Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9602703EF4F511EFB099CDB5762E951A.roa
File: 9602703EF4F511EFB099CDB5762E951A.roa (raw, json)
Hash identifier: qISfxBRfXwveVBfmScYlezjIVFsZHVW0rkfxNlst1oA=
Subject key identifier: E0:6E:C4:E7:08:02:A4:C5:EB:0E:64:6F:06:B7:2C:EB:D9:25:EC:81
Certificate issuer: /CN=F361D299AR/serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
Certificate serial: 0BF7
Authority key identifier: F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80
Authority info access: rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9602703EF4F511EFB099CDB5762E951A.roa
Signing time: Thu 27 Feb 2025 10:28:29 +0000
ROA not before: Thu 27 Feb 2025 10:28:21 +0000
ROA not after: Thu 27 Feb 2031 10:28:21 +0000
asID: 37199
IP address blocks: 45.221.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl
rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361D299AR
Validity
Not Before: Feb 27 10:28:21 2025 GMT
Not After : Feb 27 10:28:21 2031 GMT
Subject: CN=67c03e4d-fc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:79:20:5d:e1:92:31:d6:71:89:39:6d:7d:
ee:ea:4a:ae:5e:aa:24:ae:66:00:46:08:13:97:cc:
39:18:bf:66:4e:15:2f:2a:97:86:65:2e:4b:6e:35:
00:51:83:3d:3c:1d:01:10:c6:88:93:b2:bc:78:3f:
7c:c8:94:04:68:69:9a:8b:07:f9:82:10:e2:64:88:
c6:1f:ed:d4:56:9c:67:9b:46:e4:b9:81:09:a7:f9:
de:bf:fe:9e:d3:af:07:01:4c:bd:98:df:66:d6:08:
17:38:7b:a4:d7:00:ea:80:85:c7:f1:5f:26:e7:a1:
a0:c8:44:e9:40:ab:aa:fc:23:93:75:fe:91:7a:fc:
3a:b9:5e:44:c4:d6:33:a2:2d:e7:d6:b5:48:5a:d4:
a3:1b:e8:db:9b:e1:e5:65:ba:5b:68:4c:90:ab:23:
fb:59:a6:82:81:a8:76:7a:1e:ba:53:5c:9a:b2:ac:
96:08:c2:78:73:fe:9e:6c:e2:33:31:ef:59:48:21:
01:6a:f8:1f:7d:69:84:ef:45:f6:bc:0d:7b:18:38:
07:98:a8:3c:eb:04:80:9f:05:4a:c3:bd:26:ab:97:
02:5e:88:c0:bd:8c:37:89:ee:4b:ab:96:2f:3e:7e:
1b:bb:3d:69:48:db:40:d5:ff:d7:e2:f3:fc:6a:36:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6E:C4:E7:08:02:A4:C5:EB:0E:64:6F:06:B7:2C:EB:D9:25:EC:81
X509v3 Authority Key Identifier:
keyid:F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9602703EF4F511EFB099CDB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1a:2a:52:1a:db:c6:d3:b1:88:09:4a:81:b4:cb:93:a4:60:bd:
70:db:5e:90:d1:05:89:ec:bb:ca:c4:7b:d5:7d:2d:c0:a1:f4:
e0:5f:a9:83:e3:15:43:91:e5:c3:0a:40:98:cd:af:87:5e:44:
cf:7b:1f:22:5b:f8:41:12:6a:15:10:c2:3b:df:ce:72:5a:c1:
3c:da:9f:b2:09:1f:64:96:de:4a:bd:2b:03:74:27:03:1b:18:
76:40:49:9f:4e:28:75:b8:fe:d3:6f:38:eb:66:c1:b5:f4:ce:
39:8a:14:45:80:a3:c0:d9:4b:d0:c2:bb:d9:ce:61:86:fd:e9:
3d:ac:f4:88:da:fe:5a:89:d8:b1:60:d8:4c:9b:fe:c6:c4:3f:
e6:8c:d3:d4:57:e0:de:b0:d3:2a:e0:24:e6:37:7f:fa:9f:3d:
d7:cd:b3:d8:0d:3b:9c:8f:f6:41:fa:97:c6:8f:9b:ad:4a:bc:
9a:4c:38:e0:92:f6:18:8e:19:4d:f3:c3:a4:ac:97:b5:d5:3e:
1a:a6:ef:bf:62:04:80:29:2d:27:ae:5d:12:ca:97:44:fe:29:
41:30:b1:6f:e3:2c:41:58:4d:7d:44:67:87:c3:4f:33:22:32:
7c:c9:a5:37:92:90:bb:19:e4:1e:d5:af:04:80:98:2e:44:90:
32:c7:f2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:16 2025 by rpki-client