Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F2512EA1A0B11F083DF33DB6DB8BCC6.roa
File: 8F2512EA1A0B11F083DF33DB6DB8BCC6.roa (raw, json)
Hash identifier: xG778T9sx08qngVoIZModvWlKCvTEqxtdlDUYHtffG8=
Subject key identifier: A7:C8:CF:18:77:61:BE:A5:6F:9F:E3:77:48:D0:48:61:DA:72:EE:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F2512EA1A0B11F083DF33DB6DB8BCC6.roa
Signing time: Tue 15 Apr 2025 15:09:00 +0000
ROA not before: Tue 15 Apr 2025 15:08:56 +0000
ROA not after: Fri 23 May 2025 15:08:56 +0000
asID: 397071
IP address blocks: 45.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85118 (0x14c7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 15:08:56 2025 GMT
Not After : May 23 15:08:56 2025 GMT
Subject: CN=67fe768c-33ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:0e:09:4e:7b:6e:57:cd:40:e4:3e:d9:f3:
d4:4d:00:aa:ea:40:82:ac:ec:30:15:4e:cd:ee:06:
85:ea:53:6b:52:9b:63:d1:28:7e:80:3b:ee:4c:69:
5c:9c:a2:89:0b:de:b5:92:d9:0a:b7:0e:48:6c:b9:
5d:af:be:f0:04:53:9c:72:ba:f4:12:55:51:a0:53:
69:56:5a:69:5e:55:ee:b3:68:43:fa:f9:bd:3b:ca:
95:56:be:f0:8c:8b:49:d3:05:ba:89:ed:4f:b7:5e:
e8:83:d0:3a:5d:df:b2:3e:d0:da:4a:ff:b6:b0:07:
ac:ed:11:61:79:b1:86:9e:55:f7:db:02:d8:e0:55:
e6:ab:40:b2:fd:77:4a:da:f3:f5:93:f4:31:55:5f:
09:45:d4:57:5c:36:3f:89:57:2f:0f:33:1f:a8:01:
dd:8e:cb:c5:a1:cc:6d:0c:2c:80:02:8d:e1:10:0d:
28:a1:af:74:73:05:13:68:97:48:d5:92:d6:af:5e:
92:d4:5f:8b:00:99:0e:37:8a:4a:a9:0d:ec:67:55:
b8:d2:66:99:dc:f6:2d:0a:f8:90:f2:c5:3c:77:a3:
1b:be:7d:a8:6a:e9:47:f1:db:35:52:fd:49:a4:b8:
96:53:94:12:00:01:0a:1e:a5:c0:2e:e6:29:3e:ec:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:CF:18:77:61:BE:A5:6F:9F:E3:77:48:D0:48:61:DA:72:EE:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F2512EA1A0B11F083DF33DB6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:be:1b:85:7e:a8:e5:d2:18:69:8b:2f:55:06:3c:c6:f3:63:
d7:59:09:08:6d:3b:ad:3d:d7:8c:45:de:d5:2b:bb:6c:22:05:
78:95:15:05:6c:d7:39:ad:3b:ea:dd:1a:68:ec:b5:0e:6c:de:
39:41:1c:9e:7a:01:5a:98:bb:da:78:bd:93:85:0f:a5:3b:31:
e9:08:7f:93:6c:dc:17:4a:84:53:da:13:e1:94:06:6c:c6:02:
d8:9c:22:8a:65:f7:89:a4:a6:ae:32:c6:c4:0e:03:93:a5:0c:
05:fa:2a:dd:b9:89:de:00:c5:34:b0:e0:2d:e7:8c:51:95:f8:
a6:7b:34:ce:54:10:76:6b:a5:ad:fe:61:16:f0:ae:60:24:b5:
ba:d3:81:20:b6:d9:4a:74:f9:ca:51:cd:16:1d:19:a4:02:f6:
3d:e0:01:45:42:0d:8a:60:ba:04:82:e3:0b:dd:56:fa:c3:b7:
78:16:0a:94:68:b7:42:7a:13:f3:04:23:11:19:29:71:08:83:
62:ca:c0:08:2d:04:e9:9c:7c:2b:f6:0c:40:23:84:82:89:a0:
6c:2e:2b:b2:df:cc:53:31:11:fe:3f:e2:98:38:ec:6f:07:eb:
86:2e:5b:33:2f:01:7b:61:1a:48:c5:53:43:3f:5c:cf:cc:00:
bc:61:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:36:13 2025 by rpki-client