Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AFD2EF2F38E11EFB6D6777C762E951A.roa
File: 4AFD2EF2F38E11EFB6D6777C762E951A.roa (raw, json)
Hash identifier: emcnKNMUDwOkiEaoIgHB0Q1epbDIGhxPjEkDdcPW334=
Subject key identifier: E6:ED:89:20:A7:A8:A7:F0:AE:CC:D8:1B:B9:3E:27:86:9F:C4:1E:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AFD2EF2F38E11EFB6D6777C762E951A.roa
Signing time: Tue 25 Feb 2025 15:36:34 +0000
ROA not before: Tue 25 Feb 2025 15:36:30 +0000
ROA not after: Wed 09 Apr 2025 15:36:30 +0000
asID: 63139
IP address blocks: 45.197.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77418 (0x12e6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 15:36:30 2025 GMT
Not After : Apr 9 15:36:30 2025 GMT
Subject: CN=67bde382-c1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:e5:ec:47:83:e9:e1:97:67:d1:e5:b5:e7:
a4:9e:6b:6b:c7:02:03:88:da:1b:9f:76:ee:3c:ae:
57:32:5a:bd:6c:80:bf:bd:ed:82:17:b6:97:38:fc:
92:8c:90:df:42:76:66:07:3e:0b:cc:1d:a7:a1:13:
f1:ac:c0:29:5e:9b:0b:9c:a5:31:c4:6c:21:46:20:
2e:ce:56:77:35:61:1f:a1:a4:cd:7d:e7:24:c2:34:
b6:8f:13:21:b0:cd:d4:53:03:21:e9:73:4a:e6:7e:
29:ba:a8:c0:6d:9d:8b:be:93:dc:50:be:db:78:03:
31:81:04:fd:fb:9e:59:82:3f:22:f4:e6:72:00:d4:
a5:4e:27:01:7d:0c:ba:23:af:dd:6f:f9:88:28:fd:
9c:b5:2e:7e:68:7a:a7:85:c9:5e:c1:c4:76:7a:88:
d3:69:31:a0:fb:eb:b9:3e:8f:41:09:5f:97:31:b7:
ff:20:dc:99:5e:34:f4:ea:6f:df:0f:d0:16:b8:6e:
9c:04:ae:65:53:56:45:b5:4e:c2:ec:c2:5c:71:a1:
6f:1e:1d:31:80:d8:f9:d4:bf:ed:43:ac:3a:11:c7:
21:7a:16:75:d6:ac:fe:7b:62:e8:2f:e8:da:4e:81:
3b:97:c0:9c:2f:6f:a8:f1:88:81:b0:70:57:74:18:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:ED:89:20:A7:A8:A7:F0:AE:CC:D8:1B:B9:3E:27:86:9F:C4:1E:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AFD2EF2F38E11EFB6D6777C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.100.0/24
Signature Algorithm: sha256WithRSAEncryption
96:30:23:d7:90:34:15:30:a9:48:2f:97:6c:3f:0f:09:0f:e1:
03:f7:f8:ab:77:89:4d:5a:04:76:c5:d5:09:ad:4c:b8:59:03:
71:a0:76:9d:9b:6a:d8:4c:2d:26:69:ab:ef:fe:37:b7:f4:a6:
36:67:65:02:b6:9c:dc:82:64:58:b6:e2:6f:f5:f1:0e:b9:28:
20:bc:b0:0c:49:72:ef:d6:8d:4c:b9:46:1e:0a:bb:58:7e:fd:
b6:df:c2:7e:fe:ce:3c:28:85:55:9c:b3:77:37:1d:97:da:ee:
bb:30:f4:17:b8:e1:98:ea:06:09:7d:17:1f:e1:b7:29:0a:13:
55:27:ca:9b:85:b5:99:3e:6b:da:df:3b:1f:cf:c0:62:b9:dc:
33:27:e1:50:75:61:87:39:8b:07:d8:f3:09:67:1d:5e:6c:89:
96:e7:ba:f5:6d:d7:76:c6:91:64:aa:24:73:ef:94:32:bf:e2:
a9:2b:1f:98:4f:f1:27:0c:59:bd:a9:08:11:f8:94:db:24:ee:
f2:0a:82:96:81:d9:32:49:a4:e6:1a:56:e1:ca:e3:83:d6:05:
18:fb:2b:ce:b1:dc:da:df:30:63:d7:d7:87:be:cc:39:dd:05:
4c:e9:69:74:50:f6:40:f2:ad:82:65:6f:28:9d:21:44:3e:fa:
28:69:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:00 2025 by rpki-client