8:c1:3b:
c3:34:df:5f:89:d4:51:fd:aa:7a:74:eb:c5:8a:30:
21:9b:ef:5d:87:5f:0c:e0:4e:4d:39:80:28:9c:6f:
e4:0b:38:57:d5:df:91:f7:63:4f:7a:13:53:6f:65:
33:a2:3d:b3:64:33:63:4b:10:36:ee:1c:36:5b:2b:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:71:2F:91:1D:7F:FC:FD:51:99:DB:A5:57:19:BA:78:2E:3C:55:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7482EEF49F11EF8137B454762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.120.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7d:f1:53:b7:0e:36:97:2c:4e:37:5e:03:34:8c:20:f8:e2:
91:31:a5:d1:e5:d5:7d:32:2e:ac:d8:73:7f:f9:39:e8:df:4b:
0f:89:cb:30:b6:3a:66:58:79:03:68:0c:47:d9:85:ac:8e:eb:
a7:75:6c:9e:b2:8d:19:09:de:7a:69:70:c0:04:16:e6:f0:a8:
1e:2b:01:8c:10:29:da:90:bc:e3:c8:22:44:5e:99:63:ac:5d:
d4:e0:f1:92:31:f0:83:69:bf:82:ba:8a:41:37:e5:7d:53:77:
8b:67:40:c2:97:08:07:02:65:48:06:78:2e:c5:43:a4:e1:ad:
12:81:73:d0:0a:0e:ec:b2:c2:ef:5c:1f:3e:d6:f5:37:be:f2:
08:dc:07:dd:94:b3:38:ce:30:78:9c:cf:eb:15:cb:24:00:b2:
39:78:fc:60:b1:1b:c0:56:93:63:30:1e:f4:d8:2a:92:bc:ca:
58:6e:82:ad:cd:fe:40:8f:fc:3a:88:ea:cf:33:fb:de:8d:e6:
41:26:06:40:e8:74:2a:56:0d:cb:f6:cf:91:f5:31:24:29:94:
51:45:db:04:d9:19:43:01:99:c4:3e:f1:d2:c1:7a:ae:54:42:
96:ff:af:d8:5e:5c:15:a6:c5:cf:d7:a2:c0:42:e4:bb:3e:75:
62:24:32:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:29:17 2025 by rpki-client