Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B38383B20A0F11F08849E4B2762E951A.roa
File: B38383B20A0F11F08849E4B2762E951A.roa (raw, json)
Hash identifier: 2NWvACeYcuv9vjhMolTpDMyiVinBlUBfHtzjpMFukhg=
Subject key identifier: 0C:11:6B:23:69:5A:7B:A7:93:77:9F:CC:0F:AE:B3:D9:E5:C3:C8:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01481C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B38383B20A0F11F08849E4B2762E951A.roa
Signing time: Wed 26 Mar 2025 06:58:20 +0000
ROA not before: Wed 26 Mar 2025 06:58:15 +0000
ROA not after: Tue 15 Apr 2025 06:58:15 +0000
asID: 401366
IP address blocks: 45.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83996 (0x1481c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 06:58:15 2025 GMT
Not After : Apr 15 06:58:15 2025 GMT
Subject: CN=67e3a58c-b1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:9c:47:41:03:83:7a:e3:86:d6:02:fa:3b:
8e:2e:2a:e8:63:9c:51:96:39:d8:71:df:2e:75:f6:
63:9a:bf:32:ad:cd:ec:c0:7e:57:1f:a4:f7:51:1f:
cb:a6:04:b8:f3:49:3f:6f:84:25:da:04:9c:13:79:
45:19:36:9a:b7:db:6b:96:8d:f2:ec:b3:69:dd:36:
96:ce:17:01:d2:80:1b:3e:b0:82:6c:8a:50:11:83:
52:8d:2a:22:24:2c:60:65:13:45:71:22:a9:55:e4:
28:1f:6d:8a:c4:56:61:c1:44:43:13:42:69:9b:38:
ea:3c:e0:29:49:d4:9a:6f:80:38:1d:63:ee:b1:46:
7b:9c:05:34:be:46:1b:12:35:2d:eb:34:5c:08:06:
50:da:af:ab:e2:8d:5b:4f:a6:f9:62:c5:7b:ba:0c:
b7:e8:63:92:37:a5:80:08:c2:39:4b:35:a2:f8:1c:
a0:c2:69:80:dc:23:6c:53:46:d0:40:80:cb:de:e5:
4e:fd:50:5f:39:0f:31:1c:03:52:36:5a:de:23:17:
f1:cd:f0:ac:09:7b:64:cb:9b:ee:aa:73:9c:ac:f7:
e5:66:7f:84:d8:ba:5f:da:e3:b5:14:fa:b1:b0:04:
ae:43:ee:d2:6f:89:6d:96:14:e4:fe:a3:6d:06:93:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:11:6B:23:69:5A:7B:A7:93:77:9F:CC:0F:AE:B3:D9:E5:C3:C8:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B38383B20A0F11F08849E4B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
53:88:5e:84:ab:1b:17:95:3c:30:df:9a:f9:f2:d6:ca:9b:9f:
46:4f:07:79:df:e4:f8:f2:bb:29:1e:7f:9a:1f:19:c5:db:6f:
60:7c:c1:87:79:e5:20:3f:f0:5d:08:ef:61:e7:6b:a7:e2:c2:
cc:04:96:5d:53:a0:cd:53:11:24:db:f0:96:0c:74:0a:58:b4:
15:ce:c2:65:54:73:34:ba:8f:3c:e3:34:3d:42:e3:bd:f9:42:
90:75:ae:1d:f6:87:41:32:1c:71:42:b4:15:85:b5:c2:48:b8:
ba:fd:1e:c6:6f:d8:b9:2c:76:19:84:9c:d5:f3:c4:fd:56:67:
31:c9:7e:af:0a:28:5a:3f:e6:a6:b5:b1:63:72:86:c9:58:34:
05:87:d1:7c:49:1d:45:fd:34:c8:4e:44:c1:2f:ec:bd:25:5c:
72:68:c5:a3:ec:15:75:4b:ef:c1:5d:4f:8c:8b:23:0c:00:c9:
4d:ce:0e:62:ce:ae:50:1b:65:39:99:3c:73:e9:44:8b:64:ea:
64:83:43:74:30:f7:6a:4a:df:c7:be:a2:23:d4:1a:46:c7:22:
00:68:39:e5:12:0c:7a:63:6d:9d:ab:5a:d2:18:cd:1e:f0:b5:
2e:5c:8f:94:55:e9:77:93:6d:5f:ab:8e:7e:02:3b:31:db:f5:
8f:17:30:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:31 2025 by rpki-client