Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/249F4DA4E93D11EFB7DD2C98762E951A.roa
File: 249F4DA4E93D11EFB7DD2C98762E951A.roa (raw, json)
Hash identifier: YqAG1NJUOxEgLVropWZ+L4KZpX8044yKYj3WHjb2mEU=
Subject key identifier: 6D:5F:CD:98:54:4D:AB:DF:50:C3:FA:0D:25:FB:A6:A1:81:2A:77:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01219D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/249F4DA4E93D11EFB7DD2C98762E951A.roa
Signing time: Wed 12 Feb 2025 12:30:29 +0000
ROA not before: Wed 12 Feb 2025 12:30:25 +0000
ROA not after: Fri 15 Aug 2025 12:30:25 +0000
asID: 55020
IP address blocks: 45.204.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74141 (0x1219d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 12 12:30:25 2025 GMT
Not After : Aug 15 12:30:25 2025 GMT
Subject: CN=67ac9465-f9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:ec:63:58:23:eb:6f:66:56:40:9f:63:06:
18:c2:13:a2:4f:44:27:ec:0c:9e:0b:46:a1:aa:d2:
72:1e:54:0d:a9:d1:e2:be:5c:d4:83:9c:e3:c4:52:
aa:b3:a8:94:dd:e7:f1:52:d4:f3:16:cb:73:1b:81:
26:11:af:68:00:9c:fc:ea:05:50:ce:4c:11:73:f7:
1b:bb:2a:9f:ac:6c:92:0f:27:e2:7b:a4:3a:20:61:
c6:e3:ed:8c:84:59:02:4f:3f:47:7b:c8:30:a9:0a:
ad:68:ee:90:8e:b3:61:fe:3d:d6:84:0c:45:4d:5b:
b1:aa:cc:24:af:23:b1:58:c6:b0:60:61:83:35:21:
82:21:67:05:4e:91:0e:cd:01:73:ae:3e:60:1d:ed:
19:f6:6c:7f:b2:9b:76:b0:19:86:9e:d9:c9:dc:c3:
3d:8a:db:b2:32:84:0a:cb:1b:ee:21:4f:b1:f6:e8:
a3:7a:bf:6e:16:0d:86:66:15:37:c8:89:7a:f2:0e:
45:bb:79:79:28:8f:15:10:ce:4e:6d:95:64:15:a0:
4f:a0:c5:22:ba:47:ce:06:da:4f:29:f8:a0:3d:a0:
da:f2:f4:5f:d6:14:2c:87:bd:7d:63:66:53:8e:d9:
71:82:47:40:e7:0b:0f:c9:49:bc:4f:b3:c8:ed:b4:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5F:CD:98:54:4D:AB:DF:50:C3:FA:0D:25:FB:A6:A1:81:2A:77:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/249F4DA4E93D11EFB7DD2C98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:0a:08:d5:44:bf:62:bc:9a:df:2f:0e:77:7e:61:b3:0e:47:
ad:08:cd:b9:af:e3:34:5c:3f:1e:73:6d:29:76:3e:c8:a3:be:
0b:79:e0:5b:25:9e:f9:d5:fe:0b:f6:41:54:c2:78:18:36:f6:
82:b0:52:ba:dd:da:bd:28:d2:12:47:16:85:73:ff:10:95:a5:
f5:e5:21:26:75:3e:06:09:d3:ce:27:72:66:e2:22:62:84:16:
18:e7:1a:57:d8:77:9b:6f:d9:57:09:56:08:ea:67:14:f5:bc:
4f:46:91:e6:3d:0b:bc:62:f2:b8:23:b1:d7:6d:3d:b0:2b:fe:
6a:7c:a9:20:96:2c:62:70:ab:14:70:fe:6f:bc:be:e7:6c:20:
34:24:7e:73:fc:51:c6:2a:11:16:a7:a6:af:87:f3:c4:ff:06:
39:b3:f5:79:d4:df:3a:19:f8:7c:f8:03:a4:51:12:4f:7f:0d:
7c:9e:06:b2:40:32:de:e7:37:fc:b1:58:55:06:c5:86:0a:e8:
2e:fd:f4:26:d7:a7:0a:4f:15:4f:61:6c:c5:16:50:a1:e0:9f:
94:7c:fc:60:9e:cd:40:40:cc:17:1d:da:e3:f4:bf:4c:c6:72:
23:91:a3:b3:be:d0:33:cc:0e:67:c5:84:69:13:a9:78:a0:e8:
74:39:ea:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:08 2025 by rpki-client