Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A235588F47E11EFA94CC077762E951A.roa
File: 4A235588F47E11EFA94CC077762E951A.roa (raw, json)
Hash identifier: x0odpQ3pQ5CoieT6dCT2J5yniOBEl2eWtuAPiFEPjwI=
Subject key identifier: 80:85:9A:2C:E9:D8:CE:6B:7D:00:00:F3:57:E1:63:86:5E:6B:00:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013771
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A235588F47E11EFA94CC077762E951A.roa
Signing time: Wed 26 Feb 2025 20:14:32 +0000
ROA not before: Wed 26 Feb 2025 20:14:28 +0000
ROA not after: Thu 19 Feb 2026 20:14:28 +0000
asID: 984
IP address blocks: 45.201.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79729 (0x13771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 20:14:28 2025 GMT
Not After : Feb 19 20:14:28 2026 GMT
Subject: CN=67bf7628-4938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a6:1d:84:35:18:a0:c8:db:f6:ba:30:b2:56:
2a:5b:26:9c:79:6d:f0:d7:ab:42:20:bd:a6:95:0f:
b2:d4:56:44:92:54:6b:b7:14:fb:be:02:61:d4:82:
8b:ed:a2:21:a3:ac:f7:b3:2b:51:6f:89:73:34:af:
59:a8:c8:46:d1:59:15:12:ed:61:a6:2c:0d:94:94:
8d:40:33:35:e1:37:58:c4:bd:c1:b6:f9:67:f8:df:
4f:a4:a8:15:0e:a5:43:3c:66:c7:bc:3a:12:0b:47:
77:31:7a:31:ff:93:bf:6e:e5:be:6e:67:cc:ea:fa:
0e:89:67:3b:4e:89:63:19:3b:53:dc:3e:32:8e:f5:
1b:02:e4:9d:07:9e:8a:98:5c:dc:7c:ef:b6:a0:5e:
01:3d:12:94:cc:2f:79:04:33:2c:d1:ac:cd:a4:c2:
07:ea:18:80:2b:5b:80:f4:3f:04:89:ad:2f:27:d2:
c4:d9:63:1c:d4:cd:db:12:39:ea:b5:57:2c:f7:d8:
5c:82:3b:ae:74:7e:1d:36:d9:20:7f:b5:b8:90:65:
c0:08:f2:ae:6d:b6:12:17:90:a8:9a:76:78:19:4d:
31:c9:1b:97:70:94:6c:9f:f7:61:23:01:fe:7f:7f:
a2:43:be:dd:a0:50:8f:7c:1f:13:31:78:75:35:01:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:9A:2C:E9:D8:CE:6B:7D:00:00:F3:57:E1:63:86:5E:6B:00:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A235588F47E11EFA94CC077762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.114.0/24
Signature Algorithm: sha256WithRSAEncryption
61:82:4d:db:e5:71:99:a6:ce:62:bb:b5:65:de:73:f6:a7:15:
75:e4:cf:8f:b6:25:fd:79:12:81:5b:3c:fd:4b:a2:4f:fb:8a:
32:b4:22:1f:8b:68:1f:82:1e:2a:74:4b:43:8b:78:32:1d:68:
dd:82:a2:78:f4:82:cf:4b:07:75:7d:2c:5f:21:da:73:de:9c:
29:e2:d3:0e:67:61:6e:5b:fb:29:1d:80:26:ce:41:58:d4:84:
4d:9f:43:a2:45:5e:d6:3c:1c:83:be:b8:cd:66:39:c4:64:d8:
d8:c7:b2:e1:6b:1a:16:a0:ba:6d:0d:91:54:cd:a9:1d:d5:0f:
21:be:bb:e7:31:67:aa:87:2d:cb:7a:b9:61:4a:d6:d2:fe:c4:
d5:55:d2:40:59:9b:1f:f7:0e:9f:30:0c:49:07:36:67:fc:71:
52:bd:75:ad:74:bb:7f:4b:60:0b:b9:18:6c:63:1c:00:bf:63:
35:60:0c:b1:3a:00:8d:9d:a3:3b:7c:cc:27:d8:2b:dc:b4:0c:
d5:a4:9a:d9:75:b3:73:75:5a:35:4c:d0:a7:c2:c0:c8:e3:81:
01:1a:ca:24:9a:4c:a0:2b:bc:df:05:aa:75:a2:1b:0c:d3:eb:
34:eb:87:89:a2:ea:38:17:f3:3c:73:1a:68:d0:42:c7:55:df:
4d:a8:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:56 2025 by rpki-client