Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4A95AE4F41A11EF9E1BA742762E951A.roa
File: E4A95AE4F41A11EF9E1BA742762E951A.roa (raw, json)
Hash identifier: dimg6jv/ljLESl9CmSBSVe07gxGoGplz5MdPgdyWMw0=
Subject key identifier: AD:A7:AF:3E:89:77:83:CA:91:65:EC:6B:C0:0C:7A:FC:4C:51:70:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012FE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4A95AE4F41A11EF9E1BA742762E951A.roa
Signing time: Wed 26 Feb 2025 08:23:01 +0000
ROA not before: Wed 26 Feb 2025 08:22:58 +0000
ROA not after: Sat 19 Feb 2028 08:22:58 +0000
asID: 17561
IP address blocks: 45.197.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77792 (0x12fe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 08:22:58 2025 GMT
Not After : Feb 19 08:22:58 2028 GMT
Subject: CN=67becf65-52ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:09:32:ec:1e:0a:41:91:4f:17:5b:46:e6:
79:1b:4b:72:df:61:24:1a:d8:3a:c7:70:3f:f7:3c:
e3:be:9d:17:d4:06:87:05:91:53:5e:e5:67:45:f8:
a8:42:34:27:d4:e4:3a:10:5e:6e:91:95:f8:01:86:
21:e1:cc:9a:af:0c:ee:3b:78:08:6e:ed:a1:bc:18:
87:83:0c:27:43:78:b1:a1:fe:80:14:cf:f3:b8:5a:
65:dc:76:2a:07:e7:25:e4:f5:83:e7:b5:86:17:f5:
f5:84:e3:fb:c6:cc:25:b6:75:7f:da:30:10:f7:90:
10:c6:a5:04:5b:76:29:c5:b8:c4:5b:82:f2:cb:09:
60:bd:43:88:97:92:79:52:91:83:ca:4f:34:4a:a4:
0a:91:49:e6:45:2b:c1:5d:d6:bb:2e:83:b6:a2:0c:
84:29:6d:19:43:d0:ff:c0:c5:2a:42:25:15:0d:a5:
f4:b5:11:92:f6:f5:1b:ca:c7:e9:ff:17:70:93:f1:
17:e3:16:2f:01:ab:4c:f7:56:5b:63:07:7d:7d:11:
b4:cf:8f:44:f4:c6:f9:30:62:3c:9f:e6:ec:ce:8d:
66:7a:da:5d:71:1d:7e:5e:10:01:d7:db:ee:35:71:
c8:fd:66:a4:23:a1:6b:69:d4:aa:47:65:f6:5c:e8:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A7:AF:3E:89:77:83:CA:91:65:EC:6B:C0:0C:7A:FC:4C:51:70:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4A95AE4F41A11EF9E1BA742762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.50.0/24
Signature Algorithm: sha256WithRSAEncryption
20:15:9c:d1:4d:81:94:47:c5:11:f2:b6:6e:ca:ac:f3:dd:07:
ab:93:95:21:9a:f0:f2:0c:f1:7f:9d:63:4f:1f:61:2c:bc:ae:
3e:26:96:d8:f6:d3:bb:1d:28:af:b8:8c:b1:1d:c1:5c:9e:02:
81:4d:1f:fb:49:f5:06:6a:f0:cf:c1:57:1c:47:33:2e:3b:44:
05:80:78:c9:44:b6:a3:9a:bb:60:25:13:5d:f8:e2:ca:d4:1c:
a4:be:14:16:9c:29:83:f1:f4:17:b0:2b:02:e3:69:c6:8c:36:
30:1b:07:01:b5:8d:94:30:cc:60:ba:63:22:ed:fa:21:39:8e:
84:90:82:8d:2c:88:74:f9:6e:54:0b:d1:d9:61:3f:81:e6:2c:
a8:7f:0f:4a:cb:58:91:bd:57:0d:a5:2b:f5:11:1c:6c:76:95:
86:f2:87:cf:b2:73:09:b5:d1:83:d9:14:e0:ca:4d:ad:81:22:
fc:a1:bb:43:bb:91:f9:be:b5:56:b1:04:df:44:74:16:d6:b6:
c5:68:18:19:df:03:e6:fb:22:3d:ed:87:91:1f:d4:c6:2c:a9:
32:27:76:93:b5:63:bc:ce:c7:dc:da:6b:39:c9:20:85:38:a8:
56:bc:c4:17:b3:99:b1:06:e7:91:ec:cf:7b:84:b2:94:77:ac:
3f:60:ce:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:54 2025 by rpki-client