Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/205F2276F43411EFB942A971762E951A.roa
File: 205F2276F43411EFB942A971762E951A.roa (raw, json)
Hash identifier: aqe4SA6TOCaIK7TuLkvr5LgFb4hLpupLyB3mBe4gV5s=
Subject key identifier: 60:FD:63:F4:0C:72:6F:EE:6A:B0:4E:EB:D3:9E:03:01:DA:09:55:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/205F2276F43411EFB942A971762E951A.roa
Signing time: Wed 26 Feb 2025 11:23:39 +0000
ROA not before: Wed 26 Feb 2025 11:23:35 +0000
ROA not after: Sat 19 Feb 2028 11:23:35 +0000
asID: 17561
IP address blocks: 45.196.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78273 (0x131c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:23:35 2025 GMT
Not After : Feb 19 11:23:35 2028 GMT
Subject: CN=67bef9bb-871a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:43:53:64:3f:3b:6b:3f:9c:6c:c0:93:58:
29:a3:f9:62:d1:01:7c:6d:19:04:73:a5:c2:f2:a3:
73:9e:45:0e:1c:1e:dd:01:1e:ae:11:9a:54:d6:ed:
df:72:7b:b7:65:1d:0a:0c:bc:35:c7:cb:5b:bd:31:
d4:de:29:5e:3e:a5:43:88:f7:21:62:aa:32:aa:50:
d7:21:a7:ce:1b:56:0f:04:cf:93:c4:e6:46:20:60:
c8:50:b3:e7:0b:f4:2d:fe:d5:21:46:d0:66:ff:68:
15:5b:c5:28:4a:61:7e:85:f6:88:26:e0:3e:31:6c:
d9:9c:b8:23:d6:33:e2:89:82:7e:01:4d:a7:2a:8e:
be:15:b1:44:8b:fc:a3:37:55:01:4b:9c:9d:6a:1a:
1e:ad:61:3a:a6:71:b9:ce:15:29:b0:e3:8d:27:e4:
99:5a:16:fd:f8:4f:98:c0:61:bd:76:42:15:e9:5b:
1b:6c:a1:0a:5e:9a:7c:5e:82:1d:36:81:3e:b1:46:
0b:0c:ef:f9:18:56:89:f3:d9:53:4b:46:f8:01:aa:
4a:6e:80:90:cf:b4:2d:10:d9:49:d5:0f:03:c2:30:
ae:6c:76:14:62:27:97:00:b6:a6:64:21:22:76:c7:
46:d2:c7:bf:f6:4c:44:7d:d0:3d:96:0b:ab:e1:de:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FD:63:F4:0C:72:6F:EE:6A:B0:4E:EB:D3:9E:03:01:DA:09:55:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/205F2276F43411EFB942A971762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:be:5b:ae:48:61:2d:87:cb:8f:3d:84:83:5f:c2:56:a0:bc:
2b:c1:b9:82:c7:2f:e2:83:66:4a:26:8a:3f:d6:2c:7e:c1:7f:
c8:75:45:80:83:ef:d8:b3:63:1a:23:57:db:d6:47:d2:89:2d:
b8:1c:a4:83:59:d4:c6:be:d5:9c:ba:49:96:1a:6e:da:f3:e4:
ee:ef:77:b3:e3:f2:ff:d3:a5:a3:36:73:b0:95:12:b4:2e:ac:
5a:50:b4:4e:75:11:a9:46:80:59:5c:41:85:e4:bc:38:ed:0b:
db:da:98:c4:e8:1c:dc:f4:79:98:57:63:bb:13:01:ff:42:a0:
93:7e:42:3c:47:6c:14:bb:92:04:ff:12:0a:49:48:65:62:86:
ee:26:76:f5:75:53:59:45:f1:f7:92:b7:1d:cd:d2:f9:88:2a:
15:bb:bb:f1:a5:45:ac:6f:33:60:2f:9c:a8:46:04:00:5c:be:
d6:da:63:8e:52:a8:cb:5d:b8:6e:75:71:c0:d0:2b:81:a2:17:
94:1e:8d:f2:6a:e8:aa:15:f6:67:e4:a1:63:be:47:52:d1:bb:
49:b3:4d:c5:2f:cb:a1:65:9b:54:74:3a:0f:12:f7:c6:ef:f6:
8e:cc:28:da:f1:f2:4f:ab:07:7f:8f:76:40:58:d0:24:82:46:
45:34:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:59 2025 by rpki-client