Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DC3A910F38711EFB499E24F762E951A.roa
File: 9DC3A910F38711EFB499E24F762E951A.roa (raw, json)
Hash identifier: W1m2My+VlT/FoYRbNltVvlW05u4LgFmm7NjR1JOHAT4=
Subject key identifier: B8:03:13:17:83:96:AF:A6:09:D0:44:14:8C:56:94:CA:BE:22:72:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E3E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DC3A910F38711EFB499E24F762E951A.roa
Signing time: Tue 25 Feb 2025 14:48:47 +0000
ROA not before: Tue 25 Feb 2025 14:48:33 +0000
ROA not after: Wed 09 Apr 2025 14:48:33 +0000
asID: 63139
IP address blocks: 45.197.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77374 (0x12e3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 14:48:33 2025 GMT
Not After : Apr 9 14:48:33 2025 GMT
Subject: CN=67bdd84f-4661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:cc:1e:c5:b2:f8:a5:e8:47:5d:42:f5:12:
75:26:44:26:50:b3:45:d4:1a:57:95:be:3b:54:1f:
83:54:db:4b:00:2a:6b:38:b1:f9:a7:71:7d:8c:02:
e5:b4:e0:53:3a:dc:d0:6e:05:4b:df:b8:ef:cd:50:
91:e3:3f:6d:0b:6c:17:9d:c4:a2:08:4a:37:1a:18:
80:35:e7:7d:59:49:36:96:3a:4d:8b:72:0a:89:43:
c6:b0:21:80:a2:f3:40:5f:2d:30:29:0a:6e:f0:cd:
56:90:72:c5:66:51:c2:6d:3d:dd:7c:13:53:66:05:
21:63:7d:4c:9f:a0:47:3d:88:9d:3a:9b:46:44:0b:
e9:1b:3d:53:45:dd:66:de:de:f5:3f:0b:de:cb:c7:
d8:e2:b3:93:95:0d:4f:2f:3f:f5:fe:ba:37:0b:64:
7d:25:d1:d3:81:db:ff:89:8f:ca:0c:5a:8e:c1:bd:
39:95:1e:f5:8b:7d:a6:08:f5:c2:5b:fc:ef:61:84:
db:91:34:59:40:80:3e:77:70:97:8e:0a:4a:66:41:
42:58:5e:d3:c2:21:59:43:eb:fc:67:87:0a:cd:0d:
dc:da:35:2d:df:e5:47:aa:65:23:a1:ee:a0:b9:6e:
cb:b5:b9:70:2b:81:f3:b9:c7:7b:d9:74:75:68:fd:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:03:13:17:83:96:AF:A6:09:D0:44:14:8C:56:94:CA:BE:22:72:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DC3A910F38711EFB499E24F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.90.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d0:fc:41:4b:e1:93:9a:af:52:24:6f:ee:0a:94:79:63:a9:
33:72:f0:81:4d:76:75:b3:4c:b9:6c:33:61:85:12:f4:b6:64:
5e:16:04:a4:05:6d:7d:7f:58:22:d9:84:e2:1a:70:18:7b:8f:
c6:cf:fd:01:32:ec:6f:95:18:3f:8a:1b:09:19:02:ba:2b:cd:
27:5d:0f:4b:65:6c:9e:f5:18:a0:63:78:8b:41:8d:73:1e:21:
33:c2:6c:51:b8:20:29:e4:d9:3d:40:34:fa:72:e8:49:f5:d2:
3c:c0:e3:e4:bd:24:a8:ea:b7:38:56:62:8b:32:8f:40:80:fc:
bc:a7:84:8e:cd:83:0a:92:8d:a5:15:df:21:95:3d:da:b9:43:
d5:84:73:fe:fc:d8:91:10:0a:4e:c3:fb:85:30:b0:fb:c6:04:
e1:34:1e:86:0c:bb:f0:2b:1b:3b:c3:72:e2:4b:7f:db:a4:58:
5d:ad:0d:51:d9:e6:81:7c:de:f5:05:aa:3f:13:6b:05:b6:8a:
c3:e2:c8:63:e5:d2:87:b4:d8:8c:38:73:f5:ae:6a:be:67:24:
e0:69:6e:05:1f:8f:e9:14:69:9f:c8:c1:51:d5:1c:a2:db:4c:
8c:ac:f5:7a:4f:da:8f:a4:30:83:30:e4:55:27:47:71:6b:53:
75:f5:d6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:42 2025 by rpki-client