Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B106CB6FB2C11EFB8827E70762E951A.roa
File: 3B106CB6FB2C11EFB8827E70762E951A.roa (raw, json)
Hash identifier: rMsTCNTO3AOkBH/LoRWEvT0urIg8+M9amQF44BbCKxQ=
Subject key identifier: EC:98:F5:55:34:C8:F0:F5:D4:1E:44:6A:A5:E8:8A:47:DC:9C:30:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B106CB6FB2C11EFB8827E70762E951A.roa
Signing time: Fri 07 Mar 2025 08:14:46 +0000
ROA not before: Fri 07 Mar 2025 08:14:42 +0000
ROA not after: Sat 12 Apr 2025 08:14:42 +0000
asID: 142032
IP address blocks: 45.192.96.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82900 (0x143d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 08:14:42 2025 GMT
Not After : Apr 12 08:14:42 2025 GMT
Subject: CN=67caaaf6-8d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:ff:48:47:6a:de:1e:2b:14:cd:7c:f0:9f:
e2:73:ac:f6:c1:28:7e:b4:2f:ea:b8:21:ee:24:f8:
d0:52:35:85:f3:de:59:5a:5d:e7:c9:ae:5a:81:d4:
8e:8b:f0:0f:75:21:2c:d1:79:c2:12:6c:51:29:a0:
70:f4:f4:e2:67:8b:02:c9:ee:c4:63:1c:74:2d:d2:
91:15:21:a9:fb:ec:73:a4:cd:38:c2:3c:61:3d:61:
ca:31:6a:ac:64:70:dc:4d:b2:38:75:59:4b:f0:ca:
b4:f0:7f:d6:c1:ec:74:22:d2:aa:93:ec:81:28:58:
37:8d:e9:50:54:2a:1e:85:5b:a5:be:62:3d:c7:cb:
89:41:dc:e6:69:9f:35:5a:65:78:c3:a7:8d:1c:7c:
54:ba:b9:6d:08:5b:ba:ff:ce:9f:91:68:03:f2:08:
49:d2:8b:bf:ef:d6:3a:a7:0f:f5:35:bf:cb:f5:e7:
fe:f7:b4:26:b0:b6:62:93:3f:1e:be:e2:a5:18:cf:
2e:66:ed:8e:6e:fa:33:fa:73:48:f1:57:1b:a1:1c:
87:ec:45:bf:60:7b:64:ca:bf:5c:56:90:3a:2c:c0:
cb:3d:85:99:f2:68:20:de:39:90:73:fa:78:8e:4b:
18:b9:f0:5e:21:7e:f8:b3:49:b8:5c:9c:35:eb:62:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:98:F5:55:34:C8:F0:F5:D4:1E:44:6A:A5:E8:8A:47:DC:9C:30:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B106CB6FB2C11EFB8827E70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
40:06:25:46:60:8a:60:b6:91:b9:48:e9:af:3a:d4:4b:38:c4:
74:d1:9d:11:67:5e:c7:f9:b8:df:92:25:8c:2c:e9:25:30:a5:
37:fe:4d:01:b7:01:4c:9e:e9:81:22:7e:be:df:d6:b0:19:41:
d0:83:46:23:66:2e:fb:dd:b3:3c:5e:12:c0:44:80:9c:56:d3:
1a:ae:74:b8:8d:dc:86:e8:14:87:88:68:fd:dd:3d:f3:22:3b:
3b:cd:86:b9:41:01:78:15:09:97:da:8f:35:b4:10:ad:4d:4f:
8b:19:0e:13:f0:14:84:1e:a3:05:1c:0c:f5:d8:5b:a5:e9:9e:
e1:aa:fb:f4:39:4f:7e:13:79:e1:dd:5e:5b:c4:6f:8f:2e:48:
16:df:67:12:f8:2d:a7:f5:77:56:60:90:d9:e8:81:cd:ca:9d:
8c:8b:54:a0:e0:57:30:57:eb:5c:1f:46:45:23:37:c3:7e:cc:
31:c9:8b:c2:2d:53:cf:08:4f:74:f5:e9:c8:09:01:78:10:a5:
1b:eb:bd:1b:22:93:38:a4:1a:2b:4a:23:75:b3:d2:e8:86:9e:
94:8f:b5:4f:06:6e:b1:c4:40:05:e3:32:9a:3b:fa:85:c3:4d:
7f:1c:e3:fa:dc:7b:95:2b:a7:11:45:03:f5:c3:3d:d2:fc:50:
08:31:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:37 2025 by rpki-client