Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65C3FE6A15E811F085B9A2B96DB8BCC6.roa
File: 65C3FE6A15E811F085B9A2B96DB8BCC6.roa (raw, json)
Hash identifier: CkdYszqJDabHPM09ujcD62kPAjYmsnn8IMV+/Ayt8jw=
Subject key identifier: 97:85:48:CC:19:38:94:FE:81:B9:37:90:03:94:22:86:7E:45:56:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65C3FE6A15E811F085B9A2B96DB8BCC6.roa
Signing time: Thu 10 Apr 2025 08:47:13 +0000
ROA not before: Thu 10 Apr 2025 08:47:09 +0000
ROA not after: Wed 14 May 2025 08:47:09 +0000
asID: 62240
IP address blocks: 45.196.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84827 (0x14b5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 08:47:09 2025 GMT
Not After : May 14 08:47:09 2025 GMT
Subject: CN=67f78591-6099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:ab:0c:2f:6e:85:8e:9c:60:17:d6:cf:95:
99:e6:81:19:96:f3:bd:c3:e5:2c:4e:f5:74:c0:a9:
5b:18:be:f8:c5:8c:07:06:1a:88:fe:13:70:80:58:
ea:8d:b3:99:ad:2c:e3:4c:4f:9e:e8:08:71:bb:f8:
ba:4a:2c:8c:f0:b8:fe:21:4d:c7:23:44:eb:78:ad:
40:5c:af:9f:9f:56:3a:c7:8e:c2:45:e1:c6:66:fe:
dc:c2:2d:72:cf:1e:13:1f:5f:41:e8:75:5d:75:6f:
17:00:93:7a:b7:3e:82:31:a4:6f:97:fc:12:c7:e5:
86:05:e2:ed:6b:7c:15:04:e5:ae:2f:9b:0b:a6:9b:
5b:c1:62:86:37:07:a7:d2:4c:c7:e0:b3:30:0d:f7:
d5:20:ed:55:f9:5b:48:2b:73:68:2e:ea:f0:89:5b:
18:81:a5:fa:ec:0b:89:02:d9:bb:8c:92:17:26:f9:
7a:19:c0:5e:74:b4:d7:6a:88:7c:34:fc:fd:78:19:
a5:c1:31:25:63:3f:0a:be:6c:c6:e6:0d:bb:15:a9:
79:ec:00:73:57:23:1f:98:43:6d:e9:3b:bc:ca:15:
c6:b5:24:a6:dd:09:a7:a8:03:8d:fc:6a:72:76:a1:
42:0b:8b:f3:21:65:f6:52:03:f4:1f:38:cb:a4:f1:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:85:48:CC:19:38:94:FE:81:B9:37:90:03:94:22:86:7E:45:56:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65C3FE6A15E811F085B9A2B96DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.241.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:8e:aa:52:2b:fd:6e:e5:80:92:9b:48:cd:39:8a:a8:eb:86:
22:17:5b:cc:2d:ce:5e:af:7c:e6:a5:00:1a:fa:cf:a3:e9:48:
df:49:1e:7f:7e:36:98:71:08:a2:09:8b:72:bf:51:77:c5:ad:
4a:e6:b1:93:b5:ae:1b:0d:e4:db:8c:ef:b4:4f:fb:5b:18:9b:
73:f9:5d:23:28:e3:ed:3c:a8:55:88:71:96:a4:9d:f4:91:bb:
fb:d0:e5:7e:36:bd:72:5b:6c:b8:67:60:d6:7a:bc:31:d2:9b:
93:05:b5:0f:8c:d5:bc:1c:93:e5:50:f9:a9:00:f8:0c:b3:05:
2a:d5:42:84:9a:ed:c2:d3:74:14:6e:06:6a:6f:72:3a:1a:1f:
4d:b6:91:e5:90:1d:33:d7:93:5b:4c:30:94:6d:13:1d:c8:3d:
18:89:51:64:50:db:74:4e:ed:8b:37:39:d5:29:71:d1:52:34:
dd:45:4a:9e:84:75:b3:f7:1d:f2:16:5a:f3:8e:33:ec:c6:fc:
34:67:b8:87:76:69:e7:75:cf:15:45:d2:2e:55:1f:6b:e7:24:
82:18:0d:01:b8:9f:4a:63:57:56:9e:51:55:f4:6b:a4:25:15:
e2:d0:b6:39:cb:57:3f:4a:38:a2:09:47:5b:0f:ba:8b:a8:5d:
de:b6:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:19:37 2025 by rpki-client on console.sobornost.net