Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F48032F39711EF8D3C18BB762E951A.roa
File: 95F48032F39711EF8D3C18BB762E951A.roa (raw, json)
Hash identifier: JWun9G3s+3r7zoWmVEoDEs7tCnuyyjtMEE6TZtvzVew=
Subject key identifier: 43:89:BA:1C:28:CF:38:0B:7A:AF:C8:11:D6:D8:4D:6B:DA:49:B7:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012EA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F48032F39711EF8D3C18BB762E951A.roa
Signing time: Tue 25 Feb 2025 16:43:05 +0000
ROA not before: Tue 25 Feb 2025 16:43:02 +0000
ROA not after: Wed 09 Apr 2025 16:43:02 +0000
asID: 138915
IP address blocks: 45.197.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77481 (0x12ea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:43:02 2025 GMT
Not After : Apr 9 16:43:02 2025 GMT
Subject: CN=67bdf319-cb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:89:18:eb:d2:6e:82:b2:ff:fa:17:29:2b:
c9:8a:fb:b8:1d:41:de:60:b2:d5:c2:e3:db:66:d4:
8b:3f:c3:bc:2a:1c:70:2a:fb:71:6e:17:06:55:b1:
2e:ca:33:38:12:8d:e5:a2:bf:e1:98:1e:54:3c:a9:
13:1e:ae:11:0e:91:ee:7f:c2:e9:98:61:09:3c:e6:
c2:c1:9d:d2:94:b3:6c:d1:d9:6b:26:bb:03:67:c8:
c8:6c:f3:4a:48:95:c5:e9:1e:bd:5d:7e:3c:a0:29:
b6:9c:af:19:21:6e:24:50:f4:0f:3f:88:87:5a:b4:
9d:6a:67:c4:6d:ab:ba:75:a9:d3:3c:80:be:43:b6:
3f:5b:21:b3:eb:ed:24:fb:44:82:b1:e0:9e:35:44:
ba:fc:62:9e:b0:7a:7e:2e:18:71:80:51:e8:5f:7a:
ed:ed:7b:76:45:7c:d7:61:f5:a1:07:1b:6e:be:f2:
be:03:c0:20:6d:70:bb:98:8c:ea:94:b6:c0:39:95:
4b:d7:8b:43:d4:7a:01:e9:db:85:19:22:76:1a:58:
c2:05:16:61:b1:13:ac:1d:40:54:6d:7e:51:0a:38:
a4:40:81:4f:b4:1d:cb:02:7e:a1:71:82:8e:d1:b6:
55:0e:8d:55:c1:f6:a5:9c:41:11:13:59:87:56:29:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:89:BA:1C:28:CF:38:0B:7A:AF:C8:11:D6:D8:4D:6B:DA:49:B7:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95F48032F39711EF8D3C18BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2e:25:4f:7a:0c:23:83:7e:86:92:dc:e4:a8:21:bc:c1:89:
a8:d9:de:c4:8e:4b:c9:3a:28:4c:bc:ba:a5:d7:29:cf:b6:7d:
d1:3f:fb:fd:8e:26:f0:8f:5b:b0:42:50:2e:94:94:5f:17:1e:
ba:2a:93:fd:e5:b4:0d:f3:07:3b:33:14:27:2b:a3:fb:63:66:
80:93:78:d8:ff:a4:ce:ea:89:98:3b:2c:99:ce:a9:ff:c0:7c:
d0:e6:0f:1d:77:97:2e:b3:d3:19:f3:34:fa:43:d0:c0:f3:b5:
df:0e:d9:61:8b:7b:f2:15:21:51:aa:e3:a9:78:22:ff:6a:e3:
db:23:57:e1:20:09:0b:48:f5:af:27:31:23:58:7d:5e:03:cb:
40:51:cd:5a:ff:75:50:8d:20:64:f7:ef:3a:5e:8f:93:0b:93:
73:2c:b7:f8:ce:91:5e:5e:91:d4:3e:a3:68:af:52:0d:a7:2c:
2a:8f:1f:a0:65:8d:bb:62:04:aa:59:23:5c:ea:1c:01:ed:74:
ff:6e:28:d7:b8:23:6e:a7:5f:4e:bd:ea:c9:b1:26:0a:6b:82:
f3:31:64:39:ff:a9:f9:b0:14:ef:43:ba:13:ef:33:fd:bf:91:
25:23:82:12:b8:c3:b6:9d:51:a0:26:0f:03:80:bd:38:73:7e:
6f:8b:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:45 2025 by rpki-client