Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE856FC191611F089D5F9FB6DB8BCC6.roa
File: BBE856FC191611F089D5F9FB6DB8BCC6.roa (raw, json)
Hash identifier: TSZ1VJ/or5PqE2vzQ/O2QthQSGLf3raefMKlyM/CXUg=
Subject key identifier: 6F:87:C1:E5:AF:1A:A6:2E:0F:15:30:22:0D:6D:98:E5:11:CD:8F:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE856FC191611F089D5F9FB6DB8BCC6.roa
Signing time: Mon 14 Apr 2025 09:56:28 +0000
ROA not before: Mon 14 Apr 2025 09:56:24 +0000
ROA not after: Sat 24 May 2025 09:56:24 +0000
asID: 149766
IP address blocks: 45.196.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85048 (0x14c38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 14 09:56:24 2025 GMT
Not After : May 24 09:56:24 2025 GMT
Subject: CN=67fcdbcc-d944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:38:c4:12:6d:1b:aa:63:84:5a:cd:82:d4:
f6:95:c9:5e:8a:01:a7:da:0e:af:15:9d:f7:c1:bf:
12:c5:68:e8:6a:ad:af:2e:60:6d:40:fb:a9:8b:a9:
0c:5b:bc:f3:05:62:97:c6:b4:5a:5f:f4:0f:c9:be:
11:a1:62:7d:09:a0:4f:4f:03:27:3f:7b:2a:71:0b:
a5:4f:bb:e0:26:01:98:6e:60:8f:c2:8e:60:02:fb:
c7:4a:23:9d:60:2c:65:66:f1:5f:7c:99:3f:b7:97:
2b:d2:e2:f9:c0:8c:60:bd:43:e9:77:53:9c:42:25:
33:f0:37:df:cf:40:23:94:bf:e7:d9:45:8e:e1:e9:
93:0f:dd:51:04:24:21:35:bf:51:d7:16:b4:33:ec:
4d:1a:57:56:fd:dd:dc:b6:48:2e:35:eb:7a:e8:ab:
59:f5:95:b8:1e:7f:93:33:b3:18:97:0d:ab:57:50:
3d:16:cc:b7:dd:8b:68:83:43:4b:07:9e:07:36:0d:
8d:c6:c2:5d:93:62:14:1b:35:b5:ee:1b:08:25:e9:
a8:df:94:a6:19:97:93:7a:c7:09:a8:d1:b5:eb:7f:
9d:4d:e2:0f:7d:f8:4e:8c:18:56:83:4d:18:18:2f:
e7:c5:12:b6:94:6e:64:d5:e7:43:7a:ed:d6:50:fc:
4e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:87:C1:E5:AF:1A:A6:2E:0F:15:30:22:0D:6D:98:E5:11:CD:8F:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE856FC191611F089D5F9FB6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.243.0/24
Signature Algorithm: sha256WithRSAEncryption
79:3e:1b:50:15:85:3c:29:b1:a7:3a:8b:af:26:42:bf:2f:a8:
21:ea:04:53:21:28:e1:8f:6f:28:69:fe:ff:ea:75:04:74:b6:
18:ce:9c:ce:46:90:49:af:fd:a9:c3:c0:84:d3:44:fd:1e:0c:
e5:87:cb:d1:09:8e:25:ec:89:de:b6:38:95:77:dc:73:82:c0:
cb:2b:c4:cd:69:4b:10:c8:c2:6a:3a:48:f2:01:1d:b8:db:4e:
07:61:96:e3:8e:fb:bd:6d:87:55:6c:2e:20:88:87:bf:2d:f7:
2e:b4:77:7f:43:bf:f8:97:e1:1c:46:56:9c:0b:4c:46:89:d3:
bf:8e:2b:68:38:19:8d:e1:0b:bd:73:18:5d:a4:03:76:ad:0b:
04:1f:04:8e:a3:83:d2:8d:3c:49:5d:40:ff:0f:a8:66:a2:00:
8a:17:26:42:e9:24:cb:1a:0e:ee:5d:b2:4c:a4:97:cf:4d:02:
4e:e5:07:05:d2:fa:8e:ca:8c:7c:1a:f2:33:31:cb:c3:60:aa:
23:ae:ea:22:74:94:6d:ae:6a:ef:bf:d8:40:2f:2f:68:c6:f1:
af:86:30:87:77:6d:af:0d:7e:8e:44:d4:fd:7b:8e:d1:14:a9:
90:1b:7a:0e:5c:45:a6:fa:bc:c8:79:01:77:ec:e4:8e:32:25:
61:84:19:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:08:12 2025 by rpki-client