Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/274D13DC0D2E11F09ACF6557762E951A.roa
File: 274D13DC0D2E11F09ACF6557762E951A.roa (raw, json)
Hash identifier: 8pGZJNuCpbXRMAhSQSQtDzZbBYDoYHW6M8+sCuatIsc=
Subject key identifier: DA:DB:80:4D:E1:1C:3F:CB:B7:72:C2:C1:40:AF:80:79:1F:43:B3:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01492A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/274D13DC0D2E11F09ACF6557762E951A.roa
Signing time: Sun 30 Mar 2025 06:13:53 +0000
ROA not before: Sun 30 Mar 2025 06:13:48 +0000
ROA not after: Sun 04 May 2025 06:13:48 +0000
asID: 151407
IP address blocks: 45.196.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84266 (0x1492a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 30 06:13:48 2025 GMT
Not After : May 4 06:13:48 2025 GMT
Subject: CN=67e8e121-82aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:f6:13:0d:92:ef:f6:d2:d2:f1:38:b0:5c:
b6:8a:4a:d1:de:a5:8b:31:59:81:d9:68:23:3f:05:
3b:f2:ef:93:5e:44:b2:a8:a5:05:3c:fa:a4:f8:34:
ac:68:42:98:ec:3a:b2:22:48:fd:8c:0c:96:2f:c1:
45:74:74:8e:6b:4f:b0:b2:10:f2:e2:33:eb:30:7a:
9e:85:b4:75:cd:e9:31:cb:1b:e5:ff:5b:fa:75:c4:
69:fb:10:57:44:d0:66:a8:16:34:a3:1f:3a:e9:80:
12:b7:3d:9b:d8:f8:b2:cd:e9:c1:ca:9a:8a:ca:da:
c5:eb:01:82:90:e3:96:31:ca:12:45:08:da:dd:d8:
40:9e:ff:9b:88:d8:8a:55:83:87:25:7c:65:dc:95:
93:92:12:cf:50:a7:98:b0:67:ef:45:a4:8b:67:7e:
dd:aa:1e:1d:af:8d:73:94:8d:b1:3e:68:6a:c1:73:
ef:74:bb:f5:19:8c:cf:72:5b:34:a3:0a:58:9d:7f:
2f:6c:d8:ec:ad:c8:cc:3b:be:41:10:72:a5:3e:7c:
4f:c4:8b:a4:e6:07:de:29:ad:73:98:01:c3:37:3a:
03:bd:b4:9e:90:b7:df:b8:13:6d:c2:4c:1b:ed:00:
fa:da:19:fc:36:0c:dc:f1:a3:05:ad:8c:b0:ba:0c:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:80:4D:E1:1C:3F:CB:B7:72:C2:C1:40:AF:80:79:1F:43:B3:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/274D13DC0D2E11F09ACF6557762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.220.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:00:96:3b:d9:59:c5:e0:0c:81:1c:1d:ce:aa:37:07:8e:c4:
a8:ec:34:36:75:1a:c1:77:cd:6a:2a:77:ec:cd:20:e2:5d:50:
1f:8f:bb:a9:f2:48:c5:8e:e4:ad:5c:ad:86:f6:30:d3:61:7c:
cb:02:5a:f7:6e:b9:e6:c1:de:72:45:ee:e3:b0:2f:67:5e:26:
7f:77:7c:70:ae:8f:9b:75:b0:0b:21:7d:f3:1c:12:0d:59:5c:
1f:7b:46:1b:6a:26:7a:1a:79:eb:9d:9f:55:e9:5f:53:f7:42:
77:70:08:9e:37:75:59:4a:38:bd:e9:42:d9:0d:d1:63:bc:c6:
41:38:3c:ca:a0:b3:55:9f:da:70:bd:0a:32:7c:16:36:82:00:
6f:09:84:6e:5d:55:fd:3b:25:25:52:ea:24:1c:32:c3:1f:a6:
db:e1:67:08:6e:8d:66:25:a2:74:2c:8e:95:40:fe:81:d5:28:
3b:3a:67:02:e2:17:05:4a:ae:ac:f1:37:02:4d:42:7f:6d:89:
18:14:74:6f:3f:80:46:69:21:e3:39:44:b2:c6:1a:2a:03:0b:
86:4a:aa:d0:ec:4b:69:61:84:a2:cf:43:d3:25:8e:07:f3:9f:
15:ee:00:b0:cc:9d:e4:68:27:44:fa:d8:f2:1c:fc:f7:88:5d:
2f:76:e3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:59:42 2025 by rpki-client