Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35119EE60CBD11F08179829D762E951A.roa
File: 35119EE60CBD11F08179829D762E951A.roa (raw, json)
Hash identifier: LdusAHnACcFFZiaOlR8Kia0ZOjV9rCvucluFNUoXvUs=
Subject key identifier: 08:FD:C9:A1:1E:62:8C:29:F4:55:65:2B:A4:12:DC:AC:EA:F4:07:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35119EE60CBD11F08179829D762E951A.roa
Signing time: Sat 29 Mar 2025 16:45:23 +0000
ROA not before: Sat 29 Mar 2025 16:45:19 +0000
ROA not after: Mon 07 Apr 2025 16:45:19 +0000
asID: 151407
IP address blocks: 45.196.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84152 (0x148b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 16:45:19 2025 GMT
Not After : Apr 7 16:45:19 2025 GMT
Subject: CN=67e823a3-11b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:f0:c1:54:e7:c7:44:95:e0:da:c4:85:43:
d9:42:9a:59:fb:b1:3d:42:f7:09:83:19:a5:29:14:
c4:de:d0:a3:bf:78:22:43:2b:75:b9:18:2e:5e:c0:
07:3f:d1:71:14:72:53:a4:2d:e8:5e:e9:a8:90:f7:
b7:38:98:e8:71:19:5c:56:ee:3b:59:26:04:f0:0f:
c4:e1:0e:3b:95:5b:02:48:9a:89:37:c7:c8:cc:ca:
e4:6b:b5:4f:bd:b5:32:7c:c6:74:1e:f6:fa:15:75:
99:dc:1b:be:b4:04:98:9c:b8:73:bf:87:87:6a:16:
2e:fb:2d:3c:3a:fb:77:e0:bd:fa:b4:31:d4:8e:d4:
e0:35:7a:3e:1c:55:ae:7f:71:50:0a:e0:6b:86:f2:
04:5a:7a:4b:82:d2:18:38:16:b2:d5:0f:5e:da:7b:
c6:b6:2e:27:b7:87:04:d2:80:cd:04:32:f0:77:96:
1a:09:27:a8:ed:8e:e4:6f:b0:4e:4b:f8:20:90:e6:
14:e1:bb:f6:e5:c4:1c:50:4c:02:ef:16:a5:0a:35:
88:17:10:74:11:1b:09:e7:06:9c:df:5c:a7:7d:35:
6e:33:d1:35:49:67:00:ae:19:d3:60:9f:df:27:20:
38:3c:7f:1e:7e:dd:28:81:23:9d:e4:20:0e:6c:5f:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FD:C9:A1:1E:62:8C:29:F4:55:65:2B:A4:12:DC:AC:EA:F4:07:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35119EE60CBD11F08179829D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.220.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:b0:bf:e3:64:c2:ba:e6:87:84:3b:a4:94:5d:42:a9:32:84:
f3:c2:6f:24:f5:51:c8:1d:d8:50:79:af:a3:d2:70:4d:42:27:
da:0c:3e:8b:e9:32:29:57:ca:66:b2:f2:99:b5:06:6e:10:6b:
b6:6a:f2:3e:67:bd:89:19:30:97:d3:b1:a8:3e:63:66:9a:04:
20:cc:df:66:0e:e0:19:6d:00:c3:b6:18:73:11:03:91:6d:ca:
49:9c:8a:bc:24:e2:4d:bb:60:42:5a:5a:de:a1:b3:73:d6:a8:
1d:89:9d:2b:d9:8c:b9:70:f8:76:f1:80:a1:ea:cf:49:6d:e1:
a3:33:0a:02:e6:e6:6a:55:f7:ce:f3:16:b2:25:6f:ed:e6:6e:
f9:f1:a9:6f:0e:f5:29:42:1a:b2:3e:2e:4e:b2:9a:fe:ae:ec:
17:c5:1e:9d:0d:df:05:3e:14:a0:6b:83:7e:bf:d0:75:d8:36:
32:cf:08:55:eb:d7:76:de:ec:34:46:8a:2e:1b:11:36:4f:5e:
37:4a:b6:37:a8:d7:71:cf:e2:79:eb:38:3b:56:b6:86:0e:43:
bb:c9:e6:a3:7b:a5:ee:21:6c:50:0b:2d:10:a5:d1:6d:c9:90:
50:6b:bf:4f:b4:7b:8f:17:0f:ad:c4:4c:ac:2d:5c:60:d2:02:
ce:38:0a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:10 2025 by rpki-client