Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/921393E0F36011EFA613EA4A762E951A.roa
File: 921393E0F36011EFA613EA4A762E951A.roa (raw, json)
Hash identifier: tm18hIW1KT8X8gYQWg+c6boyymDdfkKVuECOFzNr+yU=
Subject key identifier: CC:F2:E7:8C:B3:91:E8:24:F1:7A:CB:3C:98:5E:F9:04:B2:7B:13:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/921393E0F36011EFA613EA4A762E951A.roa
Signing time: Tue 25 Feb 2025 10:09:16 +0000
ROA not before: Tue 25 Feb 2025 10:09:13 +0000
ROA not after: Wed 09 Apr 2025 10:09:13 +0000
asID: 63139
IP address blocks: 45.197.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77330 (0x12e12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 10:09:13 2025 GMT
Not After : Apr 9 10:09:13 2025 GMT
Subject: CN=67bd96cc-8e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:0d:d5:14:f9:9a:07:23:70:9a:ee:56:77:
d4:b2:bc:7c:8d:87:45:9c:39:64:f6:b9:7e:35:86:
4e:27:3d:6b:ee:17:3a:3f:f9:cb:f9:91:d2:b0:e8:
a0:f6:9b:ff:78:cc:a4:e0:c4:c7:0c:3b:67:01:46:
ba:a8:44:f1:7a:73:eb:33:28:ee:77:a4:d3:05:d4:
f8:0b:8a:80:9a:7b:ea:6b:35:04:b4:73:61:fb:ed:
28:d4:b4:6b:6d:7d:fa:c4:04:ce:e8:b5:96:fc:18:
8f:9a:7f:dc:fb:6c:3b:26:f0:58:00:c5:3a:33:11:
0a:2a:dc:c4:66:b8:2b:17:14:29:e9:c0:4b:b3:35:
e3:fe:af:a0:3d:6d:ad:95:52:e6:26:67:57:9b:3c:
d4:7b:d2:7d:2c:31:2e:7b:41:b5:2e:63:e4:21:3b:
63:a0:6b:bb:32:9f:59:e1:18:b0:ad:74:ef:47:15:
a8:25:84:38:60:a6:ad:d5:55:59:eb:6b:d6:67:11:
86:95:2d:31:44:9c:da:30:74:f9:f1:81:1a:50:e3:
d3:9f:eb:25:70:73:16:db:a1:fb:d0:50:6c:5f:9b:
51:69:45:f1:ea:8a:ed:b4:39:e9:7b:6b:dd:92:95:
b9:1b:d2:f8:9f:a6:73:ee:00:d4:49:b2:9d:0c:c9:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F2:E7:8C:B3:91:E8:24:F1:7A:CB:3C:98:5E:F9:04:B2:7B:13:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/921393E0F36011EFA613EA4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.71.0/24
Signature Algorithm: sha256WithRSAEncryption
07:1d:20:b9:09:37:29:1b:2f:31:00:2c:c1:9e:34:fa:e1:4b:
37:0e:52:f4:e6:a0:c3:98:54:a3:f3:43:9d:04:9b:bc:b5:0a:
a3:d0:6c:b6:1a:7b:9f:31:b9:9b:2c:0d:b8:bf:98:97:d9:c4:
b3:3e:6b:4a:14:0b:e1:6c:3d:6d:a0:8b:5a:c0:a4:84:58:a8:
2a:8c:f6:0b:a0:13:b9:1e:39:26:58:e6:7b:70:65:66:a9:dc:
5a:b4:0a:80:41:d4:5b:03:2e:08:03:19:25:23:49:12:7c:89:
6a:e6:16:30:8e:31:1d:95:4c:c1:ac:77:b3:8a:00:ce:d3:02:
b7:4d:eb:77:ce:9b:6e:3b:fd:bc:d4:05:dd:7a:89:04:73:57:
07:e5:dd:8e:2d:11:5a:70:a4:6c:9f:2f:95:6b:8f:19:1f:69:
fc:71:26:24:0b:dd:ce:76:60:cc:6e:99:72:f0:4a:4d:3a:fe:
9a:1d:b3:69:24:42:14:84:9b:a2:6f:0f:5f:83:71:c2:7c:c0:
b5:69:4e:dc:aa:f8:0d:f2:3a:3f:ba:da:62:02:28:cd:e7:8a:
78:87:72:d9:71:23:85:df:ae:3f:ac:0a:63:05:2e:0f:be:cf:
ea:80:09:62:9c:65:cf:6d:a2:03:4c:90:4a:c1:19:81:52:b6:
02:eb:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:30 2025 by rpki-client