Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/051725BA00B711F0BF53228B762E951A.roa
File: 051725BA00B711F0BF53228B762E951A.roa (raw, json)
Hash identifier: 5In+nSdaHfzdPT9Yy1FQ53BeuJJGvB2T9yl3h8gEhrQ=
Subject key identifier: 1C:4A:81:BF:14:46:C8:58:50:E1:45:AC:84:1A:61:8E:F7:07:03:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/051725BA00B711F0BF53228B762E951A.roa
Signing time: Fri 14 Mar 2025 09:30:51 +0000
ROA not before: Fri 14 Mar 2025 09:30:47 +0000
ROA not after: Fri 13 Mar 2026 09:30:47 +0000
asID: 262191
IP address blocks: 45.192.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83396 (0x145c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 09:30:47 2025 GMT
Not After : Mar 13 09:30:47 2026 GMT
Subject: CN=67d3f74b-bced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d7:27:71:de:e7:fd:3a:e4:b9:e4:59:d0:e5:
19:df:2e:5d:b4:c4:4a:a0:96:b5:1c:97:32:f7:44:
a7:87:d8:f0:83:95:d9:66:1b:94:e4:ee:51:5b:e1:
01:8e:6a:7e:74:30:1c:d8:3a:e2:73:80:99:0e:14:
a1:a7:28:c5:f2:29:9c:8e:f9:60:2a:86:e0:b3:27:
cb:4d:06:7c:67:bf:11:e4:f4:6a:55:2e:60:8a:94:
4e:14:b1:15:2c:33:da:ac:dc:55:1f:3f:fc:9f:30:
c3:88:12:89:12:b9:98:0e:95:7a:a6:2a:51:8b:b3:
27:39:3a:4f:1b:bf:93:eb:2f:95:e2:a2:1e:b4:a8:
02:10:98:84:4a:50:14:60:c8:2b:47:5a:08:a2:94:
6d:5e:db:de:59:db:9f:b9:50:1a:32:79:f3:91:b4:
be:8c:8f:69:46:a2:30:9b:8d:99:72:39:7d:70:11:
b8:98:ef:c2:40:35:4f:b2:31:4b:e0:8f:90:29:45:
88:be:d0:3d:40:a3:19:9a:e9:7b:15:fe:4d:be:31:
67:29:cf:4e:00:c6:71:1c:36:63:7a:86:8f:52:a3:
70:b9:ac:0a:7b:0f:bb:1e:ad:21:90:59:53:54:c8:
ac:a7:80:db:f9:f6:13:76:83:8d:9d:a5:83:83:96:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4A:81:BF:14:46:C8:58:50:E1:45:AC:84:1A:61:8E:F7:07:03:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/051725BA00B711F0BF53228B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.18.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:58:fa:37:88:a5:60:3e:4b:1b:e3:ae:24:cd:35:30:2e:03:
83:56:60:bd:88:f8:64:e6:d2:c9:dc:0d:27:cd:df:46:da:ee:
91:bd:1b:19:60:5f:a8:68:00:5e:5a:15:3c:d0:65:90:10:ab:
b4:61:b7:dc:37:a7:52:f7:5b:7d:1d:1b:98:30:be:97:fb:3f:
86:7e:24:c2:c8:a8:ab:69:35:8e:7d:97:c5:01:73:63:13:93:
43:3f:d5:e9:d0:83:1c:ad:21:bf:0f:f7:3c:0a:0f:e8:e4:34:
8d:2b:19:9b:53:79:96:46:22:f0:e2:db:81:8d:7e:33:25:86:
32:4f:2b:e6:03:10:07:e5:73:a1:fa:44:71:47:45:86:ec:7a:
87:89:4c:64:3b:4c:97:80:df:08:19:43:af:d4:2b:36:7d:8e:
f2:a1:d0:31:ef:8e:ae:f9:6f:ea:6e:41:bd:5a:b2:f3:1f:5f:
58:4f:e7:48:f0:05:8c:35:b7:2f:c2:a4:f4:65:cb:b8:ff:75:
87:43:fe:1d:ff:a8:13:c6:5c:d5:cf:d4:2c:28:1c:11:88:70:
36:0b:39:4f:53:4e:0f:4f:33:e6:14:14:8e:20:b4:95:83:ad:
b0:5a:1f:af:8f:c7:7a:18:1e:2f:95:12:00:50:76:dc:c2:87:
fe:84:1e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:09:51 2025 by rpki-client