Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E47935B0F99E11EF9DFAF673762E951A.roa
File: E47935B0F99E11EF9DFAF673762E951A.roa (raw, json)
Hash identifier: P5R070A13DdySHisyyBghf0fHOm2OwHrXZEnIXeDyIw=
Subject key identifier: C3:96:AA:81:22:64:79:D4:BD:C5:BC:BB:53:E9:E5:11:5E:FA:FF:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014342
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E47935B0F99E11EF9DFAF673762E951A.roa
Signing time: Wed 05 Mar 2025 08:50:31 +0000
ROA not before: Wed 05 Mar 2025 08:50:27 +0000
ROA not after: Wed 31 Dec 2025 08:50:27 +0000
asID: 17561
IP address blocks: 45.207.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82754 (0x14342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 5 08:50:27 2025 GMT
Not After : Dec 31 08:50:27 2025 GMT
Subject: CN=67c81056-4f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:77:1f:65:70:62:6a:98:1f:4d:b4:4e:43:
82:cb:8d:71:bb:9b:02:f9:74:f3:40:06:78:27:28:
46:10:4b:1c:eb:47:19:e6:21:a9:11:ec:c5:4a:df:
30:7f:dc:bb:59:8f:40:27:6c:02:67:12:2b:ff:a8:
f5:4d:6c:71:ac:f4:7c:7a:d2:1f:9a:57:0f:f9:ef:
6a:da:7d:46:84:6e:93:21:4c:54:47:87:f9:03:0e:
d6:64:0a:f7:5f:13:0f:c6:7a:3a:ae:0d:d8:8d:61:
cb:da:b1:d8:2a:5d:8b:19:fd:f8:4a:f0:52:71:1d:
ed:19:e6:40:01:71:e3:6d:33:e5:20:62:b1:63:a5:
b1:4b:7e:4e:0b:b9:c2:f6:84:7a:35:ea:24:b6:e9:
77:04:68:b5:8b:49:9e:af:71:d1:26:61:96:a5:2b:
d4:2f:b0:ef:72:01:f2:5d:16:a8:d2:51:42:b8:48:
02:59:b5:cf:08:03:40:5f:96:4e:3e:f9:d2:ca:b1:
da:ef:bc:2a:d7:36:54:cd:24:ab:5e:a9:b6:15:d0:
44:81:50:57:ce:0d:93:39:60:ec:b0:89:a0:d8:43:
ba:db:72:b5:fe:49:53:00:f8:09:88:d1:71:47:75:
b4:5b:e8:df:1f:67:e5:19:dd:7d:19:4d:94:78:5e:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:96:AA:81:22:64:79:D4:BD:C5:BC:BB:53:E9:E5:11:5E:FA:FF:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E47935B0F99E11EF9DFAF673762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.176.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:4e:55:71:8e:7e:a8:49:7e:84:68:80:5e:ab:05:bd:0d:db:
cb:e7:27:48:96:61:22:e9:2c:dc:16:07:e7:bb:d8:4f:06:50:
5c:bc:bd:fd:0e:fb:dd:37:9f:1f:b8:5f:0f:a3:36:06:cd:ec:
13:26:2e:7c:6e:e7:1a:f6:24:c9:66:2f:d1:ac:b9:fa:73:b6:
ea:88:ea:75:b0:f8:62:13:4e:b9:ba:81:20:4a:e2:28:52:37:
c4:04:0a:69:8d:53:4c:96:31:6e:0a:a8:7a:87:48:07:57:b7:
9e:00:8d:a9:41:97:08:a0:ce:e7:33:94:54:f3:6e:9f:4f:fa:
57:07:47:d3:20:ff:5f:62:ab:32:12:06:42:03:f1:6f:4e:dd:
1a:e2:52:a0:7e:b8:b8:ec:70:54:22:71:ac:01:6c:b7:01:56:
b3:40:04:32:34:8d:b1:5c:9e:30:59:2a:49:a0:ad:59:08:f7:
40:e2:fa:6c:e0:a4:a9:5a:a3:6c:63:bf:93:eb:6f:f0:6a:cd:
56:39:86:56:3b:ea:7e:47:cc:4d:a3:06:b1:6d:70:9d:9c:9b:
f4:58:cc:b4:1f:80:ab:6a:f8:ee:a8:18:0d:26:e5:59:6c:13:
aa:6d:51:5b:9b:7d:98:55:04:98:6e:93:de:75:08:08:93:36:
f9:5a:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:54 2025 by rpki-client