Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA831D2FB2D11EFBC969779762E951A.roa
File: 9DA831D2FB2D11EFBC969779762E951A.roa (raw, json)
Hash identifier: YpaOSv6brCkCFbzmgDd3QkvjqrnmIKsMGYd2lm1gz9A=
Subject key identifier: 3F:1C:08:9B:55:08:51:68:50:42:12:03:3E:1C:BE:C5:94:F3:34:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA831D2FB2D11EFBC969779762E951A.roa
Signing time: Fri 07 Mar 2025 08:24:41 +0000
ROA not before: Fri 07 Mar 2025 08:24:37 +0000
ROA not after: Thu 10 Apr 2025 08:24:37 +0000
asID: 61112
IP address blocks: 45.192.240.0/24 maxlen: 24
45.192.241.0/24 maxlen: 24
45.192.246.0/24 maxlen: 24
45.192.247.0/24 maxlen: 24
45.192.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82906 (0x143da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 08:24:37 2025 GMT
Not After : Apr 10 08:24:37 2025 GMT
Subject: CN=67caad49-5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:c5:41:20:a5:c0:1f:c6:35:98:67:fe:29:
43:f2:d4:9c:a3:61:8e:d9:76:51:cd:1c:0e:13:9f:
0f:82:a3:a6:e1:a7:82:38:53:85:ac:69:a5:02:1d:
db:36:fa:0b:44:e5:25:6d:a1:f8:07:c4:94:ac:9b:
c3:6b:bf:73:a8:98:a0:12:47:77:d0:56:8e:e8:37:
33:d0:7c:a8:36:c3:d0:a7:02:72:e9:ca:04:03:1b:
32:14:29:08:c2:54:40:2c:59:d8:48:83:cd:8b:32:
ba:2b:41:a4:03:33:23:ee:67:ae:c1:22:07:74:fa:
4d:a3:b8:da:69:c3:a3:df:dd:45:37:61:76:2d:3e:
1b:5e:17:0b:31:90:b4:72:97:8d:a2:e4:5b:fb:1c:
18:b9:9f:25:99:4a:22:e0:de:6d:89:9f:70:d3:e4:
e2:47:f1:c7:a7:3d:be:ad:e9:26:98:d8:ab:ec:c7:
72:f3:3d:b0:4c:bd:d3:20:8d:84:4a:1a:3b:e6:32:
a1:42:c5:48:1f:46:89:4c:ac:c1:aa:40:7f:97:38:
a1:67:3d:9f:3d:a0:43:39:38:4d:80:78:75:ab:76:
df:7f:f5:e8:0d:68:00:c9:fd:3f:ab:01:43:ef:29:
c2:1f:cd:4c:f1:ff:55:de:e8:2a:bb:54:27:90:67:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1C:08:9B:55:08:51:68:50:42:12:03:3E:1C:BE:C5:94:F3:34:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA831D2FB2D11EFBC969779762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/23
45.192.246.0-45.192.249.255
Signature Algorithm: sha256WithRSAEncryption
41:0b:5e:cb:f1:57:de:f3:d4:56:c4:78:2f:c4:51:b2:18:52:
69:d6:39:af:ed:40:c1:fa:08:d2:db:02:72:a7:83:a6:b8:b0:
7a:f1:4d:bf:dc:6e:88:91:f6:d8:53:14:23:d8:e5:04:de:3a:
04:d9:03:23:ba:44:e1:ab:dc:8e:c8:a3:e1:21:a8:05:12:6d:
ee:6c:69:52:bd:ee:58:08:87:88:db:6c:9d:96:fb:df:b1:9e:
de:1d:7d:01:32:ce:0e:bf:cd:7a:aa:11:66:26:fa:84:d9:54:
93:c7:e9:57:f2:8d:62:d6:cd:86:68:02:d8:2c:5b:93:d0:a9:
49:38:08:0a:55:2d:72:e5:4b:37:cf:aa:7d:17:69:96:dd:5b:
b3:71:e1:a1:60:8b:fe:58:67:5b:9f:d3:8f:c6:80:ee:2b:c5:
6b:32:b0:fa:03:07:5f:a9:e9:83:f5:16:e0:c4:03:f7:59:8c:
ce:e7:6b:da:21:b4:90:b3:54:35:81:23:6c:42:26:d1:13:c6:
94:fe:d4:3d:f7:6b:cc:45:2c:76:d5:ef:80:98:6e:15:fe:76:
2d:ae:42:74:50:ef:9d:b5:01:97:b0:b2:ac:73:bf:e9:d5:54:
26:73:fb:ee:7f:a3:37:6e:85:6b:0b:ea:5c:c7:74:95:1a:12:
94:5d:5f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:41 2025 by rpki-client