Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61D32CECF39511EFBDFDCBAC762E951A.roa
File: 61D32CECF39511EFBDFDCBAC762E951A.roa (raw, json)
Hash identifier: +zLVOcKfWNrz27FH5c3+VZsjZct1eISDYnco6MgUQ4I=
Subject key identifier: BD:EC:9B:3B:62:B8:1A:C6:77:4C:CB:0A:63:51:77:10:87:6C:83:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61D32CECF39511EFBDFDCBAC762E951A.roa
Signing time: Tue 25 Feb 2025 16:27:19 +0000
ROA not before: Tue 25 Feb 2025 16:27:15 +0000
ROA not after: Wed 09 Apr 2025 16:27:15 +0000
asID: 63139
IP address blocks: 45.197.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77467 (0x12e9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:27:15 2025 GMT
Not After : Apr 9 16:27:15 2025 GMT
Subject: CN=67bdef67-eba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:88:1c:f4:3d:64:91:de:06:07:ab:0e:8a:
73:94:63:9b:96:5f:f0:95:52:36:26:05:ce:c9:2e:
bd:ce:9d:9c:0e:f8:1b:b6:0b:40:12:48:fd:19:dd:
d6:fc:cc:ed:36:54:f4:1b:d2:19:d8:42:e3:87:18:
1d:50:8f:3a:e3:34:e5:5c:6d:a3:77:25:6a:a2:c0:
a0:2d:ba:2f:d9:50:5a:cd:ba:5c:bd:59:89:69:4b:
f2:c7:7e:43:91:cb:c2:81:0e:a2:dc:cd:66:32:ab:
29:87:26:68:15:49:62:21:3f:47:a6:76:78:65:dc:
55:db:0a:4c:63:a3:96:76:ad:48:ca:d9:3c:36:83:
9d:7a:e4:6e:ac:92:66:7d:3d:52:4a:bb:5b:7f:97:
62:1b:92:ab:3e:3d:ba:7d:15:e3:9f:da:a1:8c:a6:
bd:c3:b3:e8:dd:1a:f5:6e:fa:39:d3:3d:8a:f7:e9:
6b:f2:ab:37:01:35:fd:2d:a1:a8:c3:c6:6b:e3:0e:
b5:43:be:29:1f:33:96:20:94:e2:d3:50:4a:2b:45:
4e:dd:16:8f:de:ea:e6:e1:7f:cb:e1:76:5d:5f:a2:
1f:cd:da:43:a5:a5:0e:d2:da:6a:4c:d2:5d:93:7c:
53:49:13:31:23:3f:69:de:ed:59:e9:46:05:e0:6d:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EC:9B:3B:62:B8:1A:C6:77:4C:CB:0A:63:51:77:10:87:6C:83:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61D32CECF39511EFBDFDCBAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.121.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f1:14:9c:bf:0d:53:7f:e7:7f:04:32:d9:00:02:d2:38:31:
80:9a:73:79:84:ff:a5:78:76:6d:52:40:15:2a:a7:f9:35:99:
6e:79:55:4b:a4:22:0c:37:5b:1d:f3:51:1b:ca:19:05:99:68:
6b:68:d3:70:c5:d1:da:31:b7:52:ef:a5:32:81:74:8f:55:3f:
5a:33:15:4a:76:da:f7:fe:75:a0:6c:f9:82:cd:c5:b6:37:17:
a4:b4:41:79:53:00:13:ae:0f:27:85:be:2a:fb:27:4c:61:13:
17:75:1d:55:b6:15:5e:69:4c:89:0e:29:5d:34:5b:70:3a:6e:
48:00:54:c2:c3:16:8a:51:9a:74:09:d4:ad:4d:bc:6d:8c:ff:
bb:6c:5a:2c:f4:6b:62:63:ff:13:58:19:79:bd:b9:fc:60:cc:
20:69:c9:73:85:66:c5:7d:b6:9e:7f:0d:04:69:05:82:24:ff:
71:47:a4:f2:42:02:60:c8:12:79:91:cd:ad:56:11:b5:5a:1b:
10:c6:f5:53:0c:c6:c4:73:1f:be:78:83:be:d9:62:cd:64:73:
4d:79:e5:fb:5d:3f:6c:4d:43:cf:c8:cf:47:4a:d8:0a:3b:02:
d1:28:98:37:38:07:44:46:8d:f3:dd:ea:c9:74:e0:8c:ee:2f:
10:c1:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:25 2025 by rpki-client