Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB51DE6C211611F0806607D1DAE4EC9C.roa
File: CB51DE6C211611F0806607D1DAE4EC9C.roa (raw, json)
Hash identifier: 5LlGa5VUe7Oa6djvJbPRLYvBF2Lf4f7kE7KoMsiHY/8=
Subject key identifier: F0:8C:B4:70:5C:C9:5B:D8:F7:FB:A5:5B:93:D2:D2:2D:BF:2C:84:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB51DE6C211611F0806607D1DAE4EC9C.roa
Signing time: Thu 24 Apr 2025 14:17:04 +0000
ROA not before: Thu 24 Apr 2025 14:16:59 +0000
ROA not after: Sat 03 May 2025 14:16:59 +0000
asID: 7018
IP address blocks: 45.203.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85648 (0x14e90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 14:16:59 2025 GMT
Not After : May 3 14:16:59 2025 GMT
Subject: CN=680a47df-1abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:52:dd:39:4b:b8:48:61:70:6b:c0:73:c6:
1a:4f:e0:05:7f:38:72:d7:65:af:59:40:0a:8d:2d:
05:06:f2:b1:6d:c6:69:d9:5b:1d:4e:92:2f:34:b5:
35:fe:e9:17:88:44:1c:c6:84:f7:be:26:50:b3:af:
d6:fa:fa:42:b7:cc:59:07:40:c2:1b:03:f9:a9:99:
67:4d:05:91:48:e1:0a:f5:87:4a:5d:72:9b:c1:0a:
0d:4d:91:94:a5:e0:8f:4d:fe:38:b0:cf:03:e7:cf:
b5:6f:0d:72:e6:16:de:f1:14:49:ec:ce:55:02:cf:
b6:0b:a3:1e:3d:0f:70:f5:d1:dd:26:19:70:b4:37:
b7:b1:40:37:43:0f:77:da:ff:5e:f7:4f:c6:25:a1:
06:dc:c7:6f:ea:79:e8:72:4c:c2:86:d3:45:03:be:
f4:55:b6:cf:2b:ad:fa:d9:4e:d3:bc:ca:85:bc:d4:
d7:58:bb:05:36:c8:46:2d:54:eb:a6:64:f6:39:a4:
01:48:b5:d9:ad:78:66:dc:58:f6:d5:1e:6f:5a:d1:
db:51:d6:e5:35:ba:08:e6:7a:8c:80:36:49:85:26:
ce:88:5b:27:57:dc:93:7f:59:a3:c3:5f:ab:2d:eb:
b0:da:9e:c0:20:5f:e3:7f:5c:00:a1:80:00:a5:df:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8C:B4:70:5C:C9:5B:D8:F7:FB:A5:5B:93:D2:D2:2D:BF:2C:84:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB51DE6C211611F0806607D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.48.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:d5:5d:cf:66:ac:c3:6b:3c:00:8e:5b:46:6e:01:41:b2:60:
ad:a3:56:ff:69:85:d1:4e:5e:d4:48:99:4f:44:25:d7:36:2c:
a9:51:c7:ad:83:83:d5:76:0b:1a:03:b2:82:f1:a5:d4:61:65:
eb:1a:fb:c8:5c:af:9e:5e:7e:4f:4f:f7:41:fb:79:af:f1:2a:
49:14:bd:03:dd:4c:b6:20:e9:ec:24:ee:d9:f0:4e:59:93:0c:
64:81:d8:e1:57:92:07:4b:b1:f0:63:49:7a:66:b1:25:08:88:
e9:f1:4e:58:25:22:1a:b0:65:aa:f9:81:c8:b6:16:ff:43:03:
e3:d3:d7:3a:ce:a5:67:67:6b:c3:53:72:50:5d:8b:95:e7:05:
3f:bf:e1:ee:45:89:c1:9f:9d:92:82:b4:c6:6a:f0:d3:04:61:
5b:e8:87:0d:2e:70:ca:08:a5:2b:f9:a5:86:36:4e:98:9f:26:
5b:51:c8:98:d0:eb:f3:74:0f:7c:55:51:b3:67:a1:fc:1a:1a:
bc:2e:5e:84:fa:49:9d:bc:c3:5d:30:6e:ec:9d:0d:77:95:9a:
d5:8d:47:3e:0f:b9:99:19:1c:34:d1:7b:f3:ae:c3:95:f6:47:
be:7b:05:72:d9:c5:a7:26:f5:25:d3:76:d6:16:05:cf:d4:93:
e3:62:f8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:34 2025 by rpki-client on console.sobornost.net