Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D1DC380D2F11F0BBDF2A5F762E951A.roa
File: 40D1DC380D2F11F0BBDF2A5F762E951A.roa (raw, json)
Hash identifier: 1Gb4PNrtKLvTYx0z1FlyW1itI4sFc1noX8OaXHoUnk8=
Subject key identifier: 57:8D:1E:0B:9D:B9:E8:54:2D:2E:BA:45:04:6B:60:A7:5B:0A:04:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014930
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D1DC380D2F11F0BBDF2A5F762E951A.roa
Signing time: Sun 30 Mar 2025 06:21:45 +0000
ROA not before: Sun 30 Mar 2025 06:21:41 +0000
ROA not after: Tue 08 Apr 2025 06:21:41 +0000
asID: 20473
IP address blocks: 45.194.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84272 (0x14930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 30 06:21:41 2025 GMT
Not After : Apr 8 06:21:41 2025 GMT
Subject: CN=67e8e2f9-3fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:dd:13:55:c9:a8:05:c8:8d:ef:d4:bd:84:0d:
15:fc:0e:ec:b3:85:92:27:1a:9f:c7:2f:26:1a:28:
15:f8:78:11:fc:f4:6e:8b:a2:ba:37:8d:70:f8:a6:
29:fa:d9:12:d3:1b:6f:f0:8d:32:57:24:e2:27:00:
57:86:68:0e:a3:0d:e1:57:10:10:b1:8c:fc:66:cb:
23:ee:6f:00:6f:c0:92:94:5d:e7:ed:8e:f6:ad:34:
8a:6c:c4:cf:15:5a:2e:8a:e1:44:23:5b:4d:66:b9:
0b:3d:e6:5a:26:44:4c:a0:9b:40:a2:ad:7f:bd:9b:
30:45:58:fd:50:32:35:e2:5a:85:15:ea:a5:5e:ec:
45:22:74:b4:d5:58:5f:39:31:b5:87:f8:e7:6c:8e:
1f:43:30:72:c6:89:85:09:6a:aa:47:cf:9f:b1:f2:
ae:cc:4d:65:91:79:e4:4d:b2:bc:dd:0a:75:79:fb:
8e:00:20:fa:2e:d3:a5:87:20:82:45:15:22:b6:73:
45:c6:fb:1a:c7:0a:e8:81:c0:a4:af:8d:52:35:09:
c4:68:5c:7a:dd:66:5a:ba:08:da:3f:78:55:49:cc:
a2:77:d2:23:2d:fe:a5:79:3f:09:a6:d7:5e:b9:fc:
f7:3b:15:47:31:05:fe:fe:66:ce:6d:3a:2b:5c:a1:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8D:1E:0B:9D:B9:E8:54:2D:2E:BA:45:04:6B:60:A7:5B:0A:04:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D1DC380D2F11F0BBDF2A5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.92.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c5:75:35:4c:34:ca:1b:59:70:15:8a:28:26:88:87:5c:bf:
bf:76:f8:7c:c3:d2:e9:a7:8b:cf:a3:7c:03:d2:f4:16:3b:83:
8f:c6:ec:cb:df:ee:45:87:8e:c5:b7:54:c4:88:92:33:81:ee:
da:53:eb:66:2a:e8:c4:89:92:98:d7:e8:b7:2c:d4:14:4c:cc:
31:39:84:bd:7e:d7:b8:70:47:fb:14:33:80:20:5b:27:4a:10:
30:cf:e4:c9:e2:61:0a:d4:5d:b8:a9:a4:78:12:77:1d:db:70:
0c:90:37:e8:a7:08:4a:60:26:be:0b:7c:9e:11:1d:9c:34:fd:
fa:59:d5:26:b6:6c:81:1c:13:1b:ab:ac:13:16:f4:c8:be:a9:
15:08:37:55:de:41:3e:93:71:73:54:da:81:a9:9e:85:9a:dc:
91:54:9b:cc:fc:c5:9b:2b:43:db:84:54:f3:c8:a1:f6:fe:cc:
df:6b:5d:09:85:d0:2f:1c:ba:18:6b:51:2c:88:9e:7a:92:59:
cb:5d:0f:b1:dc:2d:0c:f8:01:9e:f0:72:47:c6:a3:72:c2:c0:
17:ce:2a:53:e5:b3:b3:54:3d:19:35:4c:da:e6:18:49:52:3b:
23:62:49:62:89:6e:22:5f:c4:45:55:13:42:3d:bf:19:ac:3f:
80:b7:2e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:26 2025 by rpki-client