Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9032488F48111EF846E0490762E951A.roa
File: D9032488F48111EF846E0490762E951A.roa (raw, json)
Hash identifier: rD3vJc94FSYxnLDc1efh4XsSPJSg7UOtYsY2goLTAKw=
Subject key identifier: C0:78:82:2D:21:46:ED:E0:15:94:A8:35:5F:A4:3B:6D:C7:1F:C8:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013794
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9032488F48111EF846E0490762E951A.roa
Signing time: Wed 26 Feb 2025 20:40:00 +0000
ROA not before: Wed 26 Feb 2025 20:39:56 +0000
ROA not after: Sat 19 Feb 2028 20:39:56 +0000
asID: 17561
IP address blocks: 45.200.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79764 (0x13794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 20:39:56 2025 GMT
Not After : Feb 19 20:39:56 2028 GMT
Subject: CN=67bf7c20-7795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:db:cb:90:12:9d:a6:a7:d5:c3:02:69:af:
bc:27:cf:67:f3:f9:62:e2:46:ec:0d:f3:74:d4:77:
ec:b6:cc:1e:28:67:62:ca:5a:8b:79:34:19:e5:4c:
b7:41:c7:c7:9c:4e:0b:e2:c3:25:93:c1:1f:af:64:
42:99:28:d8:47:5d:85:47:9e:5a:21:50:40:46:c1:
4a:29:64:14:8c:b5:1f:b4:1b:0b:e8:9c:13:db:89:
0d:b3:ad:67:2a:e9:35:82:77:6b:c9:4a:33:6e:c4:
00:0f:08:f5:9f:04:0f:3b:e2:43:e8:18:9c:1e:36:
5b:08:16:cc:e2:19:49:b8:50:65:2f:af:b8:de:8e:
5c:d8:2a:85:f4:80:cb:e2:5c:19:92:6f:62:37:65:
fc:7f:82:32:85:eb:c8:80:45:64:41:33:27:bf:2a:
b6:b2:96:f1:1f:29:1e:f6:41:ff:b6:b1:cb:53:5e:
5d:74:71:df:7e:4d:82:57:e8:5e:5a:de:74:2a:b5:
df:81:9f:ca:63:48:50:42:f9:57:6f:6c:d5:0e:3d:
bc:5c:43:a3:bc:0f:92:1a:ab:8a:d9:2a:4a:90:68:
21:83:18:a4:c7:5d:a3:b1:0a:cc:cf:eb:85:43:6c:
e9:18:85:f9:38:c9:be:bf:20:78:cd:92:10:22:9a:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:78:82:2D:21:46:ED:E0:15:94:A8:35:5F:A4:3B:6D:C7:1F:C8:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9032488F48111EF846E0490762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:5f:d8:3a:93:55:6d:d3:27:97:3a:89:33:71:76:cc:b5:df:
8f:94:39:6c:46:58:5f:98:39:8d:2e:c0:de:04:f4:c7:65:a3:
aa:8b:10:82:8a:8b:8c:64:3d:97:b1:b2:88:2a:fe:f1:f5:f1:
44:8c:1c:8b:e9:92:c3:dc:b5:9b:d9:69:20:7a:07:ea:0b:27:
97:cc:c2:4d:c4:40:00:f6:29:87:ee:54:b6:71:6b:62:35:ba:
84:a4:87:e7:b2:45:67:15:a9:04:a5:31:47:c5:bc:00:ba:64:
28:48:1f:5c:09:52:b6:ef:42:12:2e:71:b3:0e:86:52:0d:d7:
29:be:95:da:e0:28:96:71:7b:e0:13:56:48:45:9b:4b:d1:4a:
d3:04:d0:fb:45:29:e3:22:67:5c:18:b5:82:45:ce:e8:a7:6a:
84:28:bc:a2:28:7c:12:0c:c1:97:b5:0f:90:e6:fb:73:7a:93:
61:fb:77:f9:65:7f:94:8c:57:ff:99:29:fd:d1:1e:8a:4b:36:
a5:ef:b4:83:e0:04:b2:04:55:27:26:f7:40:be:db:d7:83:a3:
e3:26:9a:bb:cd:aa:78:46:63:ba:c0:59:f3:a4:65:c9:76:b6:
f2:17:61:4f:8e:5d:df:ca:6d:cc:8a:8f:e7:44:84:9e:89:48:
24:ea:f4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:29:15 2025 by rpki-client