Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D404C984E53411EF8A211759762E951A.roa
File: D404C984E53411EF8A211759762E951A.roa (raw, json)
Hash identifier: 9tycQJoDZ5mSmWqF7eSWn79jfqa6i+k6K30GldJkOhY=
Subject key identifier: BF:26:A2:65:6B:89:8F:52:36:43:9A:D3:AF:D8:87:EC:E9:F7:57:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D404C984E53411EF8A211759762E951A.roa
Signing time: Fri 07 Feb 2025 09:20:53 +0000
ROA not before: Fri 07 Feb 2025 09:20:49 +0000
ROA not after: Sun 02 Mar 2025 09:20:49 +0000
asID: 401434
IP address blocks: 45.196.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 24 Feb 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72868 (0x11ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 09:20:49 2025 GMT
Not After : Mar 2 09:20:49 2025 GMT
Subject: CN=67a5d075-497b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:3d:ac:3c:d6:5c:9c:b2:4e:d4:4e:ab:28:
bb:2e:ce:92:0d:42:67:86:f8:f6:b2:52:6f:40:b5:
86:5f:fe:d3:c3:1d:08:88:ff:f9:43:d8:fa:2b:a2:
03:df:1c:82:c4:64:4f:32:eb:75:a7:f9:f9:87:fe:
32:23:76:7c:1f:5a:52:62:b6:79:c0:4d:f4:28:2e:
1f:f2:29:c0:e5:54:d3:ed:3b:5a:52:dc:13:00:d5:
3a:92:fd:58:5a:59:b3:eb:f0:1c:6a:30:6d:a1:61:
9d:7c:27:b6:7f:a3:97:0f:c3:62:d3:36:80:c0:18:
d3:fd:ce:a4:9a:0c:ed:7e:98:10:07:88:41:72:dc:
df:85:42:61:74:c7:23:fc:f8:71:95:4d:80:52:c2:
80:68:be:71:49:f1:18:df:39:67:b2:c6:fd:96:06:
fd:ba:a5:85:65:e5:e8:74:21:69:64:bd:2c:43:d8:
18:99:af:3f:41:57:e4:32:55:7b:14:fd:80:62:8c:
6f:84:3f:c6:b1:f7:2f:46:93:4d:21:cc:eb:3b:7b:
57:3a:e6:72:e4:78:e9:a5:f7:50:32:88:65:5c:19:
d6:86:db:d1:81:f2:1f:ff:00:15:ac:c0:cc:34:b6:
9f:cb:4e:a4:5e:2a:a5:17:32:c8:3a:74:eb:e9:f4:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:26:A2:65:6B:89:8F:52:36:43:9A:D3:AF:D8:87:EC:E9:F7:57:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D404C984E53411EF8A211759762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.216.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:52:da:c4:73:5e:64:e3:05:f1:14:0f:d5:9d:f2:d8:24:d4:
81:45:ff:a4:10:20:2b:be:5b:b6:d9:a3:87:34:94:4f:80:82:
a9:88:e4:76:c3:99:a9:b5:af:5b:ad:e2:58:0b:c4:64:61:1d:
f8:0e:8f:3b:30:d3:63:4c:7a:1a:5f:82:ea:25:04:e6:f1:ad:
ec:30:e1:a5:3d:c6:a7:dd:56:2e:0e:2d:d7:3a:88:35:c2:cf:
5f:c2:77:89:5c:e0:27:93:dc:24:a2:22:6c:c8:18:ad:51:d0:
ae:31:65:35:3b:05:7b:2f:bb:fb:fe:07:0d:9b:fa:a1:62:4a:
cb:4a:1f:72:90:42:03:6c:cf:29:94:03:b5:5b:8a:6a:ec:05:
24:a7:af:a5:7d:e7:a9:28:f5:b2:75:8c:f5:3a:f0:40:ff:86:
ad:da:d6:12:3e:fd:4c:ef:8a:cf:2b:07:a1:92:7a:1c:75:c6:
10:23:ee:4c:b4:d7:ab:e8:45:52:31:71:95:4f:4a:5a:77:22:
f3:98:4c:cc:02:2d:c0:79:fa:17:37:32:77:14:25:0d:5b:95:
45:19:2b:80:54:38:6b:17:19:ee:93:1a:7f:8d:0e:83:7a:1c:
51:a9:d7:82:9e:c5:a4:18:45:66:cc:f6:e2:11:b9:8c:22:85:
46:a5:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:49:23 2025 by rpki-client