Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93FDA666151411F0ABCD83B36DB8BCC6.roa
File: 93FDA666151411F0ABCD83B36DB8BCC6.roa (raw, json)
Hash identifier: ZDDrJZxbJNjhqmT5ef99oDsu5DS3tsslOvl8gqQEUhM=
Subject key identifier: 49:D2:53:00:AF:F5:9B:18:0C:44:4B:18:10:6B:77:67:E0:19:99:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93FDA666151411F0ABCD83B36DB8BCC6.roa
Signing time: Wed 09 Apr 2025 07:30:58 +0000
ROA not before: Wed 09 Apr 2025 07:30:53 +0000
ROA not after: Tue 29 Apr 2025 07:30:53 +0000
asID: 7018
IP address blocks: 45.203.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84766 (0x14b1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 07:30:53 2025 GMT
Not After : Apr 29 07:30:53 2025 GMT
Subject: CN=67f62231-b784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:e6:30:b9:05:92:50:cb:ab:e0:87:bc:ef:
92:13:48:9a:bd:6a:bb:39:b1:7f:aa:40:d5:1d:aa:
94:82:fc:5b:3b:94:da:2b:ce:32:88:f9:c1:a8:76:
77:82:97:8c:21:40:03:19:02:8a:68:9c:0b:a2:85:
47:e4:32:d7:97:f8:dc:ee:94:52:99:f5:a1:11:72:
85:91:e0:9e:bd:5f:9d:58:ed:c1:95:f1:87:40:32:
25:10:39:0f:b0:d4:24:5f:ee:74:bb:d4:0e:5b:90:
79:af:bc:c0:58:95:71:6e:96:5e:6e:1a:40:4b:44:
e0:d9:07:34:97:71:d6:53:0c:66:a8:e2:b7:b5:16:
af:ab:93:5b:42:a7:d8:51:86:9f:1d:e7:c9:5c:0d:
fe:78:5d:6a:f2:5a:06:96:2d:78:0b:2f:f4:00:f6:
89:0d:56:c9:80:bb:fc:c1:cd:10:b7:b5:16:f8:98:
15:96:60:5a:0c:b9:a1:67:f3:43:fe:1a:19:d2:9c:
6f:63:d5:95:75:c4:7a:18:a6:2e:f2:6d:25:a8:ab:
58:e6:11:a8:13:2a:de:f1:1f:7e:44:ee:de:7f:92:
99:e0:60:c8:2c:be:00:e2:c3:03:f7:12:be:85:fd:
61:c1:f3:f6:8d:d0:ee:a6:36:ef:8d:bf:cc:c7:92:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D2:53:00:AF:F5:9B:18:0C:44:4B:18:10:6B:77:67:E0:19:99:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93FDA666151411F0ABCD83B36DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.48.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:c7:77:5d:23:02:3b:4e:24:81:62:70:2e:4b:2a:68:13:03:
86:34:25:e2:c6:3f:a9:ea:f1:1f:15:ab:1a:09:5e:01:74:99:
fa:72:7e:4f:2a:b7:2e:e5:46:c0:5f:f3:c3:57:6c:fa:6b:21:
03:c5:17:49:7a:17:cb:e7:3a:27:f6:74:8a:e0:cb:e8:16:5e:
be:3b:95:f3:2f:37:ac:de:68:98:49:8a:31:c6:57:58:d2:96:
15:25:cf:32:e8:99:63:6d:bf:f1:24:b2:21:54:b1:b9:c3:b2:
4d:c3:ca:77:c8:a7:ef:85:f6:d3:0e:74:11:29:e8:91:e6:76:
8a:08:48:4e:f8:5d:fc:a1:3c:1d:29:c0:23:fb:0f:ae:ad:ae:
da:a4:68:7c:4a:4e:b8:78:91:34:40:c0:c7:eb:e2:b4:df:cc:
c9:9b:a1:ea:58:4b:de:0a:18:74:4a:1a:70:ae:25:8b:62:c1:
36:f8:e6:f1:7c:77:c3:41:5a:0b:55:e7:50:7b:e1:6a:f2:dd:
41:1f:7c:d3:b2:69:e2:1e:4c:09:d1:fa:83:3b:1d:e0:07:b3:
71:c0:ff:b1:c9:5c:0e:94:ab:20:3d:32:1f:50:0d:2e:a4:7e:
ec:7b:fd:b5:47:e4:3b:c9:99:50:eb:f6:72:9b:33:5d:d4:4f:
bb:d0:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:13 2025 by rpki-client