Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE842F4EF48211EFB8621899762E951A.roa
File: FE842F4EF48211EFB8621899762E951A.roa (raw, json)
Hash identifier: 5UyLAFnV7yS7ywI3rSI1tXdwZVZDZ7peJW4K5nckwsc=
Subject key identifier: 6A:3A:2C:BA:54:74:98:55:BD:4C:27:CF:2D:6B:D3:6A:14:FB:4D:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0137A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE842F4EF48211EFB8621899762E951A.roa
Signing time: Wed 26 Feb 2025 20:48:13 +0000
ROA not before: Wed 26 Feb 2025 20:48:09 +0000
ROA not after: Sat 19 Feb 2028 20:48:09 +0000
asID: 17561
IP address blocks: 45.200.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79776 (0x137a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 20:48:09 2025 GMT
Not After : Feb 19 20:48:09 2028 GMT
Subject: CN=67bf7e0c-9824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:f0:c4:13:4e:47:42:dc:82:55:7b:5e:6f:
55:5b:e4:3c:db:64:fe:a1:43:6b:da:3f:14:04:e0:
82:e0:58:6d:9c:a1:60:19:9b:6d:c2:52:30:fa:30:
08:f9:84:83:a6:7c:38:9a:da:44:79:08:0a:72:d3:
c3:9c:1d:86:7f:ef:8e:f1:03:1b:1d:f2:8e:33:1f:
73:f3:89:70:af:c2:f9:23:04:e3:cd:38:ba:81:e5:
1d:a8:37:ea:8e:12:7d:d3:27:1e:ce:cc:de:b5:94:
9b:59:86:30:5a:d2:bd:86:d8:31:51:6d:5c:a9:42:
19:e4:2c:3b:ba:3e:27:76:ff:96:eb:02:99:aa:aa:
8b:6f:9c:7c:a0:47:8f:4d:19:97:d2:9d:1b:01:89:
b2:46:e6:d5:74:a6:a0:53:5a:93:d2:c5:2b:64:fa:
bd:93:4a:ca:16:6a:29:e1:5e:5a:f1:e6:1b:30:f4:
97:90:16:3c:54:6c:26:21:04:e2:56:32:5b:71:b6:
36:05:94:a5:a8:ff:e1:82:5c:28:9c:53:51:a7:5c:
58:64:89:58:d0:1e:f0:f4:51:55:9f:02:6a:0a:99:
25:04:ce:d6:1f:04:93:10:3a:81:bc:3e:63:b1:57:
3a:b5:23:f5:7e:89:3c:c2:f0:3d:18:3a:8a:4d:84:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3A:2C:BA:54:74:98:55:BD:4C:27:CF:2D:6B:D3:6A:14:FB:4D:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE842F4EF48211EFB8621899762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:0b:0f:ff:e2:0c:61:cd:ca:c6:18:e3:7c:fc:c2:5e:50:13:
ba:6e:71:f8:70:e9:20:4c:91:1e:ea:c2:73:c7:c0:56:e5:9d:
4b:1c:6e:d8:61:1e:c3:6c:ae:4d:19:9a:b0:5e:97:86:b3:6b:
23:d7:ec:7a:4b:54:6b:35:13:e8:a8:99:aa:20:3d:79:05:d3:
ce:28:f9:6d:21:89:8d:23:bb:7b:8b:97:4c:3f:1b:ee:5c:5a:
85:59:b9:5f:f6:23:5d:20:02:a2:8e:c2:2f:47:d1:0d:9e:37:
ab:4a:c7:12:a4:65:a4:0a:b4:fd:1e:3e:bb:55:31:97:ce:d2:
cb:b1:62:2b:87:cf:33:e6:a8:e2:80:7d:1b:d5:33:91:a6:22:
89:80:7e:e2:cb:f4:cf:60:d0:87:16:14:3b:61:d5:a4:b1:9b:
04:76:cc:ef:c7:78:3b:52:e3:15:67:f6:a0:5e:5c:73:b0:3c:
da:93:85:75:73:34:5c:46:6d:de:70:ac:05:45:c9:8c:e1:dd:
19:30:11:93:61:18:74:cb:78:6c:6b:d4:d7:07:10:71:38:9a:
92:ca:80:de:ca:b0:73:f3:51:6f:fb:9c:7a:27:72:37:a9:8e:
d8:4c:c0:98:4f:4a:a0:7f:e8:bd:71:5c:dd:74:05:f3:4e:cb:
48:30:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:49 2025 by rpki-client