Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BA8741E1C5211F0A01CBDEEDAE4EC9C.roa
File: 9BA8741E1C5211F0A01CBDEEDAE4EC9C.roa (raw, json)
Hash identifier: CvgFCnKswX5YUOQFQOSBZuquoPG4F0ZwuaezopDZYE0=
Subject key identifier: DA:94:4C:09:CE:B1:5C:11:BE:CF:98:CB:29:2C:78:F5:96:36:2C:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014CE2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BA8741E1C5211F0A01CBDEEDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 12:42:38 +0000
ROA not before: Fri 18 Apr 2025 12:42:33 +0000
ROA not after: Sun 25 May 2025 12:42:33 +0000
asID: 147176
IP address blocks: 45.201.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85218 (0x14ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 12:42:33 2025 GMT
Not After : May 25 12:42:33 2025 GMT
Subject: CN=680248be-7168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:5d:f4:37:89:ef:1c:6d:18:c2:08:fc:eb:
67:57:6a:4e:3c:bd:be:0c:69:81:98:3d:e7:70:11:
8a:bc:25:3c:f7:a6:ee:2a:46:0a:7d:6a:ca:86:a0:
30:09:55:77:bb:23:42:63:cc:00:8b:6c:a8:ad:05:
15:82:57:5b:54:a4:c9:b3:9a:2b:1d:bd:ca:8d:ee:
e1:ee:ac:1e:74:d0:54:1f:61:54:f5:df:6c:40:ae:
f8:b0:5f:10:29:fc:47:43:0b:43:8c:6d:60:cc:76:
7b:10:a8:1a:60:f3:1d:1b:a0:b6:93:c9:97:9e:05:
92:69:2c:1a:d7:a9:2e:07:cb:17:33:8c:68:84:9d:
78:41:1a:5a:51:99:a9:7f:20:bd:28:b8:ae:c9:26:
83:45:d0:52:0c:98:39:fd:ef:6b:9b:76:b2:15:2c:
e7:73:b4:65:cf:36:67:bb:9b:31:7d:f5:1a:15:c6:
f4:52:cf:27:24:62:a0:bf:ef:56:a5:0b:8d:e1:29:
bf:df:dc:f1:b2:86:9c:d2:7a:5d:1b:5d:78:15:49:
12:5f:f5:b8:39:22:0d:c7:2f:45:37:99:97:17:6f:
25:56:8c:e8:ba:07:59:59:a3:eb:d6:0a:e3:90:db:
79:ec:5b:a4:14:9c:be:96:d4:5d:40:a7:2f:aa:d6:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:94:4C:09:CE:B1:5C:11:BE:CF:98:CB:29:2C:78:F5:96:36:2C:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BA8741E1C5211F0A01CBDEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:01:b8:18:83:16:57:eb:6d:fd:93:bc:94:ba:2b:b6:50:d6:
b7:84:94:eb:15:00:6a:0c:38:72:c9:df:54:0a:71:e7:2c:38:
1a:76:36:16:4d:e3:16:63:d6:6a:f2:c1:2c:72:d9:ef:6c:0e:
f4:ba:c1:f6:0e:07:6b:ad:db:1d:a7:7b:0e:de:d4:43:67:9e:
57:0b:c4:5a:d9:48:bd:31:f2:8e:3c:9b:77:d7:8c:58:35:c5:
7b:2b:3d:f6:b5:c4:a1:9e:11:5d:31:12:c4:4b:65:6c:ca:48:
19:92:cd:52:9c:83:8a:52:17:a6:a7:0c:84:ba:34:f8:a5:32:
d0:98:b8:da:db:68:74:b3:af:74:53:e2:2f:9d:dc:55:7b:9e:
d1:eb:ff:cc:c7:fe:33:59:70:be:b7:9e:e9:d6:1f:c4:88:86:
b2:10:ba:0b:52:13:46:55:b4:de:f2:32:fd:15:7a:f1:e1:77:
97:1a:2e:87:90:d6:72:6c:9c:08:64:4e:49:6e:52:5e:c5:e7:
4a:e4:a3:c4:40:23:26:d2:2c:67:c0:9f:c7:8e:4b:6d:ab:6a:
43:84:02:b0:fa:dd:e2:de:24:62:6c:d0:0e:d2:eb:91:3e:0e:
aa:1f:03:1a:ad:ef:ab:87:44:56:f9:fa:3b:36:88:33:56:4a:
fa:f0:5d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:34 2025 by rpki-client