Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D67E5D204AF11F0A9DFB261762E951A.roa
File: 5D67E5D204AF11F0A9DFB261762E951A.roa (raw, json)
Hash identifier: MY/ycveYQQCOzE1+T/wFKAVPyUMO3Rspt42KZVVr0MA=
Subject key identifier: 71:84:77:E3:84:D7:5D:71:68:92:7B:80:62:34:78:63:B6:41:49:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D67E5D204AF11F0A9DFB261762E951A.roa
Signing time: Wed 19 Mar 2025 10:46:08 +0000
ROA not before: Wed 19 Mar 2025 10:46:03 +0000
ROA not after: Fri 25 Apr 2025 10:46:03 +0000
asID: 150000
IP address blocks: 45.197.141.0/24 maxlen: 24
45.197.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83660 (0x146cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 19 10:46:03 2025 GMT
Not After : Apr 25 10:46:03 2025 GMT
Subject: CN=67daa070-9740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6b:f5:3c:4c:2a:5f:c7:cc:02:9c:19:8b:c1:
7a:53:40:51:cb:f6:55:38:0e:3e:46:85:05:c9:c4:
80:af:a0:58:ad:f4:fa:30:d4:a4:89:90:63:34:4b:
63:2d:f6:25:0d:eb:0b:07:be:de:f5:52:40:16:c4:
45:5b:26:2f:6f:7f:c9:c2:31:b7:83:1a:27:27:a0:
14:2a:60:ee:d7:5c:99:32:e6:d7:73:0c:89:6d:01:
f2:03:42:0b:c0:2b:db:f4:08:88:a6:3a:02:b1:3d:
7f:15:95:bf:7f:b2:c6:68:bb:12:6b:61:38:a4:34:
d1:bd:46:61:96:fb:5e:86:af:37:33:38:4a:61:a8:
30:ad:bc:61:71:b8:8e:7c:9f:d1:d4:9e:db:bc:24:
27:1f:be:22:d0:21:b3:2d:9f:4a:0b:83:b5:7e:a2:
96:28:20:39:78:9e:45:8b:96:bd:40:24:17:9c:08:
86:54:8b:3e:7b:26:df:7f:b3:b3:52:8b:52:e3:01:
6d:bf:f2:e2:1d:53:4d:d1:85:76:a5:f2:56:5d:33:
26:2f:77:39:1d:d9:61:d3:ec:2d:f8:71:a9:c8:91:
d8:47:03:b4:54:8d:d5:6a:53:87:fb:90:54:03:ac:
bf:7f:1d:a2:06:75:b3:00:c2:04:e8:c0:0c:f0:8e:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:84:77:E3:84:D7:5D:71:68:92:7B:80:62:34:78:63:B6:41:49:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D67E5D204AF11F0A9DFB261762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.141.0-45.197.142.255
Signature Algorithm: sha256WithRSAEncryption
0e:f4:d9:0d:b2:f9:eb:47:51:b8:fb:8b:ef:ff:af:67:54:de:
00:c1:c8:7c:89:58:e5:54:41:53:ac:52:a8:0b:3c:d6:00:aa:
b8:73:4d:1a:92:97:23:e0:8d:e3:16:77:e6:d5:8b:ac:98:83:
54:c3:ff:86:26:34:4f:18:45:2e:39:6a:2c:e7:59:37:82:de:
82:48:47:c7:db:bd:43:9c:30:be:6c:71:a0:c1:1d:34:87:fc:
33:0b:03:2b:c4:21:36:84:99:94:6a:01:b1:f8:b0:25:03:a3:
f2:7e:29:7b:e1:ea:5d:c9:0d:00:f2:9a:1e:cb:1c:74:36:67:
97:bf:59:3c:b2:79:2c:ab:7a:17:d4:9a:c1:15:73:32:65:31:
8b:15:a1:a9:b3:5f:f8:62:77:0f:0d:70:a5:3d:38:e2:26:28:
c7:3f:5b:47:cc:79:ab:de:b8:96:9e:6e:14:73:57:6c:96:e1:
1e:27:20:ab:49:7f:80:d4:52:38:5e:e4:51:ee:fe:e6:25:46:
9c:ce:65:1d:fd:40:e5:8c:ad:85:c5:58:24:1b:7f:9f:3a:84:
b7:ec:4a:5a:b2:34:d7:c8:be:b9:a4:51:b1:ae:4b:64:0a:99:
db:c4:5d:9d:85:c2:50:32:97:5c:f1:18:ef:bb:71:e6:60:57:
79:80:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:05 2025 by rpki-client