Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30692D86F46811EFB37A625D762E951A.roa
File: 30692D86F46811EFB37A625D762E951A.roa (raw, json)
Hash identifier: 3wEpdWKVqhUzliwIEFIrcUSdoIj3iwGUOjCA1btIIHg=
Subject key identifier: C4:31:A3:9C:80:5F:16:28:2E:0F:FD:82:1B:F6:14:8C:49:E5:0C:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30692D86F46811EFB37A625D762E951A.roa
Signing time: Wed 26 Feb 2025 17:36:20 +0000
ROA not before: Wed 26 Feb 2025 17:36:16 +0000
ROA not after: Thu 19 Feb 2026 17:36:16 +0000
asID: 984
IP address blocks: 45.201.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79279 (0x135af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:36:16 2025 GMT
Not After : Feb 19 17:36:16 2026 GMT
Subject: CN=67bf5114-fcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:30:18:a1:69:33:d9:64:27:01:18:5c:c1:
29:7e:5d:43:26:22:53:b4:38:9d:40:a5:64:67:61:
47:b7:fc:e6:f9:8d:9b:38:41:a2:de:96:da:b0:46:
58:b2:32:15:16:46:39:d3:a3:70:61:c3:56:83:14:
d5:54:97:89:63:99:61:90:0f:24:c4:55:cd:18:7a:
e3:e4:bf:1e:08:b0:31:37:1b:cf:37:9a:23:b8:9f:
88:f1:3f:6b:51:4a:34:a5:88:1f:83:64:ef:68:7f:
72:54:d1:96:e4:8c:29:6a:d6:03:1b:49:67:1f:f3:
47:3b:af:e1:d3:e1:37:cb:d2:91:28:77:e7:26:f2:
df:ef:32:b4:63:b9:d5:1f:99:b8:10:95:3a:7a:c1:
6d:30:94:2d:a2:c5:b4:8b:5b:d2:72:ca:6a:3f:96:
2c:05:91:ec:90:40:34:d0:95:d9:87:30:43:cc:9d:
8a:af:01:69:4c:2e:bb:c0:95:18:16:1f:8b:38:ac:
6b:02:2c:ed:d7:f3:a2:a6:cd:be:fe:c8:2b:9d:44:
35:10:2c:3c:4c:c7:84:c0:7c:76:c0:0b:d1:8b:72:
86:6f:3a:35:2a:03:7e:1d:2a:e2:68:ca:c2:a2:79:
80:7b:0f:0b:f2:9c:9a:80:eb:c2:7e:eb:54:fc:36:
80:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:31:A3:9C:80:5F:16:28:2E:0F:FD:82:1B:F6:14:8C:49:E5:0C:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30692D86F46811EFB37A625D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.47.0/24
Signature Algorithm: sha256WithRSAEncryption
34:22:8f:d4:de:d4:3a:71:07:87:6c:03:e1:4b:e5:f8:bd:1f:
67:db:c8:0f:6e:06:93:88:99:84:06:a0:f4:9c:c5:5c:b3:8a:
ef:2c:cf:18:93:a2:a9:86:a2:87:19:83:31:6e:6b:78:5b:5d:
61:d8:a8:16:91:b2:28:2c:5c:7b:95:b2:02:29:71:d1:bd:62:
9a:4c:31:ee:07:ab:6b:82:8d:56:bc:c8:c6:df:8d:99:8d:81:
9f:d2:a7:4b:e6:7b:e7:81:5f:da:1f:79:78:c8:c1:d8:a6:b1:
fc:d6:90:cc:3d:3d:db:2c:5f:0b:de:dc:07:3d:b9:3d:ba:d1:
a3:1a:03:ab:b7:79:de:7b:6b:a6:03:1b:ca:2a:07:a7:b0:d2:
c0:a9:98:fc:c8:6e:de:30:20:7a:a4:43:56:70:c4:e3:29:c3:
bb:7b:85:01:52:bb:89:03:0f:9c:6c:40:1c:61:91:6e:74:41:
04:4b:8f:7b:23:5b:59:e4:3f:3a:f3:e6:28:5f:31:06:37:f5:
fd:c6:bc:9f:a7:97:20:b3:b1:04:63:2f:85:b3:07:18:5b:34:
99:52:21:cc:7c:99:3e:75:d6:3c:8f:2e:dc:5c:2f:96:20:b9:
93:b9:e6:75:84:20:81:5c:2c:46:44:97:b2:0b:1f:72:96:5a:
4f:c1:8b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:56 2025 by rpki-client