Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F212EDC372C11F0AC05BD89DAE4EC9C.roa
File: 1F212EDC372C11F0AC05BD89DAE4EC9C.roa (raw, json)
Hash identifier: 0NTHesYpfu6NbQbXnesXbE/5lDLRFfLCkwAg6E3NcC4=
Subject key identifier: DE:94:BC:C8:A5:AB:84:93:B3:1A:DD:0E:48:23:93:2F:FD:8A:F9:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F212EDC372C11F0AC05BD89DAE4EC9C.roa
Signing time: Thu 22 May 2025 16:45:09 +0000
ROA not before: Thu 22 May 2025 16:45:04 +0000
ROA not after: Mon 09 Jun 2025 16:45:04 +0000
asID: 35592
IP address blocks: 45.192.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87735 (0x156b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 16:45:04 2025 GMT
Not After : Jun 9 16:45:04 2025 GMT
Subject: CN=682f5495-6415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:11:b2:57:9c:fb:4b:80:53:f3:2c:a5:92:
6b:3e:d7:4e:9e:d0:85:99:f2:60:98:20:60:97:14:
3b:50:86:ea:38:e6:76:d5:8f:29:d4:8a:74:36:b7:
09:4d:67:10:85:e9:0b:5b:ba:2b:e9:ac:e1:cd:7d:
43:bc:69:7f:8e:84:61:c0:6f:a9:4f:7b:57:23:ed:
9a:49:fd:c3:06:f8:52:09:9a:21:51:d2:2c:bc:38:
b7:ef:e1:fc:9e:4a:1d:36:b6:42:ae:79:cd:3b:f7:
6c:58:e1:6d:33:63:40:3e:8d:00:b9:1b:d5:ef:ab:
fc:bb:c2:fc:df:26:4c:f6:23:c8:00:ac:ba:6b:fd:
f4:e8:c8:e9:5c:39:18:a7:e2:16:d3:f3:9f:20:3d:
e4:f6:f2:6d:2d:cc:bb:a0:72:49:38:80:4a:20:dc:
98:50:a4:99:ba:bf:be:be:50:3c:e2:11:4e:85:27:
29:14:2d:81:00:b8:cd:ce:ed:06:c3:4a:30:e9:6c:
a5:c5:d5:c3:d2:f6:de:e7:f7:71:79:8d:b7:24:50:
b5:32:e5:45:b5:46:6e:2c:c2:8d:51:b6:86:3e:15:
20:06:d4:36:61:1e:cd:eb:75:c4:5b:9f:56:98:d2:
68:f1:f0:1a:95:c8:d6:31:06:63:26:12:0d:c9:01:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:94:BC:C8:A5:AB:84:93:B3:1A:DD:0E:48:23:93:2F:FD:8A:F9:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F212EDC372C11F0AC05BD89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c1:ab:c8:3a:4f:a6:06:32:c9:1f:08:b2:49:40:a3:9c:e7:
d7:54:5b:27:ff:59:6d:31:90:be:9e:73:69:f4:ec:fc:30:16:
28:02:cc:35:f5:34:54:76:63:0d:fb:a3:f2:e1:fd:76:9b:8a:
76:7d:f5:cc:07:99:4a:57:85:0d:b6:3e:f1:fc:3a:e7:ab:85:
03:36:ca:cc:16:b1:af:a5:28:77:be:25:f3:e3:d5:10:1f:28:
fb:ef:36:d2:56:b8:50:34:50:6a:d6:4e:17:1d:36:b1:84:df:
e9:88:80:6c:05:6d:e5:3d:89:5c:37:31:56:f6:d5:09:ba:b2:
5d:a6:ce:c0:b2:ee:5a:0d:f7:ae:d4:c2:41:fe:ea:22:08:58:
59:fa:3f:44:ed:4a:19:03:99:27:2d:9f:b5:8a:62:e8:0a:3f:
6f:e4:19:e6:49:9f:8a:1d:c7:45:ac:9b:a7:b1:66:80:75:81:
06:4e:65:08:40:98:a2:06:59:67:a7:f7:b2:e5:55:e4:6d:7a:
3a:67:aa:b5:c4:a2:82:01:b9:25:90:19:9b:b7:05:29:fd:b5:
73:8f:e8:8d:20:a2:12:2e:29:24:7f:ea:2c:9c:13:2d:cf:42:
da:61:9e:91:b1:d5:6b:58:ca:c9:6f:06:46:f7:9f:6d:e5:eb:
86:1b:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:31:08 2025 by rpki-client