Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A52D2906F46811EF8D918F61762E951A.roa
File: A52D2906F46811EF8D918F61762E951A.roa (raw, json)
Hash identifier: Kp6+MuuD9yv14Cfook9bNAN5IbdWbUwKM7BUwpeJe3k=
Subject key identifier: DF:F7:47:15:72:FC:42:A7:F4:DD:B4:DB:C5:F3:AA:18:38:92:66:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A52D2906F46811EF8D918F61762E951A.roa
Signing time: Wed 26 Feb 2025 17:39:36 +0000
ROA not before: Wed 26 Feb 2025 17:39:32 +0000
ROA not after: Thu 19 Feb 2026 17:39:32 +0000
asID: 984
IP address blocks: 45.201.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79290 (0x135ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:39:32 2025 GMT
Not After : Feb 19 17:39:32 2026 GMT
Subject: CN=67bf51d8-40c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:54:45:59:55:ad:ee:c8:4f:2d:05:db:ef:
8b:57:b9:22:66:06:9b:70:9d:29:18:3a:44:15:22:
d7:7f:63:26:ea:09:b1:b0:5f:c5:55:06:89:b1:3b:
48:88:6d:4f:68:4d:28:d1:7c:fb:94:c9:94:c0:dc:
16:34:52:0e:c3:5f:76:be:d3:81:7f:e2:c9:0b:80:
c6:c5:46:d5:50:8d:36:73:42:fb:fc:a6:e5:60:d1:
5b:9d:b3:41:4c:54:14:54:ac:9f:fa:18:4c:b9:2d:
29:24:88:2f:a9:e0:5b:96:00:36:93:ac:b6:50:ef:
5e:02:bd:7c:f7:de:29:84:8e:1e:93:89:a5:d5:06:
5f:46:9d:62:74:ad:59:1d:f5:1a:df:46:98:5f:a3:
78:1a:49:3d:fb:ae:1d:2c:3a:ab:6a:c0:96:a8:6f:
bd:95:19:51:f7:e5:73:09:4d:7b:af:d3:2e:73:e4:
22:ca:87:1d:91:0d:b0:33:22:0d:8e:c9:fc:67:2c:
c1:f7:85:68:ad:e3:66:d9:45:cc:03:45:88:4e:50:
fa:c7:6c:ee:64:bc:87:d2:02:56:7f:1b:5e:64:84:
d2:6a:16:ae:fd:77:e3:94:8f:26:13:15:78:23:d2:
1a:a6:62:9e:17:71:bf:35:65:69:42:87:eb:79:51:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F7:47:15:72:FC:42:A7:F4:DD:B4:DB:C5:F3:AA:18:38:92:66:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A52D2906F46811EF8D918F61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
83:79:b7:5d:cd:07:ae:a5:3a:ba:e0:6e:99:2f:e3:c6:0e:4b:
80:ea:b2:48:37:38:0a:73:92:0d:cf:d3:41:0e:09:2d:de:70:
61:1f:a0:b8:25:18:2c:39:09:f5:58:cf:4a:96:91:a2:b1:c2:
10:aa:6e:ae:e2:52:6b:02:8f:80:6f:9b:ab:17:c0:62:b1:0f:
73:32:65:5d:22:fe:5f:82:fb:6c:0d:87:fd:64:70:7c:61:22:
79:cd:7f:a3:85:13:35:54:1b:8d:ef:5a:83:0f:a4:a1:4e:a2:
52:e2:2b:44:44:05:d5:00:99:1b:90:bf:aa:a1:a2:9f:7d:ac:
74:60:9f:95:be:9c:14:bf:24:3c:73:0d:57:94:be:08:54:f9:
16:1a:1a:35:43:33:c1:8b:8d:fc:ce:1a:bb:09:32:b8:63:56:
6b:e9:ca:cf:37:57:f2:48:b0:82:f7:fd:07:19:02:ef:cb:78:
99:f4:aa:dd:89:6d:d9:0e:9f:b1:71:cf:8a:73:a3:17:c2:63:
9d:ca:29:5b:cc:04:0b:bb:8d:2c:e3:c8:92:25:44:dc:47:db:
c2:38:63:aa:52:1e:4f:9b:ca:58:f5:9f:a2:df:10:f9:a5:c7:
5f:1d:9b:36:1d:b5:42:0f:2f:c0:0e:b0:19:cf:3a:66:71:24:
84:bc:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:20 2025 by rpki-client