Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0549CE402F811F0B061C790762E951A.roa
File: B0549CE402F811F0B061C790762E951A.roa (raw, json)
Hash identifier: bi1gmF1w0+D+U35a3E8VJaaxaG3/3fe4PAqFQxOlR1s=
Subject key identifier: 86:89:7E:C8:D0:5A:92:24:E1:A8:FA:29:B5:DF:9D:B9:EC:12:EA:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01466E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0549CE402F811F0B061C790762E951A.roa
Signing time: Mon 17 Mar 2025 06:25:58 +0000
ROA not before: Mon 17 Mar 2025 06:25:54 +0000
ROA not after: Sat 12 Apr 2025 06:25:54 +0000
asID: 197547
IP address blocks: 45.207.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83566 (0x1466e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 17 06:25:54 2025 GMT
Not After : Apr 12 06:25:54 2025 GMT
Subject: CN=67d7c076-44fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:c6:fc:3a:7a:73:01:39:ee:d6:57:b1:b1:
19:0f:8e:98:1d:ed:1f:bf:06:e2:29:79:51:5f:b5:
53:69:8e:bf:2e:69:83:fb:22:0e:47:8e:dd:e6:d3:
63:90:4a:ef:a2:d2:38:4d:9a:94:d1:f9:8c:ca:71:
7e:c2:c4:7a:31:eb:31:69:02:2a:f5:05:e3:36:78:
99:cf:eb:70:d9:dc:af:2d:14:07:84:13:f7:35:93:
f3:cd:92:42:ca:f5:7e:d5:f6:fa:e8:f2:05:74:9f:
53:44:92:b2:fa:7a:a4:1c:9e:63:18:a3:b7:26:6c:
c7:0b:5f:a0:ea:f0:bd:8a:06:ed:90:8e:52:0a:22:
6b:25:f7:c1:4e:28:3d:2d:d8:a1:3b:c3:ff:49:3a:
55:db:89:52:d6:4c:8f:c6:81:72:5a:dd:2b:7f:a8:
4f:0d:6a:64:d4:16:42:22:d2:a5:2e:af:74:5b:0d:
fb:61:71:4e:99:1d:1a:51:69:8c:06:05:53:60:89:
b2:8a:35:b9:04:4a:5d:35:d4:47:a1:0f:d7:68:e2:
95:e4:e5:53:c4:50:96:28:e4:41:60:02:4a:34:b4:
70:06:fc:e8:e2:68:df:2f:6c:cc:ed:57:27:06:5d:
db:29:9c:fc:8b:11:f4:75:0e:b5:a0:e4:a0:51:ca:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:89:7E:C8:D0:5A:92:24:E1:A8:FA:29:B5:DF:9D:B9:EC:12:EA:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0549CE402F811F0B061C790762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.221.0/24
Signature Algorithm: sha256WithRSAEncryption
65:38:bd:86:b5:50:0f:d5:58:4f:42:3d:1d:b5:fd:8e:3a:a7:
97:28:33:8e:54:11:d2:48:e4:5d:49:08:3b:61:99:83:66:1e:
7b:14:7f:27:80:c0:f8:9a:5f:52:5a:42:76:c7:4f:b3:43:13:
08:66:30:f4:45:73:e8:c6:5f:10:43:98:0c:07:d1:3f:2e:46:
cd:c2:99:99:63:6c:ef:23:62:91:2e:29:80:d5:e8:45:4e:12:
be:dd:43:23:69:21:ef:e6:5e:31:23:ae:c9:34:6e:f8:bc:2e:
38:7d:ff:a4:74:82:5a:2f:bd:10:fb:1e:63:b0:c5:9b:b6:71:
41:78:6c:31:2c:e6:39:e5:aa:46:1f:9e:bd:37:8e:4d:1e:9b:
2d:29:25:18:10:6f:34:3e:93:c6:47:52:65:6a:0a:60:b7:d1:
f6:bd:45:a9:d0:3b:e5:cf:02:17:1b:cc:06:15:ac:7e:a7:df:
69:10:d1:2c:df:a8:82:88:88:fb:e8:59:b5:18:a8:e9:d3:0b:
64:b5:15:87:3c:9b:a5:3a:f9:2b:ea:c9:91:9a:86:f9:61:1a:
8a:7a:68:3c:b7:5b:95:7a:72:3a:eb:15:65:ec:f9:0f:d3:6b:
91:1d:62:4a:f9:71:68:a0:36:f9:43:59:be:f4:5a:9b:f1:83:
3f:a4:e5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:44 2025 by rpki-client