Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C042B46FB6211EFBAF6515B762E951A.roa
File: 7C042B46FB6211EFBAF6515B762E951A.roa (raw, json)
Hash identifier: kdp5Kry/QAcNHEbh+GRXPj2wz+F96uuzObCxdlS3idE=
Subject key identifier: 45:FF:DE:4B:D9:44:4B:FC:D4:CD:48:7A:66:EF:9E:37:F4:2B:3F:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014430
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C042B46FB6211EFBAF6515B762E951A.roa
Signing time: Fri 07 Mar 2025 14:43:08 +0000
ROA not before: Fri 07 Mar 2025 14:43:04 +0000
ROA not after: Sun 06 Apr 2025 14:43:04 +0000
asID: 984
IP address blocks: 45.198.0.0/24 maxlen: 24
45.206.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 14:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82992 (0x14430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 14:43:04 2025 GMT
Not After : Apr 6 14:43:04 2025 GMT
Subject: CN=67cb05fc-3161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:04:c6:44:93:cb:de:7c:89:78:fc:04:08:
7f:d3:6b:75:bb:32:ce:6f:e4:a9:79:39:49:43:67:
b3:ad:60:7b:dc:c1:d0:e0:2a:0d:b4:c4:1b:85:1c:
86:b9:03:f4:8f:85:ee:29:26:97:63:2f:3f:7b:8e:
4e:1a:bf:0a:04:44:04:2a:56:47:eb:f2:92:49:f9:
4e:8d:02:61:5a:22:f2:e2:0a:19:dc:44:17:3a:bb:
34:0a:1a:9e:ea:aa:07:16:1a:26:9c:b9:bf:21:9e:
ea:9f:28:ff:31:be:a8:07:be:fa:40:23:19:01:5e:
cd:e5:68:bd:db:16:00:25:01:ab:52:26:ac:7c:61:
1e:7d:53:b1:8d:9f:ad:79:01:93:4a:4e:50:59:e2:
94:6d:e5:df:95:7c:56:9f:6e:78:62:59:f4:55:cd:
da:a5:94:96:91:16:6c:35:a4:66:0c:0a:33:84:d1:
21:f4:38:41:b1:4f:53:06:fa:dd:fb:2d:ca:a8:5b:
e1:45:1a:0b:d0:ee:0a:ba:1a:20:51:64:c5:00:db:
b5:74:af:09:9e:51:99:04:e5:7d:7e:32:3b:ed:21:
9f:02:4a:8a:fe:2d:73:2e:6e:db:95:61:f9:8b:0c:
36:45:c1:ad:e3:32:fe:bb:30:d4:37:66:79:69:65:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FF:DE:4B:D9:44:4B:FC:D4:CD:48:7A:66:EF:9E:37:F4:2B:3F:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C042B46FB6211EFBAF6515B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.0.0/24
45.206.0.0/24
Signature Algorithm: sha256WithRSAEncryption
38:18:a9:d3:bb:2b:71:62:e9:c9:6a:0f:a7:09:28:97:14:d0:
0f:c2:53:ae:cc:a3:bc:fd:28:d4:60:ba:2c:25:8f:bb:96:c4:
ad:da:57:55:7a:f4:6d:01:32:4a:a7:d9:3c:3c:98:dd:8d:21:
6f:e2:80:b6:75:b3:bd:44:c7:ab:57:cd:ce:e9:70:6a:ed:69:
12:b6:96:67:c8:66:33:8c:ea:fc:e6:4e:cd:89:5a:3d:70:27:
dd:c4:55:01:5a:a9:a2:39:37:d2:b1:df:e6:90:be:08:0b:6f:
81:79:c4:12:88:4d:91:e8:09:d3:e6:c7:78:5d:ab:13:c8:a1:
ae:3e:6e:50:9e:ae:a3:dc:ab:6f:a7:36:40:c2:6f:73:df:f9:
8f:de:8c:a3:af:b0:5f:39:24:b8:cf:72:db:28:55:0e:89:d8:
ca:04:69:0c:04:fb:4e:ad:f3:f2:9f:94:fb:89:6c:4e:54:57:
cf:f5:89:a4:74:0d:aa:02:4f:aa:12:76:63:64:ef:a1:47:0b:
74:3e:34:1c:02:68:66:51:79:48:cc:1d:db:d1:99:18:69:1c:
32:fa:eb:db:91:81:74:39:13:a9:c7:f1:ee:3b:96:09:36:a5:
57:8e:2b:eb:fc:46:1e:f5:47:f0:89:74:33:99:ff:10:e4:5d:
d8:df:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:45 2025 by rpki-client