Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4233C252F43011EF9386DF55762E951A.roa
File: 4233C252F43011EF9386DF55762E951A.roa (raw, json)
Hash identifier: KCA4vqXzS5h4FvUfAwZkYSEpNwXvVd/KwpJUY8J0q9k=
Subject key identifier: 83:5D:3E:D1:35:87:B7:C5:2A:AB:92:4F:F1:8D:56:72:4E:04:C1:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01317B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4233C252F43011EF9386DF55762E951A.roa
Signing time: Wed 26 Feb 2025 10:55:58 +0000
ROA not before: Wed 26 Feb 2025 10:55:54 +0000
ROA not after: Thu 19 Feb 2026 10:55:54 +0000
asID: 328608
IP address blocks: 45.205.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78203 (0x1317b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:55:54 2025 GMT
Not After : Feb 19 10:55:54 2026 GMT
Subject: CN=67bef33e-fb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:08:64:5b:fb:42:98:26:d0:9a:c1:b1:e3:
18:03:02:e7:c1:17:79:8f:a3:fd:6b:b1:14:36:d1:
c1:a4:b1:df:35:b4:6c:67:86:87:0f:54:f1:fe:19:
e5:7f:d9:89:e9:76:6b:60:75:7c:8b:a0:d3:d7:3c:
14:73:04:53:3e:11:bc:ee:be:74:15:8c:eb:a5:a6:
8b:f0:db:8d:59:1f:1c:52:5f:21:d5:6c:ea:5f:bb:
b1:8a:84:71:19:eb:eb:04:b6:02:62:76:8c:d2:f2:
7f:1b:9e:e0:50:f6:91:7f:1e:43:1e:0c:96:65:ee:
5a:c4:9a:1d:4e:b5:76:02:7f:64:1f:66:da:71:8f:
91:09:62:34:d1:5e:67:4e:1d:32:c6:03:f5:f5:c6:
5b:0a:06:bc:d8:af:f9:cd:01:64:53:15:43:ea:e0:
d1:07:10:64:d9:37:2d:e1:44:71:da:bb:47:b5:bc:
1e:91:7b:04:1f:58:3d:8d:52:73:06:e7:70:ee:09:
4e:3c:e7:ad:e2:e2:03:f5:6a:16:85:69:86:cf:7f:
ed:2d:e6:d7:22:33:3b:a7:74:9c:73:f6:c5:d6:3c:
52:63:2a:2c:ec:0e:ff:88:e3:47:14:42:53:bd:a0:
c9:94:7d:68:c3:9b:05:3b:9f:3a:dd:ed:42:b3:5d:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5D:3E:D1:35:87:B7:C5:2A:AB:92:4F:F1:8D:56:72:4E:04:C1:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4233C252F43011EF9386DF55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.7.0/24
Signature Algorithm: sha256WithRSAEncryption
57:98:b7:2c:38:cc:51:45:48:90:d9:86:a1:8a:6f:51:74:6a:
66:5a:93:21:2e:33:be:96:ce:2f:9f:82:19:54:e5:db:4c:df:
d2:f6:f1:b8:17:69:a3:b3:bd:c3:aa:6e:79:dd:c7:e1:6f:30:
cd:ee:86:c2:58:d7:17:55:d8:29:88:2c:37:9b:08:28:3f:28:
33:86:29:e1:3c:69:fb:6e:e7:ae:ce:ca:fd:67:35:74:a0:45:
3e:c4:f5:e4:77:ff:f8:06:24:30:5e:ee:5a:ea:c6:dd:bf:11:
01:27:d3:c5:f2:e6:27:a4:3f:6c:96:9e:25:ff:28:41:bb:22:
dc:4d:60:db:c7:6b:84:87:22:a2:3c:01:ec:2b:c0:68:50:7f:
39:f4:7d:f4:5d:dc:fc:c8:5b:39:2c:80:e4:0f:a7:56:10:7b:
8e:dd:04:f8:17:fa:f0:ac:b7:e0:aa:09:dc:25:1d:43:44:1f:
6e:b3:08:d0:b2:31:c6:e1:41:c2:89:19:47:0d:25:fa:42:d4:
31:bc:41:d0:4d:49:15:b8:83:55:01:f2:3c:1d:ab:62:81:f4:
47:e5:00:54:bb:9b:c9:49:1e:89:79:a7:ab:20:f6:66:d1:03:
9d:d1:dd:47:02:a3:ec:f7:09:67:dc:98:f1:8b:91:9c:79:80:
ec:0c:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:39:08 2025 by rpki-client