Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/61908B4AE79B11EFB6805B7C762E951A.roa
File: 61908B4AE79B11EFB6805B7C762E951A.roa (raw, json)
Hash identifier: Xn+9BY2JsZcHSY8zfrWdXyWmaJjlSC/5wGIcSiN9iMc=
Subject key identifier: EF:13:6F:BA:25:BE:F3:78:87:B7:EB:67:A5:05:24:2D:02:41:AA:04
Certificate issuer: /CN=F363DCF2AR/serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Certificate serial: 4C
Authority key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Authority info access: rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/61908B4AE79B11EFB6805B7C762E951A.roa
Signing time: Mon 10 Feb 2025 10:40:02 +0000
ROA not before: Mon 10 Feb 2025 10:39:57 +0000
ROA not after: Mon 31 Dec 2035 10:39:57 +0000
asID: 30992
IP address blocks: 129.0.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Validity
Not Before: Feb 10 10:39:57 2025 GMT
Not After : Dec 31 10:39:57 2035 GMT
Subject: CN=67a9d781-6543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3a:44:38:28:80:48:b5:a0:0b:ef:e6:30:f5:
98:28:bf:c1:1c:98:02:82:98:ba:13:65:0a:d0:56:
8f:65:cd:fb:2a:d0:2d:ff:d8:87:04:e8:2d:f6:23:
f9:36:a5:93:9a:31:98:ff:12:77:c7:79:1d:2d:fe:
2d:04:67:de:f2:57:42:a5:5b:f4:ec:2e:75:3a:d3:
61:95:42:da:3b:b7:dd:07:a2:f5:61:a2:04:f7:2a:
af:ee:cb:0a:6f:92:5c:89:b3:e4:ea:48:18:fa:2f:
e8:49:2a:b2:c6:ca:7f:22:a1:cf:76:4f:c5:fe:17:
ac:8f:a0:09:78:0a:f4:6e:79:11:4c:77:8e:cc:c3:
a1:2e:60:bc:49:e7:9d:a6:f6:31:8d:cf:77:86:d3:
01:f8:03:1c:79:5d:e4:46:9a:06:2e:3f:b6:c2:d8:
52:33:e4:6f:c9:ab:c4:2f:68:16:7a:62:ca:f6:7b:
a4:de:b1:7d:da:ac:af:8b:b5:e8:0e:1e:56:62:1f:
47:6e:8e:46:4e:23:93:63:29:44:35:fd:e3:21:a7:
48:57:82:92:f5:3b:8f:1b:68:75:b9:f7:85:f0:4b:
6c:0c:a3:61:a3:42:dd:e6:40:6e:2c:75:4c:03:2b:
f0:ca:ee:9e:23:cd:0a:f0:15:05:90:03:b3:b8:98:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:6F:BA:25:BE:F3:78:87:B7:EB:67:A5:05:24:2D:02:41:AA:04
X509v3 Authority Key Identifier:
keyid:C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/61908B4AE79B11EFB6805B7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.0.88.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8d:8a:63:ad:4e:90:29:a2:1d:6f:60:4e:d8:48:1e:83:01:
63:d5:4e:1f:48:59:19:45:7f:53:13:fd:27:35:eb:a7:c5:c5:
f3:72:82:1a:e1:86:90:e7:d8:d7:18:55:c2:00:66:48:ac:e3:
5c:93:c8:a3:b2:c6:5c:0b:96:85:7c:c6:7e:a6:ea:fb:2b:da:
5f:0e:52:5f:0b:28:3e:08:fc:c6:ab:89:fe:cd:0a:0c:69:79:
5c:f3:fa:8d:01:90:db:4e:ee:76:6f:81:3f:6b:e6:02:77:8c:
11:e0:68:05:81:43:dd:d4:7e:6e:40:87:18:e1:28:c3:02:55:
48:bc:50:f0:86:0b:a7:af:32:75:f8:ac:44:2e:87:b3:ba:31:
b5:11:ee:d0:69:45:6d:f6:a8:35:27:bc:d6:cb:42:92:50:b1:
85:0c:82:a3:16:1e:9b:89:5e:0f:77:07:ea:e9:f6:9f:d3:4c:
c3:81:dd:ca:ae:8c:c0:9c:b2:81:e2:6b:e6:d5:cd:33:57:a1:
47:ed:08:b2:b7:78:7b:9a:69:7b:53:f6:96:88:f1:2c:33:d1:
18:86:94:8a:23:49:b1:fc:6a:ae:a6:a3:11:f8:3f:ed:75:02:
a4:0c:43:d4:1e:cf:41:3e:04:e1:de:11:65:60:09:5c:05:f6:
1e:e4:5a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:45:32 2025 by rpki-client