Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B5C5206E55D11EF8D716A60762E951A.roa
File: 2B5C5206E55D11EF8D716A60762E951A.roa (raw, json)
Hash identifier: YY6i/Xv/tUDYs1rctOP3ZL+a6nEUoFWLGu4SclIhl8U=
Subject key identifier: 94:30:0E:00:32:23:9C:78:24:0C:A3:6F:0E:2F:7E:84:01:37:B6:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DE2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B5C5206E55D11EF8D716A60762E951A.roa
Signing time: Fri 07 Feb 2025 14:09:39 +0000
ROA not before: Fri 07 Feb 2025 14:09:36 +0000
ROA not after: Fri 21 Jan 2028 14:09:36 +0000
asID: 17561
IP address blocks: 45.196.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73186 (0x11de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 14:09:36 2025 GMT
Not After : Jan 21 14:09:36 2028 GMT
Subject: CN=67a61423-ec37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ef:e9:83:07:19:67:9d:92:56:ac:7a:ef:a5:
02:15:56:23:b7:ed:c1:4b:3a:e8:b9:08:1a:d1:1b:
28:2c:23:b6:db:80:ea:a5:53:73:b6:55:f3:ad:40:
1f:e1:10:e1:7d:ae:ef:e2:36:68:8b:9c:19:3b:0c:
a5:b3:6f:75:08:78:51:34:e4:32:43:94:01:22:b1:
7d:cb:30:ad:73:91:60:05:4b:e8:aa:42:f3:2f:ba:
ed:cf:c4:35:2d:a6:dc:bf:d0:df:e6:b5:f3:a4:a1:
04:44:6d:cc:ef:7b:8d:50:2d:1f:f9:c6:33:ee:0e:
7d:ff:0b:5d:6d:b4:b3:7b:23:e9:ef:f1:35:dc:fd:
4a:22:cf:06:83:e1:d7:22:26:3e:6f:da:d7:85:02:
ba:8e:82:d6:99:ee:1c:19:18:0f:5e:e0:51:fe:64:
dc:06:44:df:c2:2e:bf:40:06:cd:6a:d4:73:bd:79:
70:7d:7a:d1:01:53:3c:87:68:9b:d7:75:13:64:ab:
c5:a6:08:8a:ff:6e:19:ff:96:40:35:12:69:bf:1f:
79:a3:b8:d6:8d:b1:9a:66:e2:0c:d5:23:94:27:31:
e4:3c:88:aa:8c:48:99:d5:b2:28:f6:d1:90:3b:af:
e0:12:f7:58:6d:a1:c5:7e:be:c0:42:17:b5:78:86:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:30:0E:00:32:23:9C:78:24:0C:A3:6F:0E:2F:7E:84:01:37:B6:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B5C5206E55D11EF8D716A60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.81.0/24
Signature Algorithm: sha256WithRSAEncryption
57:64:d6:a9:ef:56:eb:26:f3:92:af:e5:f9:83:6b:cf:d1:aa:
ab:de:ec:0f:38:94:f1:1f:58:f9:fb:0c:71:e9:74:eb:70:71:
8d:d9:2b:74:67:73:97:b6:d8:4b:a6:54:20:11:c5:9a:c4:dd:
f8:31:74:aa:95:3c:97:5b:7d:a4:c7:fc:6c:f2:18:c9:b0:8d:
0e:c8:07:e0:80:83:87:dc:4e:20:09:0e:13:32:c6:82:9e:bc:
59:6b:6a:6d:7c:73:e0:0b:d8:61:ba:d4:b4:9f:89:f9:de:be:
61:97:7d:bf:84:25:78:32:f4:36:d9:81:77:ca:6d:55:9b:26:
3a:95:c5:f2:d5:da:ed:c2:24:71:af:1d:6a:2d:5b:df:c8:f3:
96:ec:53:b7:0b:8a:b3:fb:c5:9b:dd:1d:d7:45:89:5a:f5:df:
74:cc:ae:75:2e:0f:8a:5b:c5:cf:1d:cc:20:14:4f:bf:b1:fb:
6e:0c:0e:7c:90:dd:b2:6e:61:8f:66:ba:67:5b:f8:6d:09:ab:
34:6f:27:81:19:0a:86:d3:87:49:cb:12:6d:25:eb:49:e6:81:
d3:d6:d6:45:6c:bb:09:a8:f7:dd:22:90:e8:c6:a9:5a:c0:23:
a3:52:4a:44:cf:10:e3:78:32:59:b3:11:6b:93:e6:3a:5c:38:
6a:81:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:15 2025 by rpki-client