Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93DA4AE20F9511F0B92DE16A762E951A.roa
File: 93DA4AE20F9511F0B92DE16A762E951A.roa (raw, json)
Hash identifier: XR/kJVl73zku+W2SNLwRZjFwbigW0N/4KCWf1rsd2fs=
Subject key identifier: 73:0B:AC:94:43:D9:76:A3:29:88:D3:6E:35:49:4A:E2:DF:21:BA:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014951
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93DA4AE20F9511F0B92DE16A762E951A.roa
Signing time: Wed 02 Apr 2025 07:39:15 +0000
ROA not before: Wed 02 Apr 2025 07:39:11 +0000
ROA not after: Thu 08 May 2025 07:39:11 +0000
asID: 215691
IP address blocks: 45.198.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84305 (0x14951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 2 07:39:11 2025 GMT
Not After : May 8 07:39:11 2025 GMT
Subject: CN=67ece9a3-cfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:d1:ec:64:fc:20:fe:e0:12:f8:7b:23:b5:
f0:65:d4:ea:c5:96:3b:68:45:d3:b9:bd:c9:31:26:
74:8a:23:50:c3:0d:49:99:eb:aa:14:75:40:ad:fc:
1c:21:31:2b:df:b4:e2:20:ee:64:4b:fe:48:86:9e:
2f:f6:2f:11:ea:eb:69:5e:b1:c7:fe:33:ea:e6:c5:
be:4e:fa:a4:b3:00:a8:f3:2f:74:43:c7:44:94:e6:
28:e7:5a:c2:da:b9:a4:3b:3d:b9:89:c2:c8:87:78:
0c:1b:bd:0e:46:27:65:2c:13:ae:06:c5:44:06:1f:
9e:67:d6:6f:8b:8b:26:3c:67:ef:cf:ec:53:37:2b:
e5:44:a6:b3:c6:e8:fe:06:8a:63:a3:d3:98:9b:26:
4d:4a:c9:3a:85:c8:c4:b1:8b:58:a7:aa:40:33:a5:
93:90:65:cf:29:0e:ad:7f:9f:1a:ea:4f:c8:92:b7:
db:90:55:84:08:73:fd:05:81:7e:49:42:ea:7c:d6:
a4:15:9b:cb:15:9d:ce:3f:dd:f0:2c:84:cd:f9:9f:
80:b0:4a:f6:48:9c:d0:a6:d7:9f:fd:ce:a2:d3:90:
a9:07:b3:91:8d:1b:a3:07:ef:44:3a:2d:a7:ce:31:
c7:27:96:21:ec:43:90:d7:9c:be:55:00:55:8c:8c:
77:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0B:AC:94:43:D9:76:A3:29:88:D3:6E:35:49:4A:E2:DF:21:BA:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93DA4AE20F9511F0B92DE16A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c2:ea:01:19:80:eb:f9:93:a2:21:60:7b:80:d2:0c:31:17:
e3:f4:8c:6c:21:25:bf:e1:12:3f:ec:fb:49:8f:d4:ca:52:4b:
39:70:e9:1f:e4:2a:f1:e9:65:f2:d6:c0:66:a1:7a:94:7c:b5:
37:7d:0f:e4:a2:6e:9a:61:40:2b:1f:43:b2:ac:37:ee:96:a9:
b0:47:89:2a:a8:3f:4d:35:9d:ce:a1:c7:4d:e9:8d:ac:38:f2:
71:45:c7:84:c8:ac:d2:a9:17:6d:71:46:1c:b7:bf:2a:43:9a:
6f:a4:0b:5e:d0:5e:75:a1:e0:d6:04:35:40:33:76:39:43:fc:
e2:87:31:7e:9d:31:54:e2:25:5a:19:b9:6f:4c:3a:e7:34:64:
bc:47:61:ed:0c:44:e1:c2:97:1e:41:3c:1a:ff:a7:79:3c:dd:
3a:77:3f:5f:27:36:e1:84:34:e9:86:57:b4:55:96:42:b2:a7:
cc:0d:61:76:aa:6e:2f:29:84:bd:59:a2:34:73:7e:14:36:83:
a8:35:ba:72:d0:80:a0:a5:7f:1e:af:b7:ae:1a:63:fa:39:c5:
ae:d2:5f:f6:7a:75:1d:d4:0f:32:bf:0f:f9:20:0f:30:0a:4c:
1d:0b:cc:5e:fb:fe:36:bb:08:c5:15:3c:b5:a3:89:1f:15:46:
f8:85:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:31 2025 by rpki-client