Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2502A2880FA211F0BB4F4FB4762E951A.roa
File: 2502A2880FA211F0BB4F4FB4762E951A.roa (raw, json)
Hash identifier: L3eO39kwKHtHcUlsJJgqAhG5f3XkWxfswuV+FC47NTo=
Subject key identifier: 00:D2:E3:15:7C:A7:01:64:2D:A0:A8:73:C4:46:F0:C4:03:D0:18:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01497B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2502A2880FA211F0BB4F4FB4762E951A.roa
Signing time: Wed 02 Apr 2025 09:09:13 +0000
ROA not before: Wed 02 Apr 2025 09:09:09 +0000
ROA not after: Fri 02 May 2025 09:09:09 +0000
asID: 200373
IP address blocks: 45.206.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84347 (0x1497b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 09:09:09 2025 GMT
Not After : May 2 09:09:09 2025 GMT
Subject: CN=67ecfeb9-31fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:c6:97:81:b6:4b:ff:37:65:91:2a:bc:cf:
aa:c1:fb:c8:a2:0d:ba:42:53:99:2d:33:c0:cf:2c:
f9:44:e0:96:51:96:fb:3a:09:5d:9b:87:21:68:6d:
3e:55:62:cd:53:25:be:9d:d5:54:d2:a4:56:49:d9:
dd:54:5c:a3:dc:33:b4:ed:9d:c1:58:1e:8b:a2:45:
45:db:91:ad:16:96:a0:b2:46:04:82:d1:7e:d5:56:
22:2f:f3:d8:4a:98:26:1c:52:6c:01:ad:80:9f:82:
c4:1b:b8:62:fb:92:f7:08:4c:4d:3c:c4:88:00:aa:
c7:3d:e8:26:6c:0f:59:3e:91:df:cd:f9:9c:43:0a:
fc:03:64:7c:1c:76:56:e7:54:4c:08:a9:dd:ab:60:
5a:52:92:b1:59:ff:0b:79:93:e3:a8:bc:5d:f8:a6:
73:b0:c1:22:15:b8:7a:80:0d:c9:0f:38:db:0d:a5:
01:bc:e5:13:ed:60:b0:92:bd:8b:41:c7:1e:91:4c:
02:5d:b4:a9:e0:ba:4c:b0:f7:f2:b0:aa:e1:c7:bc:
ff:1f:3a:d3:94:dd:6e:e6:ab:62:87:e8:c6:99:ee:
fa:ab:e4:dc:f2:95:8e:13:d1:84:98:12:f3:b5:35:
95:0b:09:1d:8e:78:8a:ce:8a:26:03:98:a7:ff:3b:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D2:E3:15:7C:A7:01:64:2D:A0:A8:73:C4:46:F0:C4:03:D0:18:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2502A2880FA211F0BB4F4FB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.72.0/23
Signature Algorithm: sha256WithRSAEncryption
35:23:2f:6e:a7:ab:99:42:5a:0e:39:fc:7f:df:4c:4b:37:0e:
e7:42:ed:0d:5b:b9:f2:b4:0e:0f:25:32:24:1d:65:3a:b9:4c:
ee:47:ea:7e:5a:ff:a1:c1:35:e7:65:c7:ae:bf:e0:a2:b3:6c:
ee:39:96:35:c8:b8:a0:ae:68:a1:db:86:e2:c6:0c:68:2a:ab:
7c:7e:a5:3d:a8:34:d7:62:18:20:14:e7:75:5c:5e:7b:4a:c7:
7f:ee:60:fd:63:3f:e8:ef:cc:2e:ef:10:88:73:f0:bf:f9:ef:
1e:f5:0d:38:84:33:0c:3a:d5:7c:ad:aa:8d:5f:d6:c6:8d:f6:
73:c3:3b:c6:79:f0:5e:6d:a8:cc:81:20:f5:a6:db:23:a3:1f:
8d:b9:c4:c2:81:61:ed:ca:db:c7:f5:dd:81:ab:ba:22:25:11:
9a:a3:31:e6:77:c7:14:ca:57:dd:a7:0b:b0:e0:ba:c6:70:ec:
6b:c1:1f:01:cd:87:fc:38:e2:77:02:0c:7c:79:79:ce:71:68:
6c:7c:d0:5b:65:fb:6c:7c:33:59:3f:eb:7a:00:63:0c:dd:d1:
be:03:57:00:2d:d3:85:00:d9:e3:1a:94:ae:cb:53:7e:eb:b2:
31:37:da:56:3f:0a:61:79:6a:84:98:8f:fc:16:c5:6d:f9:c4:
19:52:07:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:59:03 2025 by rpki-client on console.sobornost.net