Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38A03B2AF67A11EFB1521A9E762E951A.roa
File: 38A03B2AF67A11EFB1521A9E762E951A.roa (raw, json)
Hash identifier: 1LnbpdJvk7+KQIXluMSxzXlVVfoit/flR3HyMbdPxkk=
Subject key identifier: A5:5B:5A:52:38:0A:9F:B7:46:B6:BA:DA:A8:F5:DA:F3:9A:C0:98:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013FCC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38A03B2AF67A11EFB1521A9E762E951A.roa
Signing time: Sat 01 Mar 2025 08:50:27 +0000
ROA not before: Sat 01 Mar 2025 08:50:23 +0000
ROA not after: Thu 29 May 2025 08:50:23 +0000
asID: 18186
IP address blocks: 45.194.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81868 (0x13fcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 08:50:23 2025 GMT
Not After : May 29 08:50:23 2025 GMT
Subject: CN=67c2ca53-ec5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:56:6b:b9:f3:ff:ba:5d:db:c2:27:e3:76:
8d:8c:c1:2c:cf:53:74:f7:0c:6d:3b:b0:51:e8:4c:
f2:74:3c:86:ac:ed:7f:f9:48:d7:dc:bc:b8:34:55:
68:24:bf:d8:2c:fc:b4:cf:86:49:c0:d2:4e:83:a5:
e7:3d:4a:26:c3:f3:05:35:0a:7f:43:e8:94:f8:2e:
7e:0f:62:45:42:d9:60:50:3d:2b:7c:86:a0:1e:90:
dc:10:ed:c3:6c:77:d6:0c:64:83:45:bb:49:65:0b:
6a:f3:ed:fb:18:b8:e9:19:1a:d5:f6:b1:83:07:e4:
24:e3:3a:50:cb:18:7d:82:95:9f:69:3b:80:04:df:
61:8c:65:dd:c1:ff:40:82:37:81:af:01:5b:05:0a:
21:16:98:c8:b9:5d:df:aa:3e:8d:0f:dc:8f:83:b2:
64:3b:3f:34:70:b7:d9:88:34:b6:1b:c2:a4:dc:52:
ab:11:d6:98:e4:43:50:39:94:82:85:c9:7e:a6:e5:
47:d7:3b:0c:36:f5:6b:c9:30:c0:f4:f7:b0:74:8a:
d5:e7:34:e0:df:57:bf:14:64:26:f4:34:2e:73:4c:
c8:4c:2b:50:73:c8:f2:98:a3:03:62:c1:5f:44:ea:
29:7f:6d:30:45:ed:a1:cc:63:de:2e:08:f8:f5:77:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5B:5A:52:38:0A:9F:B7:46:B6:BA:DA:A8:F5:DA:F3:9A:C0:98:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38A03B2AF67A11EFB1521A9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/24
Signature Algorithm: sha256WithRSAEncryption
18:49:26:eb:88:69:cc:39:9f:6d:7a:f3:66:be:32:12:b0:79:
9c:a6:66:79:74:f2:23:94:33:37:4b:bb:6c:5f:12:8c:e8:2a:
51:c8:fd:91:08:29:db:1d:2d:02:fc:82:45:a3:25:22:3e:89:
80:10:1b:65:de:8e:7f:95:5b:f4:14:a9:bf:e6:81:7d:82:a3:
e0:e8:24:d3:df:b5:da:74:ae:c6:c7:30:7f:f4:5d:37:ce:ce:
63:9f:4c:dc:a2:61:5f:0a:7b:6c:86:f1:16:96:3c:09:77:7a:
4e:3f:73:c1:e7:ec:1e:5a:d3:85:c4:74:51:19:5e:6d:9b:fe:
a8:9c:0c:76:1f:89:38:4c:95:a9:11:09:9e:42:55:36:60:46:
cc:65:eb:30:22:22:d3:7b:66:7f:bf:79:cf:5b:6f:ed:bc:8e:
ab:6c:e6:f1:a5:9b:06:0b:19:85:c7:28:62:46:f9:44:bb:9d:
da:cd:88:46:8d:e6:bf:b1:ba:63:bd:8d:6f:a9:70:6b:eb:0f:
2e:cc:20:6b:7f:cb:a6:5b:0c:77:69:65:2a:e4:b9:d2:43:93:
4f:c6:a5:23:4b:d1:ec:db:28:0e:6c:81:63:46:29:4f:bd:06:
fc:ea:1f:fd:30:b7:44:d9:02:ba:da:b0:14:51:46:63:ab:b0:
67:8b:0e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:33 2025 by rpki-client