Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59CDE7ECF4A011EF8618D55D762E951A.roa
File: 59CDE7ECF4A011EF8618D55D762E951A.roa (raw, json)
Hash identifier: yoonJRJ5s3jTPnJ3W2v42ZINuF9UTNtHSiD1U65BB84=
Subject key identifier: F5:37:72:A3:FC:04:E2:01:09:54:36:77:9F:19:A0:43:67:C3:9C:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013864
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59CDE7ECF4A011EF8618D55D762E951A.roa
Signing time: Thu 27 Feb 2025 00:18:21 +0000
ROA not before: Thu 27 Feb 2025 00:00:12 +0000
ROA not after: Thu 19 Feb 2026 00:00:12 +0000
asID: 984
IP address blocks: 45.201.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79972 (0x13864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:12 2025 GMT
Not After : Feb 19 00:00:12 2026 GMT
Subject: CN=67bfaf4d-4781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8c:06:44:67:0a:c2:9e:a6:5b:7d:08:fb:f6:
fd:86:0a:69:47:40:af:17:45:54:ed:72:cb:53:3f:
4f:f5:66:f3:ae:03:63:89:61:ab:f6:e4:31:2b:da:
90:cf:55:8b:58:4e:3d:0a:fd:e2:40:09:40:02:e1:
61:a5:bd:f9:5f:e4:55:d7:22:6e:47:ac:21:f3:b1:
7e:54:e6:5c:67:d5:04:05:f7:59:70:cb:61:0a:6e:
3c:71:9c:ec:6f:3f:aa:4c:11:ca:35:9e:29:0d:41:
50:90:87:32:1b:50:a1:06:7e:25:4c:7a:57:7c:c8:
89:c9:bb:af:2f:c4:ea:f7:98:45:a8:e5:64:7a:9c:
4d:94:b3:8c:d2:7f:40:a0:1d:33:81:2c:25:ed:e7:
40:d0:fe:31:04:7f:d4:74:c2:b0:a8:74:7a:0d:cb:
f0:20:ca:0b:02:e4:ce:cb:9c:62:a0:79:93:ed:b9:
43:c9:ea:9f:42:29:6d:4f:91:b0:42:1a:15:4d:17:
b2:bb:f1:b8:2a:78:61:11:07:7f:a0:ed:6f:af:16:
09:fa:cb:a6:d5:99:dd:e3:0b:8a:8a:55:92:e8:11:
77:a5:35:30:6a:6a:62:ef:36:d4:d2:9f:4e:18:43:
d4:ce:e5:6c:32:a9:b0:80:de:da:90:24:64:c3:a2:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:72:A3:FC:04:E2:01:09:54:36:77:9F:19:A0:43:67:C3:9C:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59CDE7ECF4A011EF8618D55D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.124.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5a:e2:82:c9:50:89:ca:05:bd:66:68:ff:c1:89:c5:5e:f1:
cb:3f:1d:b5:c9:fe:12:a0:e7:e8:08:6a:a4:e4:8d:e9:a5:e7:
bd:c3:b9:c3:58:e2:3a:2b:55:9c:fb:24:66:86:51:91:c3:3e:
84:99:f1:e9:dc:70:b3:c9:ec:3b:5d:82:08:9d:a4:f9:38:f2:
68:45:a2:38:ec:ab:ee:6a:b8:9d:e1:de:03:3f:32:df:b2:25:
b2:72:d4:8e:fa:ec:f3:d0:7b:78:6a:01:64:e7:d3:c8:a9:5e:
3b:f2:f3:7c:46:4f:2b:92:18:ba:48:7a:6d:d8:8e:d9:57:c8:
fe:6f:d9:75:f2:bc:a3:9b:ab:81:d3:db:27:c8:8d:33:a4:3d:
5d:57:e1:f3:e5:53:32:76:27:db:25:43:71:f8:68:ae:7e:d5:
d4:39:69:7c:ed:8e:b3:b8:09:2d:fb:67:9c:58:ea:fb:a5:7d:
32:76:09:91:1f:50:75:38:ba:83:6b:4a:10:35:35:fd:c5:ca:
33:f0:3d:52:9c:20:3a:bc:87:8a:7a:52:ea:65:cf:2e:5f:ad:
89:d0:52:f0:33:8b:f3:e6:35:e4:df:e6:e1:b8:1e:e6:9d:33:
fa:e3:03:4a:39:e1:2f:02:7d:d6:03:d2:91:f0:e7:b2:f0:5f:
ee:51:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:31:45 2025 by rpki-client