Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/109A69FE114411F09ACA3A97762E951A.roa
File: 109A69FE114411F09ACA3A97762E951A.roa (raw, json)
Hash identifier: TEZ356QDMxrjU+WD3Q1Lk5RueD8ELe1yjIj3Ncxm0Uc=
Subject key identifier: 83:CE:06:1B:CE:DD:E9:E5:C1:DC:00:DA:B3:EB:96:24:84:1B:A1:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/109A69FE114411F09ACA3A97762E951A.roa
Signing time: Fri 04 Apr 2025 11:00:48 +0000
ROA not before: Fri 04 Apr 2025 11:00:44 +0000
ROA not after: Thu 08 May 2025 11:00:44 +0000
asID: 20473
IP address blocks: 45.194.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84507 (0x14a1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 4 11:00:44 2025 GMT
Not After : May 8 11:00:44 2025 GMT
Subject: CN=67efbbe0-fb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:92:4d:69:eb:69:df:65:64:fd:df:d3:0e:
e0:60:be:d2:58:08:0a:c1:d6:c8:3a:ef:81:e2:af:
da:df:99:30:0c:8a:68:9c:62:5d:f1:a2:31:75:85:
50:f3:4d:81:be:e0:fe:f9:59:ab:c2:80:a8:4f:90:
2f:18:49:01:54:b4:27:ca:47:9a:d8:a6:cf:1e:7c:
48:b2:aa:0b:97:23:e1:54:35:f7:ec:db:b2:f0:05:
a6:37:2e:f0:02:78:30:a5:12:4b:bb:c3:16:76:18:
82:fc:31:58:fd:6f:f0:7c:cf:c2:91:a2:3d:2b:d6:
e3:34:ec:00:f7:96:17:e6:97:c0:1c:3c:12:c9:18:
c1:20:32:ac:ca:d4:48:ee:5b:96:ae:f8:c2:21:86:
96:c8:11:74:81:e4:44:cd:1c:29:d7:9c:d3:64:13:
4f:07:9c:1d:1e:0d:66:6a:33:e9:0d:42:31:4f:74:
d9:c0:16:95:f0:f9:3c:6c:ac:58:9e:3b:67:11:01:
f0:c0:68:07:71:73:62:da:81:c5:d4:d2:bd:9b:70:
c1:4e:da:09:6d:37:ec:03:38:02:e8:7d:92:32:22:
62:3d:a6:bd:c0:ba:fb:aa:a4:8a:c5:4c:98:70:4b:
da:54:d2:4f:2a:76:6a:f7:b3:cb:d0:88:3e:67:d0:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:06:1B:CE:DD:E9:E5:C1:DC:00:DA:B3:EB:96:24:84:1B:A1:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/109A69FE114411F09ACA3A97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:67:1d:18:a4:04:a1:57:82:80:59:11:d3:cc:41:e4:24:a0:
87:8e:01:dc:95:8a:c2:3b:bf:b3:8f:87:f6:33:84:00:79:2f:
b9:52:68:55:36:a5:c0:0a:bf:ca:a6:01:d3:88:9b:cd:9d:ed:
bd:b3:07:1f:4a:c4:12:1b:db:e7:04:4a:0d:e0:55:3b:f5:b6:
dd:ce:8c:5d:23:8a:55:6e:c6:3a:77:32:f2:60:79:fc:04:48:
48:9e:c9:ab:0d:34:43:97:8f:45:77:12:4e:5f:f4:a4:50:97:
8d:8b:33:e3:31:16:0a:c1:95:fb:24:91:0b:5e:92:90:90:51:
7b:33:5e:73:7c:24:23:b3:6a:2e:24:4d:89:50:9c:78:90:be:
23:a4:59:51:44:bd:30:d2:95:5b:c1:70:75:dd:a3:d4:e0:2a:
b4:f2:fa:b6:15:69:01:6d:ca:cb:e9:ee:51:7b:ec:93:41:2d:
13:31:f9:33:8e:76:fd:43:8c:1b:37:7f:9f:21:b6:9b:9e:b6:
4e:14:95:fe:df:47:d0:11:be:1c:c1:fc:12:c3:21:12:94:21:
9d:dd:00:2e:9b:31:db:aa:b9:76:d2:d3:d1:2f:45:8e:fa:3c:
dc:a0:02:b8:84:47:17:14:32:4c:84:90:50:4b:52:02:12:24:
fa:97:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:09:49 2025 by rpki-client