Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4D17C82DA2D11EFB8A4C86D762E951A.roa
File: F4D17C82DA2D11EFB8A4C86D762E951A.roa (raw, json)
Hash identifier: T+xdf5O+Y7oWN/5EHgi/JMvNvxZCf/uNUQ/KXv+uOzE=
Subject key identifier: 1F:D3:A5:70:2F:5B:9B:28:15:44:5C:AE:3E:03:23:B5:BA:31:3C:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4D17C82DA2D11EFB8A4C86D762E951A.roa
Signing time: Fri 24 Jan 2025 08:33:59 +0000
ROA not before: Fri 24 Jan 2025 08:33:55 +0000
ROA not after: Tue 13 Jan 2026 08:33:55 +0000
asID: 141109
IP address blocks: 45.198.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69431 (0x10f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 24 08:33:55 2025 GMT
Not After : Jan 13 08:33:55 2026 GMT
Subject: CN=67935077-5165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:c0:b3:88:02:ce:7c:14:de:f2:48:98:e3:
cc:47:8d:66:45:17:44:7c:03:d2:d5:f1:34:9e:ae:
22:86:84:6d:4d:3a:dc:0d:84:94:e1:98:ec:5f:b3:
17:c0:54:a6:d3:96:c5:11:ea:f9:00:83:77:79:8f:
c6:a8:f8:11:5c:a3:da:fb:4a:6a:d4:36:0a:aa:d0:
c9:54:54:3f:e0:3d:7b:7d:10:d5:d4:90:14:09:d3:
f4:64:fb:ba:29:29:59:5c:40:2b:00:48:ed:cc:9b:
7d:2a:52:4a:64:11:48:53:37:b3:1a:2e:bb:7c:e7:
ae:35:f1:b2:a1:f2:6a:f1:49:d7:be:39:7e:f5:a9:
25:16:68:4a:7b:fc:a9:48:5e:08:ef:4b:59:63:8e:
7f:ad:6d:cb:b6:38:1e:9d:dc:df:7b:70:da:0c:b2:
e8:c4:52:78:93:ef:10:28:12:97:d9:32:10:0e:a1:
69:ba:f4:06:cb:db:71:dd:25:4b:8c:96:c7:02:0d:
88:a3:d1:34:f2:44:af:6d:85:cc:39:d5:db:84:ec:
e5:0c:60:a4:5d:73:d6:cc:23:9a:e6:ca:a9:52:26:
44:e3:b7:cc:54:06:66:ea:17:53:97:99:10:ea:0e:
6e:59:77:f2:8b:cb:9c:a8:d3:30:73:bf:8d:13:66:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D3:A5:70:2F:5B:9B:28:15:44:5C:AE:3E:03:23:B5:BA:31:3C:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4D17C82DA2D11EFB8A4C86D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.232.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:89:15:2f:bb:16:54:f0:9b:08:37:09:0e:a4:47:1e:8a:c8:
2c:39:ce:84:31:11:42:4d:32:30:0e:63:0f:6f:c6:b0:17:da:
5c:a3:67:ea:3e:ea:5a:11:74:4a:c7:ef:39:2c:50:f4:a2:b1:
79:0c:a1:5c:75:f4:59:c6:fd:de:5e:f2:dd:69:31:9e:ac:6f:
af:c0:10:a9:12:e7:54:cd:9f:aa:ca:bc:66:e5:00:09:85:9c:
cf:f3:dd:83:7e:63:0a:e1:cb:c9:fe:6b:a2:dc:8c:1e:d4:36:
29:84:11:f5:21:a4:e2:55:87:ff:85:37:cf:82:7d:98:5d:86:
7f:0c:12:57:2b:e6:b2:53:70:ac:f2:b0:41:a2:37:df:7e:55:
dc:62:d7:e6:ac:58:0d:be:84:be:aa:d4:b5:7e:fe:83:1e:0f:
a1:50:9f:54:e2:52:64:09:f2:5c:c2:fd:10:33:e6:bb:41:b2:
2a:1a:b0:3d:41:42:ed:8e:9d:eb:0a:52:b7:fa:88:71:e5:19:
4c:9c:9c:d5:fd:3a:e3:50:dd:84:30:9a:11:4d:db:e0:18:ed:
5b:92:4d:8d:99:2f:25:6c:67:2f:cc:34:80:5a:48:de:27:85:
93:05:00:8d:4e:4d:5e:62:ff:59:91:7a:8b:37:e9:57:06:48:
74:10:41:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:10:19 2025 by rpki-client