Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00EC9A0EFEED11EF8D3FEA88762E951A.roa
File: 00EC9A0EFEED11EF8D3FEA88762E951A.roa (raw, json)
Hash identifier: LJsXwNPtRWmkmGiXjnpYE0whTpD+knX++bTj/SAVFKo=
Subject key identifier: D4:DC:68:EB:F2:CB:AF:58:31:7D:7F:BB:FD:F2:23:CE:90:E2:C5:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00EC9A0EFEED11EF8D3FEA88762E951A.roa
Signing time: Wed 12 Mar 2025 02:52:15 +0000
ROA not before: Wed 12 Mar 2025 02:52:11 +0000
ROA not after: Thu 12 Mar 2026 02:52:11 +0000
asID: 328608
IP address blocks: 45.192.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83186 (0x144f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 02:52:11 2025 GMT
Not After : Mar 12 02:52:11 2026 GMT
Subject: CN=67d0f6df-37b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:2a:7c:9b:8c:df:88:4d:6d:08:06:9d:e4:
66:45:76:4d:a5:94:9d:2a:c5:3d:99:58:70:42:a8:
33:f7:82:b2:26:e3:21:5c:b5:f0:ea:91:9f:b4:95:
db:b5:be:20:6f:bb:51:0b:14:40:2a:96:86:dc:52:
b4:8f:b7:21:c2:7f:1d:75:c6:88:38:23:eb:4a:30:
63:9d:6a:15:98:5f:a6:0c:ca:be:0c:65:15:7f:ae:
ea:d0:73:0d:ef:0a:a4:c8:8e:45:0d:e7:0c:43:13:
4d:93:45:ff:65:8f:31:07:33:99:14:15:d4:de:49:
a7:52:8e:ba:60:79:95:06:28:23:9c:55:04:32:6f:
65:84:90:39:0b:1b:e1:0f:c6:6d:f7:f6:e8:2b:2a:
b0:34:f8:6d:66:83:bf:d3:90:45:48:71:ca:2d:b0:
75:c5:0d:d0:c3:47:08:2d:1b:b0:8e:66:3c:6c:28:
26:5e:22:18:a9:0f:37:67:9f:67:54:d1:2d:46:97:
fb:bd:c7:02:92:56:2a:b9:0d:17:65:b0:d5:3d:5d:
96:0d:5b:d5:04:87:b6:aa:8f:86:93:00:13:f4:e1:
14:5a:6e:ea:94:8d:65:03:54:b9:0f:03:3a:b4:f1:
04:2b:16:18:a5:5f:dc:a5:1d:cf:85:0f:72:ec:53:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DC:68:EB:F2:CB:AF:58:31:7D:7F:BB:FD:F2:23:CE:90:E2:C5:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00EC9A0EFEED11EF8D3FEA88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2e:e9:92:76:ca:32:e0:60:4a:01:c3:cf:3d:b6:65:e0:f5:
bf:c4:b3:2d:32:49:9c:52:e4:ce:aa:30:0d:45:aa:bb:f9:a3:
3d:74:5f:9c:9a:35:2a:1a:60:bf:81:19:94:43:b8:dd:e4:05:
ac:99:81:08:f3:93:1d:d2:ca:c6:60:1a:08:69:26:a8:bd:e0:
47:b1:bd:64:c0:de:01:2a:0d:91:d7:fd:f1:09:d4:fc:60:5a:
79:4f:32:2d:b6:33:d3:9d:96:51:ed:10:3d:56:07:62:22:90:
15:e5:85:85:e7:31:77:c9:9a:c1:4a:ba:3a:4b:52:dc:9d:0f:
f7:98:f5:27:3f:0b:c0:ea:9d:75:8b:2e:ae:18:66:2b:92:30:
07:45:ac:16:f6:bf:6b:fe:d5:08:2c:0e:04:5e:35:69:63:87:
52:a5:6a:a9:8b:c9:10:c6:0f:e3:ae:82:0b:b3:54:86:8a:d7:
e3:d5:82:24:4c:5f:3c:df:9d:7c:23:29:ce:eb:b4:38:c6:77:
41:ff:20:0e:97:54:31:dc:a6:cc:8e:4a:75:08:2f:ab:65:7e:
75:12:dd:ec:50:5b:d7:70:98:51:38:41:9f:40:f3:28:d4:59:
1c:15:e0:5e:5e:53:cb:c6:12:8f:11:2d:6b:3b:7b:88:4d:6d:
8c:b6:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:18 2025 by rpki-client