Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/086DBF4C0D3911F08E093398762E951A.roa
File: 086DBF4C0D3911F08E093398762E951A.roa (raw, json)
Hash identifier: 1A3QQSivvqSrh8Ie6gS0MkstHD4GMKSfCeXJ76aHOaE=
Subject key identifier: 1D:8C:5A:FD:F5:26:E1:55:D9:65:86:44:A2:E3:E5:A7:CB:25:C9:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014940
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/086DBF4C0D3911F08E093398762E951A.roa
Signing time: Sun 30 Mar 2025 07:31:45 +0000
ROA not before: Sun 30 Mar 2025 07:31:41 +0000
ROA not after: Fri 04 Jul 2025 07:31:41 +0000
asID: 55836
IP address blocks: 45.198.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84288 (0x14940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 30 07:31:41 2025 GMT
Not After : Jul 4 07:31:41 2025 GMT
Subject: CN=67e8f361-76fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:f6:9c:ea:05:c8:ec:1f:21:e7:9a:51:f6:
12:b7:b6:f6:17:e6:48:40:4c:bc:0a:d9:19:8a:f2:
32:6e:8c:ac:0f:da:e0:f4:86:f5:2c:c5:04:47:60:
42:e1:5c:64:ff:41:86:da:bd:55:94:a6:75:08:86:
98:cd:9c:aa:d9:74:44:37:91:c2:e5:68:21:75:5e:
16:0e:e7:36:60:32:27:5e:b8:3c:16:82:4e:ff:ce:
84:1c:e8:51:71:2c:96:a0:4d:6f:f3:0b:8d:2b:d0:
91:b5:0b:a4:92:14:71:a9:e9:24:4f:85:ef:3d:8c:
ff:62:d7:85:73:96:12:1a:6d:b0:ba:2b:88:bf:b8:
dd:e8:eb:5e:97:91:21:05:09:3c:e1:68:44:d6:79:
3d:d6:2a:71:bd:f1:42:9a:76:37:d2:dc:47:4b:92:
2a:37:30:1c:ab:6c:d7:4b:16:75:96:21:2f:68:66:
82:5b:9c:3a:62:32:6e:f2:f3:2e:43:21:87:30:1f:
d0:c5:e3:3a:e3:d1:d8:df:f5:66:d7:4a:f6:ac:12:
dd:5b:f8:a9:7b:10:87:14:ba:52:95:b7:2c:4b:47:
f4:86:6b:b8:48:39:ab:69:9e:5e:fb:9e:5c:c8:5d:
49:9d:2a:f5:35:99:c5:a5:b0:d4:0f:20:8a:07:5d:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8C:5A:FD:F5:26:E1:55:D9:65:86:44:A2:E3:E5:A7:CB:25:C9:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/086DBF4C0D3911F08E093398762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.255.0/24
Signature Algorithm: sha256WithRSAEncryption
43:3c:c7:fc:bc:a6:77:c7:07:17:94:49:a7:aa:2b:22:8e:b0:
ee:12:50:d4:77:1e:9e:5f:ba:59:57:d9:55:68:8d:34:8f:19:
4b:1d:1d:9f:b9:72:75:5c:8b:82:38:11:e3:19:e5:3b:34:83:
24:80:b5:be:31:8b:ce:f7:86:57:df:19:31:28:27:59:28:c1:
87:41:2b:2b:bf:8e:dd:22:6e:cb:86:2d:50:9f:9c:dd:37:2c:
d7:19:01:91:bb:78:8a:08:a5:c6:bb:27:82:4c:5c:dd:e8:23:
30:86:b2:e6:77:a8:3f:c9:5a:8b:2c:92:50:b3:2f:cb:56:43:
37:0e:e8:59:03:3a:87:21:82:55:29:76:c0:cd:b2:b4:1e:af:
de:40:b9:7e:5b:19:21:b0:9b:52:38:b7:a1:7e:f9:da:65:69:
af:91:52:0d:ba:11:a2:db:67:3b:ff:43:43:76:2f:f3:64:16:
59:4f:56:a4:1c:41:ec:e8:9e:95:54:e7:92:8d:56:22:b5:6d:
36:42:18:15:f7:d8:fb:41:36:6f:af:ac:c0:55:b5:32:3a:1d:
1e:55:04:48:64:84:f6:44:f8:de:5f:ac:82:a7:26:74:a8:32:
92:83:a3:aa:06:96:44:9b:40:03:3c:51:5a:69:70:e2:93:af:
f1:04:cb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:32 2025 by rpki-client