Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AF52DE0ED1611EFBABE6FA6762E951A.roa
File: 2AF52DE0ED1611EFBABE6FA6762E951A.roa (raw, json)
Hash identifier: cvZMWQNyYIW8qE072duLWZWkWBbZrmf3Qe8oUWXHKjo=
Subject key identifier: DE:A4:91:94:AC:FF:80:37:C6:E7:39:7F:03:FE:4F:0F:1B:59:CA:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0124CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AF52DE0ED1611EFBABE6FA6762E951A.roa
Signing time: Mon 17 Feb 2025 10:01:34 +0000
ROA not before: Mon 17 Feb 2025 10:01:30 +0000
ROA not after: Tue 18 Mar 2025 10:01:30 +0000
asID: 137899
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74956 (0x124cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 17 10:01:30 2025 GMT
Not After : Mar 18 10:01:30 2025 GMT
Subject: CN=67b308fe-bab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:be:cc:2e:1d:c7:25:56:51:e9:94:bd:d8:
20:aa:df:0c:8e:c8:84:de:94:dd:6a:bb:77:d2:c9:
34:3d:15:66:fe:c2:32:35:62:95:b0:d5:b4:d1:c0:
78:10:c3:89:59:7b:13:c4:1b:e2:3e:04:2a:60:2e:
de:d4:36:a9:04:45:93:db:ba:01:dd:a3:34:a0:d5:
93:99:40:28:85:2f:3b:ea:d6:5b:0f:1c:9c:a0:a8:
74:cb:97:2f:04:54:58:9f:75:46:a0:b4:fd:a5:13:
90:57:c5:15:ba:2f:cd:8b:55:9e:d9:86:5e:b5:af:
ad:d2:c3:14:b6:78:d7:b6:71:f8:98:84:e6:80:df:
7d:2b:af:c8:19:77:8c:74:f0:14:21:a8:a4:f5:15:
6d:8d:d3:b8:5b:5a:cc:ad:4b:f7:38:0a:2c:f2:d5:
b6:6d:64:e3:b4:12:f5:95:b7:6c:11:ec:ef:9e:c7:
d7:1e:67:7d:ac:d6:77:92:bd:d5:48:5e:29:9e:a5:
5e:21:b1:59:9d:05:02:f9:20:67:ef:b7:3f:0b:f5:
de:a1:58:2c:ca:73:a9:a0:ef:d9:ba:78:f1:4f:7c:
d1:5d:d1:7b:b9:f9:0e:99:3b:f6:05:3d:2b:03:ff:
a8:ec:a1:3c:2c:08:0c:96:d0:29:93:14:e7:00:1f:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:91:94:AC:FF:80:37:C6:E7:39:7F:03:FE:4F:0F:1B:59:CA:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AF52DE0ED1611EFBABE6FA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:3c:30:78:a3:53:67:ce:2b:80:db:28:8b:a4:e2:3d:be:0f:
fa:97:6f:80:0d:ba:7c:95:5a:b8:34:64:57:ff:a3:6a:82:57:
82:0e:8b:a0:89:38:16:d7:0e:22:0d:41:7d:b9:57:92:0c:98:
28:2e:46:71:6d:5d:92:d5:64:b7:aa:48:c9:e8:47:5f:55:dd:
97:33:e4:d3:f7:2a:4d:fb:f1:ff:be:b2:61:d2:63:32:d0:f4:
5e:db:09:ca:98:e4:35:41:db:79:38:ef:f2:08:0d:65:73:74:
9b:51:0b:ed:be:7b:4e:21:00:27:3f:de:a3:23:0d:89:ca:44:
f7:8a:c0:7a:d7:b7:23:02:6b:d5:eb:30:d7:93:0a:c6:90:96:
0b:24:b6:bc:9b:74:21:a0:7c:4f:de:ff:71:78:78:c0:dd:7f:
0e:9e:40:ae:69:d4:b1:b6:44:72:ec:83:cb:ed:ff:3b:87:ec:
7d:8d:bb:bc:e5:53:40:f4:4d:53:21:21:0d:c7:62:4a:a0:21:
e5:2b:e4:20:93:36:0e:15:57:7b:6c:eb:ad:51:cf:09:a9:3f:
72:7d:83:64:47:5a:8c:a7:c5:d3:83:88:2c:5c:16:c9:8b:a6:
af:87:b5:9d:c3:43:5c:0b:2e:34:70:0a:db:6e:da:1e:89:a4:
5d:62:c2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:51:40 2025 by rpki-client