
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A8DB7AA15EB11F0872ECECB6DB8BCC6.roa
File: 4A8DB7AA15EB11F0872ECECB6DB8BCC6.roa (raw, json)
Hash identifier: CuzKsU1WVGlF8q4tB0rKJLMlnCi8SG3MF09qmw3Wjgg=
Subject key identifier: 1F:A6:5D:17:60:89:B6:8F:8E:EA:66:04:2D:9B:3B:68:21:5B:F6:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A8DB7AA15EB11F0872ECECB6DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:07:56 +0000
ROA not before: Thu 10 Apr 2025 09:07:52 +0000
ROA not after: Fri 09 May 2025 09:07:52 +0000
asID: 20473
IP address blocks: 45.207.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84835 (0x14b63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 09:07:52 2025 GMT
Not After : May 9 09:07:52 2025 GMT
Subject: CN=67f78a6c-8e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:88:58:5e:d9:c1:77:11:f2:d4:73:c6:05:
7a:b6:c1:11:39:ce:74:9e:72:c7:4d:a4:9e:e1:c2:
d2:19:41:15:91:f8:be:2e:d5:7c:2a:58:df:f6:1c:
ac:3e:6b:0b:f6:8c:69:1c:6a:4f:ad:38:cf:92:5d:
07:6b:69:79:b1:03:26:4f:e0:2c:ee:6c:77:a5:bb:
af:10:c8:11:fe:a9:34:78:fb:0e:67:87:0e:0d:91:
8b:d2:ea:37:f3:e2:79:2e:bf:10:e3:c0:47:26:d4:
67:f3:61:26:2f:9d:8b:67:cd:2f:4e:06:47:65:f9:
a5:1e:e6:b7:dc:03:38:29:60:f0:d0:41:30:e7:de:
a3:75:57:da:5d:36:58:ab:66:c2:85:78:34:49:33:
24:df:e7:86:dc:c7:e4:c4:d9:c7:8f:1e:32:a5:a5:
46:65:e2:8f:9d:e5:2d:8a:ec:e0:5b:ab:3f:8d:6e:
84:11:66:42:9c:0a:81:f7:82:8c:ba:2c:79:52:8a:
01:02:4b:3b:e3:68:58:00:2b:de:ca:70:13:e1:b0:
bf:06:3b:f8:5a:9d:17:24:3d:4b:cb:32:c2:12:62:
e6:cd:14:ac:53:c7:78:4e:74:45:77:ba:cc:2f:d4:
35:c7:e2:0d:51:bb:e4:1d:4d:81:ba:19:1f:7d:cd:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:5D:17:60:89:B6:8F:8E:EA:66:04:2D:9B:3B:68:21:5B:F6:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A8DB7AA15EB11F0872ECECB6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.26.0/24
Signature Algorithm: sha256WithRSAEncryption
24:36:78:75:cb:e5:e1:06:ee:7d:4d:a6:c1:f8:49:e7:19:10:
da:38:a5:40:0e:41:b6:db:21:67:df:4b:59:ad:39:fd:b8:9e:
25:9a:c1:38:82:e5:9a:dc:4f:f8:04:c4:ff:ec:ba:16:1a:ed:
d9:68:b1:92:a1:2c:8d:18:6d:5a:9e:12:fd:69:4f:5d:ec:db:
29:ea:7e:cb:4f:b4:0a:ef:81:56:2e:f8:f7:33:e0:50:f0:e3:
bd:f0:0f:1b:39:70:4f:6c:c2:92:98:b2:9c:09:ed:3e:b7:d4:
dc:5c:48:2a:45:44:78:45:0f:f4:d9:b4:68:4f:21:55:d1:8b:
b9:e5:31:f6:0d:a8:b8:c9:e5:df:e1:c5:85:ad:68:31:c9:28:
13:83:e7:c9:e7:01:bd:30:c9:f3:ae:36:27:52:3b:c1:6c:67:
ff:1e:a6:53:70:5e:1b:5b:fd:de:2b:8a:90:63:60:99:f6:8c:
4a:c6:67:12:62:27:96:00:7d:0a:ae:27:2b:51:9f:53:34:07:
d3:7a:dd:7b:07:3d:c8:72:b5:76:5c:7a:14:54:90:5e:1a:a2:
8d:21:5e:ef:95:7b:80:e9:39:7a:ce:f8:63:c1:c1:8c:6d:2b:
ce:e3:5e:28:91:38:38:2f:a3:6c:b9:60:71:7a:4d:f4:01:40:
e9:eb:dd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:53 2025 by rpki-client on console.sobornost.net