Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/81B8D5EEDD8211EF8A3C396D762E951A.roa
File: 81B8D5EEDD8211EF8A3C396D762E951A.roa (raw, json)
Hash identifier: RsxH1fAU+htkReATXiltObbwhi4z8mSFSYmQbCVCbIo=
Subject key identifier: 73:53:97:0A:12:75:7B:7A:DA:71:5D:64:D5:88:1A:9B:83:51:F9:BD
Certificate issuer: /CN=F363DCF2AR/serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Certificate serial: 20
Authority key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Authority info access: rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/81B8D5EEDD8211EF8A3C396D762E951A.roa
Signing time: Tue 28 Jan 2025 14:16:46 +0000
ROA not before: Tue 28 Jan 2025 14:16:43 +0000
ROA not after: Wed 31 Jan 2035 14:16:43 +0000
asID: 30992
IP address blocks: 129.0.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Validity
Not Before: Jan 28 14:16:43 2025 GMT
Not After : Jan 31 14:16:43 2035 GMT
Subject: CN=6798e6ce-7798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:85:11:5c:db:79:9d:c0:35:10:e8:58:e1:
07:0f:38:a8:06:c8:8f:61:02:3a:c2:b6:4a:18:4a:
db:b6:10:7d:f4:c7:e2:b7:34:ba:63:6a:23:ce:a0:
81:10:e6:09:7a:94:58:26:8b:b1:7d:0a:77:01:9f:
f2:ec:9a:91:2c:ad:7a:3f:46:fd:12:ed:4a:8b:12:
72:00:f0:09:10:01:5f:83:68:5b:23:7f:44:ae:b0:
13:3b:7b:03:0b:d9:5c:0f:78:8d:0f:31:63:57:41:
b0:ab:95:e1:c3:04:6b:e9:26:d5:a3:76:8a:81:41:
c5:b5:17:be:13:2f:8c:9c:49:84:19:36:85:50:8d:
4e:a0:5c:0b:61:93:28:6b:ba:f0:01:9e:a3:ff:23:
e4:f3:a3:b6:8d:e6:31:29:a9:9b:56:92:39:59:ee:
6f:39:16:d4:83:32:3f:a0:27:7d:29:99:ef:39:8b:
51:81:11:47:21:91:60:bf:dd:13:d8:7a:27:94:47:
a1:e5:07:7d:6f:93:ad:c9:89:6f:69:f8:94:24:b7:
2b:4e:2f:d2:97:4c:91:71:00:d3:2c:eb:49:7f:7c:
b4:84:1e:e9:12:86:b9:33:cf:a7:33:e1:7e:db:38:
78:a2:1d:f2:db:4d:57:d3:45:46:bc:9e:66:d0:e6:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:53:97:0A:12:75:7B:7A:DA:71:5D:64:D5:88:1A:9B:83:51:F9:BD
X509v3 Authority Key Identifier:
keyid:C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/81B8D5EEDD8211EF8A3C396D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.0.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:d1:cd:63:35:5f:a2:20:60:b8:a3:3d:36:72:f9:6a:eb:31:
2e:98:9b:73:59:73:59:57:23:0f:fb:98:68:15:c8:ec:fc:85:
d8:ec:fd:82:da:2e:da:ce:9e:a0:38:23:e6:90:9d:c4:63:a4:
26:d2:a9:32:31:da:a2:13:9c:3e:ce:55:01:17:fe:e7:f2:50:
71:19:20:d5:d9:9f:98:c6:d0:36:aa:db:db:86:09:0d:20:70:
42:5e:94:e2:80:ca:05:3d:74:d4:7f:86:91:25:ec:5c:fb:5c:
86:4e:4d:57:70:aa:24:38:f5:fe:98:2f:3e:e2:12:ad:97:df:
81:8c:35:71:e8:90:36:b6:a8:04:ea:68:c9:b8:0e:75:a4:e5:
67:88:27:c1:55:67:51:d8:3c:c7:2b:a6:03:06:33:8b:07:76:
5d:20:63:7b:91:38:48:d1:59:d6:f3:b2:bb:e8:e5:db:ac:5f:
cc:50:40:9b:2f:aa:3c:47:ec:d1:fb:70:46:0f:d8:6e:77:44:
73:22:6c:e3:19:b4:f2:35:01:67:96:9a:c7:f2:b6:66:61:99:
7a:99:98:a8:c2:e8:0b:79:5a:1d:4a:fb:7a:30:8f:a1:43:92:
24:db:83:8d:51:0c:eb:72:14:df:a9:eb:38:6b:b8:8e:5c:5e:
65:28:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:26:38 2025 by rpki-client