Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A60F7E40CB311F0A2096E5F762E951A.roa
File: 2A60F7E40CB311F0A2096E5F762E951A.roa (raw, json)
Hash identifier: arBzJCIYi1Rwd9iPBT5mPu4MJ7iCjeHN4pEykKoDiZM=
Subject key identifier: 58:2D:A6:69:44:B3:CB:0D:F8:9B:69:D4:2A:2F:45:4B:1F:85:68:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014898
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A60F7E40CB311F0A2096E5F762E951A.roa
Signing time: Sat 29 Mar 2025 15:33:30 +0000
ROA not before: Sat 29 Mar 2025 15:33:26 +0000
ROA not after: Sun 04 May 2025 15:33:26 +0000
asID: 138995
IP address blocks: 45.192.208.0/24 maxlen: 24
45.192.209.0/24 maxlen: 24
45.192.210.0/24 maxlen: 24
45.192.211.0/24 maxlen: 24
45.192.212.0/24 maxlen: 24
45.192.213.0/24 maxlen: 24
45.192.214.0/24 maxlen: 24
45.192.224.0/24 maxlen: 24
45.192.225.0/24 maxlen: 24
45.192.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84120 (0x14898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 29 15:33:26 2025 GMT
Not After : May 4 15:33:26 2025 GMT
Subject: CN=67e812ca-c100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:4b:d8:77:f9:99:a2:73:03:2f:28:90:7a:
a9:7c:ee:88:50:eb:fc:f7:88:04:2c:d9:28:63:7a:
68:6a:6f:77:d8:95:e9:8b:30:1b:4a:d2:d1:a3:fb:
89:93:b5:73:72:1e:b5:df:93:0c:ff:0c:c9:ed:d4:
d6:26:d4:47:24:3c:54:17:b2:31:52:e4:9d:fb:b1:
c0:11:91:9d:50:51:99:b4:fe:f7:7d:1f:8c:b4:23:
4d:24:f3:43:16:9a:f5:c9:87:d1:a6:fb:33:3c:44:
d3:40:e2:a5:6a:2b:c1:09:01:22:f6:8b:32:4f:40:
dd:12:8a:6f:81:7a:28:34:8c:51:03:50:ac:f3:98:
68:8f:a4:99:78:fb:3e:96:e9:2d:e3:e1:f1:9c:5d:
07:11:a6:d4:f8:d0:6e:6c:94:c5:5b:a4:62:6c:3d:
3c:7e:56:d6:ac:a6:a8:84:4a:f2:30:81:ec:03:04:
d0:91:ba:cf:12:d1:ca:0f:12:0f:49:74:36:c0:7c:
89:e4:30:ee:36:e7:6f:08:5e:66:c3:e4:10:33:3e:
ff:79:f0:b5:b4:b7:6f:ef:1a:5b:ab:0e:72:6c:55:
2a:8a:82:c7:01:db:16:91:01:3d:91:b9:0e:13:0d:
25:60:ef:87:72:32:20:4b:bc:f5:f7:85:4f:e2:c3:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2D:A6:69:44:B3:CB:0D:F8:9B:69:D4:2A:2F:45:4B:1F:85:68:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A60F7E40CB311F0A2096E5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.208.0-45.192.214.255
45.192.224.0-45.192.226.255
Signature Algorithm: sha256WithRSAEncryption
b6:c4:b5:dd:3a:45:66:67:39:72:f0:f8:bd:03:fe:de:c0:24:
a2:b3:ae:2c:eb:c6:44:26:63:6e:45:b0:17:2b:56:82:5c:91:
99:45:37:5e:31:22:8d:a8:29:2f:a9:df:c0:0e:af:c0:e4:c8:
66:26:93:fa:dc:26:1b:9b:8c:fb:16:cb:61:a4:50:f8:3e:6e:
a4:4f:11:28:29:cf:8b:77:6b:3b:2c:49:9d:a7:d5:e7:73:e1:
1f:47:18:db:9a:a0:2a:26:1a:d3:77:e9:6e:85:d3:bb:a4:f1:
a2:a7:4f:fd:0a:88:b1:6c:52:a9:91:6d:03:92:05:28:90:f3:
a6:1b:7e:0a:5d:91:c2:3a:e8:87:81:76:e0:3a:aa:4c:ef:2c:
05:54:37:52:46:eb:5f:e1:e9:4e:06:12:c6:23:0a:56:6a:e4:
7a:93:99:cd:de:1c:7d:b3:2a:e4:0d:6b:65:60:95:b5:7c:2d:
94:f9:48:f0:de:f7:15:8a:fb:32:1d:64:6f:b5:05:7d:2a:27:
87:fa:e2:e0:d5:3f:89:81:cb:f4:a0:6b:61:fc:0a:2a:a3:29:
7a:f6:37:fd:42:fd:0a:82:f8:a6:33:5e:53:8e:93:5d:e6:d7:
1e:fe:32:e0:0c:4a:2f:0a:8e:d3:4d:7d:85:b9:34:23:f6:9d:
d4:cb:01:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:59:09 2025 by rpki-client on console.sobornost.net