Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29756ABEF53D11EFBA59FE98762E951A.roa
File: 29756ABEF53D11EFBA59FE98762E951A.roa (raw, json)
Hash identifier: ZRdHvT0Q7CpJ18bG15nDZj9GDwIeaA+UPg4fEXz976o=
Subject key identifier: 64:C0:2C:49:3C:DA:EE:6B:8A:FB:BE:1C:F2:61:4C:CB:01:7F:DF:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013B8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29756ABEF53D11EFBA59FE98762E951A.roa
Signing time: Thu 27 Feb 2025 19:00:51 +0000
ROA not before: Thu 27 Feb 2025 19:00:47 +0000
ROA not after: Sat 05 Apr 2025 19:00:47 +0000
asID: 205125
IP address blocks: 45.194.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80783 (0x13b8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 19:00:47 2025 GMT
Not After : Apr 5 19:00:47 2025 GMT
Subject: CN=67c0b663-665b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:83:e8:82:c6:15:00:eb:8a:f2:0a:27:99:
6b:34:13:80:8a:3f:f3:35:08:07:c6:78:29:67:be:
c0:93:ea:8d:b5:e5:32:92:2b:9c:1f:2d:6a:d0:74:
be:50:b5:3c:99:aa:f0:2c:a1:01:f0:6e:d9:ab:d7:
a0:1a:52:34:9d:16:05:00:dd:96:3f:17:f5:c8:d7:
a5:21:7a:cb:22:9c:1b:aa:1c:c3:a4:36:a1:18:f1:
5d:17:3b:b3:3a:1c:ba:f8:07:3d:10:77:a6:fe:80:
63:7d:b9:8c:98:37:c8:4c:f9:97:c2:c3:52:ef:9c:
11:94:e9:42:5e:7b:91:2b:c0:3b:24:1a:ad:33:b8:
5a:46:5d:65:47:a1:98:7a:f5:c8:f0:4f:4b:90:a6:
c3:45:cf:81:12:1f:dd:7c:25:5a:9d:30:e6:0c:9a:
f3:72:73:47:71:e0:c5:52:df:49:27:14:e3:6e:c6:
a4:75:13:b7:3b:c0:c1:07:c4:c5:aa:fb:51:2f:cf:
0f:58:3e:a4:8a:b7:b7:49:9e:b6:a4:e7:c4:36:fc:
3b:32:eb:52:60:85:9d:e5:7e:4c:31:ab:a8:5e:ae:
29:1a:a1:fe:88:42:95:1c:a2:8c:97:75:21:0b:e1:
01:90:b3:e1:8e:84:a8:03:27:eb:f9:49:be:46:12:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C0:2C:49:3C:DA:EE:6B:8A:FB:BE:1C:F2:61:4C:CB:01:7F:DF:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29756ABEF53D11EFBA59FE98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.3.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3d:ec:8c:f2:85:80:0f:de:47:2a:7d:b4:c3:60:4a:84:45:
4a:30:30:71:cc:e7:a4:60:90:87:b2:b6:dd:4f:e4:92:30:a0:
71:98:30:ff:b5:75:d5:8e:48:d9:73:69:af:9d:52:e5:e0:23:
5d:62:ad:a4:ab:ff:6e:08:95:9c:3a:a4:55:81:03:5c:a2:05:
62:93:7d:3b:18:68:30:d9:60:15:f4:9c:90:d3:ff:36:78:04:
3f:98:16:a4:a4:a3:0a:48:9c:0f:5b:8b:35:07:3a:e8:8a:e4:
c7:fd:04:58:85:14:c0:2e:c4:3e:65:69:4d:64:55:08:7a:46:
95:68:f6:52:b6:c1:93:ca:43:3c:a0:ea:da:de:5e:40:c4:25:
56:5f:98:3d:82:16:3d:fa:78:80:ae:c1:f4:13:6f:da:83:ad:
ef:f0:f2:32:6b:e8:3c:cd:2b:63:39:98:fd:42:e3:13:49:9a:
0e:77:15:70:6d:b5:08:83:3a:a1:23:ca:44:c0:63:5b:c1:b1:
e6:f6:b3:fc:fd:4b:4f:66:e4:ba:14:d9:dd:90:48:69:97:ae:
a5:72:5c:85:ea:8c:3a:57:9e:16:b5:30:bd:de:a0:e7:0f:a9:
d0:e9:76:3c:5a:48:f4:ae:cb:8f:14:ee:63:1f:95:f3:bc:e9:
c6:3c:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:34 2025 by rpki-client