Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C0AEBA2F4D111EFBC2FE0BD762E951A.roa
File: 3C0AEBA2F4D111EFBC2FE0BD762E951A.roa (raw, json)
Hash identifier: JqunS5wdPQvvH6MxJQS4lCIdeVvZPl/CaXfZkbAsTkA=
Subject key identifier: 49:AE:80:C7:39:90:BE:51:07:6C:8E:E4:BB:52:AB:A9:CE:75:FC:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C0AEBA2F4D111EFBC2FE0BD762E951A.roa
Signing time: Thu 27 Feb 2025 06:08:16 +0000
ROA not before: Thu 27 Feb 2025 06:08:13 +0000
ROA not after: Sat 19 Feb 2028 06:08:13 +0000
asID: 17561
IP address blocks: 45.204.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80124 (0x138fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 06:08:13 2025 GMT
Not After : Feb 19 06:08:13 2028 GMT
Subject: CN=67c00150-3b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:8e:5e:6b:54:d2:cf:bb:a9:20:cd:63:32:
ca:5f:0e:ed:10:74:00:97:9e:fc:0d:2e:cb:7c:53:
c3:2e:cd:77:20:a3:0b:0c:64:0e:39:26:e8:8e:a8:
3b:d1:32:56:9d:df:67:c2:ea:92:cc:39:23:61:51:
8e:f5:7f:d4:49:fe:c3:37:ea:13:77:d7:35:35:12:
02:a7:20:89:51:1a:03:e3:4f:c7:ea:c4:02:3e:62:
5d:a4:8b:af:30:65:ac:29:c2:10:79:1f:40:30:8f:
93:35:dc:b6:9a:0b:f4:ca:99:32:03:8a:97:db:1a:
40:8c:6c:dc:a2:96:e8:aa:92:a4:87:e0:06:d8:3c:
4e:48:b3:d8:40:59:9a:3a:57:e5:04:a7:63:7c:22:
fa:3c:8f:c0:d7:09:0c:11:4d:da:ec:20:12:c8:37:
e3:24:40:42:3c:7e:8f:19:5c:cc:40:de:fa:d5:1f:
d7:52:5c:e1:ef:d6:28:1e:51:50:96:9d:a5:93:4e:
17:a3:09:47:82:4e:c5:41:af:77:0c:57:e9:2f:0f:
4f:86:46:f2:83:3d:ed:5b:82:d2:ed:f9:25:0f:1c:
c7:ca:c4:c1:24:f7:e9:84:e6:e4:4b:39:f1:c6:da:
51:6b:14:19:c8:14:22:ea:47:5a:42:9c:3c:66:0d:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AE:80:C7:39:90:BE:51:07:6C:8E:E4:BB:52:AB:A9:CE:75:FC:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C0AEBA2F4D111EFBC2FE0BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:94:63:10:66:ff:ed:a9:df:00:2b:6b:cc:a8:b9:37:00:37:
0a:9b:b4:05:78:08:51:0d:6a:8a:b5:4f:5f:49:19:cf:ed:2e:
a0:00:db:ef:b0:4e:1b:8d:2a:db:17:e7:f4:0d:08:c3:55:a7:
cd:7c:7c:f7:22:a9:1f:0b:16:11:5d:2a:2c:af:6c:e4:16:81:
06:6c:23:2a:59:24:37:69:63:17:ef:aa:60:7c:ab:0e:1a:da:
e7:02:cf:d1:75:50:17:43:13:ac:73:f2:c0:e0:b8:f1:1d:ce:
a4:f6:92:5f:fd:df:12:35:69:e5:1f:7d:2e:1d:57:44:16:a3:
d9:eb:12:9b:17:0f:3f:d0:7d:a8:46:51:ba:64:1b:91:e1:c8:
c7:21:ac:90:fc:c8:05:e0:90:45:3c:53:33:00:c4:03:13:0f:
48:84:71:29:a5:43:d4:73:c3:62:02:d3:b6:4d:f8:e4:92:9c:
15:c3:48:1f:e7:6f:59:8b:89:5d:dd:18:26:3b:b3:59:a1:4d:
27:c1:eb:04:51:d9:f7:f6:bf:9b:f2:f5:d2:6e:87:18:1e:9f:
cb:7d:b7:a2:3e:8a:a8:72:58:75:8c:f9:3a:8a:aa:98:5f:aa:
50:d1:5e:cb:39:6c:6e:c1:37:92:d8:c5:ed:2f:72:60:94:be:
95:7a:ed:42
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATj8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MDYwODEzWhcNMjgwMjE5MDYwODEzWjAYMRYw
FAYDVQQDEw02N2MwMDE1MC0zYjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxIGOXmtU0s+7qSDNYzLKXw7tEHQAl578DS7LfFPDLs13IKMLDGQOOSbo
jqg70TJWnd9nwuqSzDkjYVGO9X/USf7DN+oTd9c1NRICpyCJURoD40/H6sQCPmJd
pIuvMGWsKcIQeR9AMI+TNdy2mgv0ypkyA4qX2xpAjGzcopboqpKkh+AG2DxOSLPY
QFmaOlflBKdjfCL6PI/A1wkMEU3a7CASyDfjJEBCPH6PGVzMQN761R/XUlzh79Yo
HlFQlp2lk04XowlHgk7FQa93DFfpLw9Phkbygz3tW4LS7fklDxzHysTBJPfphObk
SznxxtpRaxQZyBQi6kdaQpw8Zg2zywIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEmu
gMc5kL5RB2yO5LtSq6nOdfzLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQzBBRUJBMkY0RDExMUVGQkMyRkUwQkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxUMA0GCSqGSIb3DQEBCwUA
A4IBAQB9lGMQZv/tqd8AK2vMqLk3ADcKm7QFeAhRDWqKtU9fSRnP7S6gANvvsE4b
jSrbF+f0DQjDVafNfHz3IqkfCxYRXSosr2zkFoEGbCMqWSQ3aWMX76pgfKsOGtrn
As/RdVAXQxOsc/LA4LjxHc6k9pJf/d8SNWnlH30uHVdEFqPZ6xKbFw8/0H2oRlG6
ZBuR4cjHIayQ/MgF4JBFPFMzAMQDEw9IhHEppUPUc8NiAtO2TfjkkpwVw0gf529Z
i4ld3RgmO7NZoU0nwesEUdn39r+b8vXSbocYHp/LfbeiPoqoclh1jPk6iqqYX6pQ
0V7LOWxuwTeS2MXtL3JglL6Veu1C
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:10 2025 by rpki-client