Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5783B1FE0F9611F0AF128270762E951A.roa
File: 5783B1FE0F9611F0AF128270762E951A.roa (raw, json)
Hash identifier: vAeoGTetIiD3PgM/L62jwA4O7klBt7eAFw72u+SGA/Q=
Subject key identifier: 6A:94:92:BF:1C:94:12:33:E7:13:F7:94:28:B5:89:7E:26:36:50:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014953
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5783B1FE0F9611F0AF128270762E951A.roa
Signing time: Wed 02 Apr 2025 07:44:44 +0000
ROA not before: Wed 02 Apr 2025 07:44:40 +0000
ROA not after: Fri 09 May 2025 07:44:40 +0000
asID: 6079
IP address blocks: 45.202.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84307 (0x14953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 2 07:44:40 2025 GMT
Not After : May 9 07:44:40 2025 GMT
Subject: CN=67eceaec-da96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:61:27:1e:95:f3:c8:f1:ed:f8:2e:a4:dd:
fc:b9:4f:70:c3:72:a4:68:40:42:60:62:38:6d:a1:
e6:d6:34:48:86:06:82:8a:cc:20:13:f3:ef:83:a0:
7b:93:18:22:32:5a:4a:4f:2c:ea:8a:bd:9b:dd:1e:
db:2b:52:3b:ff:97:f2:a9:45:b2:d2:ed:d7:37:6a:
8c:a3:20:5c:e4:9a:81:bd:e7:ba:56:58:45:6c:ee:
69:5b:2a:23:ea:0c:25:56:04:63:b2:57:0b:6a:51:
56:ad:7b:69:d7:37:fe:12:6c:41:c9:83:99:9a:a8:
01:ef:d2:ff:90:a9:12:45:4a:4a:16:2b:76:36:ae:
8a:92:7f:d5:a4:b8:40:b6:63:0b:47:3f:ea:d7:a4:
6c:91:6a:46:96:c6:9b:a7:fa:07:4a:92:a8:7f:7f:
26:2b:89:39:9d:55:2c:6a:85:e1:34:2f:49:17:44:
e2:21:37:b2:e0:c0:b9:7a:fc:4e:77:bb:3d:a5:89:
57:a6:49:15:ef:31:32:15:a5:a2:af:9d:6a:b8:d7:
1e:16:02:8a:a7:61:d4:d0:78:73:32:ed:13:c0:0e:
8b:f1:b2:0f:88:aa:cd:bc:4f:76:de:bf:f4:e7:d7:
2c:6b:4b:3d:60:2d:28:b7:17:14:19:8f:2a:d0:de:
e5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:94:92:BF:1C:94:12:33:E7:13:F7:94:28:B5:89:7E:26:36:50:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5783B1FE0F9611F0AF128270762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.114.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c9:0c:fe:db:58:b6:7c:48:5e:61:5f:d8:3d:ad:3f:71:b9:
b8:13:b5:8b:5c:23:e7:f1:23:f6:e3:42:e5:a4:df:bd:c7:88:
61:c1:fe:2f:a3:e6:c6:a1:45:02:76:07:78:c6:4e:2b:62:80:
a4:8a:bc:4a:45:33:6d:9c:b8:d7:73:41:66:b9:32:6b:db:a5:
18:db:27:90:00:14:f0:b0:4c:11:d4:d1:ac:93:b8:36:ff:7f:
2e:8a:75:0e:fd:20:20:81:23:38:13:cf:72:be:2d:69:48:da:
06:21:21:2a:12:ff:d0:d9:35:c1:1e:9c:d0:11:50:e2:38:05:
56:b4:4d:c4:7d:9d:a9:b4:01:1c:f2:02:19:1a:34:c2:57:5a:
8c:93:e7:7b:25:2c:40:ae:ed:c4:cb:a1:44:e8:7c:2c:78:e0:
ff:9f:9e:28:2a:9e:e1:41:00:16:ac:5a:e9:93:fc:ac:ad:86:
36:c1:f5:01:48:70:73:76:23:8b:fa:e5:f3:65:86:20:a4:83:
fa:45:ea:b7:20:28:88:0f:bd:16:89:24:07:fe:b0:d8:76:aa:
d7:86:47:61:ec:53:e2:37:75:db:3e:2d:34:df:ec:35:ca:af:
9a:51:59:f2:c5:46:b2:d7:f0:93:a4:9c:32:8d:a8:b2:79:b2:
9a:f0:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:14 2025 by rpki-client