Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01CF6D34FD8F11EFA625AA88762E951A.roa
File: 01CF6D34FD8F11EFA625AA88762E951A.roa (raw, json)
Hash identifier: fHya9P8na5GyIPtRrVe7ad4LQ1uKohrSbUQIH28SsNE=
Subject key identifier: DD:B8:C3:C1:9B:D4:97:29:AB:B0:2B:A2:9C:D3:4E:DE:6B:9E:59:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01449C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01CF6D34FD8F11EFA625AA88762E951A.roa
Signing time: Mon 10 Mar 2025 09:06:52 +0000
ROA not before: Mon 10 Mar 2025 09:06:48 +0000
ROA not after: Thu 17 Apr 2025 09:06:48 +0000
asID: 397423
IP address blocks: 45.194.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83100 (0x1449c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 10 09:06:48 2025 GMT
Not After : Apr 17 09:06:48 2025 GMT
Subject: CN=67ceabac-9769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:d2:89:68:5c:6d:32:60:19:a7:57:35:b5:
9f:4a:82:25:fb:5b:cf:19:0d:87:e5:22:c5:a7:40:
c0:2e:5c:01:22:08:f0:ff:e5:eb:57:3a:d8:de:84:
0c:30:ec:f1:ee:11:12:54:b3:15:57:51:7b:d9:fe:
a9:33:af:7d:4f:1a:1d:70:5d:ab:2c:13:46:e3:82:
de:be:cd:fc:0e:7a:16:b5:a7:f8:b2:0e:ea:09:e7:
27:d0:df:49:a0:a4:d9:73:9d:30:dc:bd:2b:21:ae:
0b:4e:3c:74:2d:1d:38:77:df:b7:23:d4:0a:3d:26:
02:34:bc:6a:6c:df:a6:f8:5b:ae:25:f2:c8:9c:ce:
2f:4e:88:c7:eb:76:c1:04:ae:ad:e7:58:1b:c6:c1:
f6:af:a3:e1:bf:90:50:af:28:2d:99:9c:48:0e:ea:
92:77:39:8e:db:fd:38:6d:2d:92:0c:f9:a1:23:84:
8b:11:3f:bc:ca:90:d7:3a:bb:63:e9:7c:84:ca:71:
85:c2:c8:c0:1d:7d:9e:10:f2:d2:a5:8d:14:1c:00:
34:e4:b7:5c:5f:41:cf:68:2b:dc:2a:97:17:85:d5:
c6:ea:e9:9c:29:e8:85:ff:69:dd:f7:bc:26:51:af:
47:f6:60:be:88:5e:5b:d9:61:a3:db:91:70:d4:c6:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B8:C3:C1:9B:D4:97:29:AB:B0:2B:A2:9C:D3:4E:DE:6B:9E:59:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01CF6D34FD8F11EFA625AA88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:14:5b:47:31:00:1a:94:79:52:41:bb:be:59:53:3d:a5:71:
f2:53:8b:98:cb:89:5a:df:ce:88:e9:07:d9:9c:f8:84:7a:46:
96:9f:ea:10:62:51:78:84:37:99:71:21:26:4b:7a:95:2b:c2:
11:14:76:c2:91:27:f0:42:9f:e5:2d:6e:be:35:0e:83:e8:21:
96:0f:6b:6f:fc:3d:02:85:cf:96:40:61:8e:3a:0a:b5:ac:57:
02:9f:59:14:4e:34:21:db:e4:47:e0:11:7e:f9:27:6a:65:6e:
9f:24:82:21:a0:0d:9a:cb:69:af:e3:76:53:7a:c4:01:4e:cf:
bd:aa:f7:2d:f3:3e:d9:d8:ec:9d:b4:58:77:7f:96:78:0f:6b:
77:24:d1:05:a2:80:b7:11:d1:5f:b1:06:17:17:75:71:bc:7d:
5d:c6:39:fd:0b:0b:c1:9b:47:e3:c8:a1:2f:64:66:6c:56:53:
a4:ae:24:28:93:86:e6:a9:03:97:ef:74:40:9c:87:b1:b9:8d:
a3:ce:83:5f:45:c9:23:e4:32:13:4c:7b:24:3b:b2:bd:19:22:
f8:53:e9:54:1f:ab:c5:bc:6d:b0:02:81:13:c1:e3:6b:7e:49:
3f:f1:cf:bd:3a:e3:e8:a5:46:3a:8d:42:6a:0d:c5:c1:a5:39:
e7:e6:f7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:44 2025 by rpki-client