Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B001826F8E111EF8FC70173762E951A.roa
File: 4B001826F8E111EF8FC70173762E951A.roa (raw, json)
Hash identifier: n+O4tCrbogGsg4tc0WFwCGKNdmaoBHt5+IPPIdqgGnY=
Subject key identifier: 4B:2A:00:80:6B:47:EB:25:01:03:19:8D:04:0E:A8:81:B1:C3:2D:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B001826F8E111EF8FC70173762E951A.roa
Signing time: Tue 04 Mar 2025 10:13:18 +0000
ROA not before: Tue 04 Mar 2025 10:13:14 +0000
ROA not after: Sun 06 Apr 2025 10:13:14 +0000
asID: 271907
IP address blocks: 45.195.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 10:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82686 (0x142fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 10:13:14 2025 GMT
Not After : Apr 6 10:13:14 2025 GMT
Subject: CN=67c6d23e-99e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:00:29:41:47:77:d2:ce:db:73:5c:97:45:
4b:bb:b7:01:79:16:86:fd:b0:b6:ec:d6:ed:31:35:
ae:5b:7e:cb:10:f8:d3:b7:18:ca:06:ef:db:b4:2d:
93:6e:85:18:2d:20:4e:df:e6:5e:31:4b:93:80:96:
b9:ba:97:cb:a3:f7:9a:4f:83:a4:3d:1d:d9:e2:d3:
bb:d6:69:a9:97:a8:b6:00:65:a6:3c:a1:8b:41:6f:
cf:d9:c9:df:f6:a5:37:c0:7c:e8:c0:26:a5:7f:f4:
54:1b:ba:9b:ad:95:3d:7a:0f:6e:3b:5e:1b:f1:fa:
c3:b4:ed:d9:ed:9c:d9:2d:53:6f:5c:6c:dd:dd:85:
46:ac:83:f3:a7:3d:a2:34:c9:cb:38:b4:1a:74:30:
13:3a:ad:14:48:73:88:8b:4a:41:f5:2e:51:44:45:
91:31:be:4e:8b:f9:17:90:e0:c7:d3:72:34:86:72:
1d:3e:9b:59:de:5e:2e:d0:b8:69:53:1d:ff:37:ab:
17:7e:9a:1c:00:49:cb:b9:3c:76:9b:70:29:46:f0:
66:57:aa:10:cd:72:31:f7:5d:a4:b2:38:ba:44:ea:
a7:ff:6f:cd:93:f1:a0:0a:19:aa:f4:97:99:dd:b3:
d8:01:f4:00:a2:b4:39:41:a7:bf:5f:2a:4a:ed:fd:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2A:00:80:6B:47:EB:25:01:03:19:8D:04:0E:A8:81:B1:C3:2D:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B001826F8E111EF8FC70173762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.228.0/22
Signature Algorithm: sha256WithRSAEncryption
40:b9:d8:70:14:9b:fd:d9:1d:90:ec:e7:f3:7a:c7:0f:01:5a:
2f:dd:d2:72:37:f1:a7:42:66:e6:11:e6:24:e4:2e:7c:46:2e:
ad:c8:b3:6b:e0:1c:ea:a0:f6:e2:a7:b5:b3:69:78:4c:db:11:
84:ed:62:74:e9:2c:ae:e5:c5:58:3f:28:31:a7:88:53:c0:08:
46:4a:f2:51:6c:99:8d:c2:98:50:a1:9b:9c:d0:a4:78:c6:23:
d1:f2:2b:0d:ef:6d:c6:88:4e:73:81:dd:75:ed:92:d9:d1:20:
19:55:cd:de:75:2c:90:57:5f:b4:07:71:b2:de:0c:bf:57:2e:
88:16:23:21:ad:c1:9b:b8:62:eb:19:fa:e9:ad:22:5a:95:90:
b6:ad:50:53:31:84:fb:ec:bb:79:9f:1b:da:0a:6c:47:36:fe:
89:33:57:9c:63:ac:77:a3:00:09:46:09:77:64:a8:f7:62:e6:
ec:b3:03:b4:fc:bd:58:62:86:c7:52:41:f1:90:77:87:68:9b:
10:4c:21:76:d3:36:40:aa:e2:a8:d0:d7:8b:71:a6:68:b5:c2:
b6:f1:01:c9:51:b6:4e:9a:ec:a5:76:84:c9:ce:57:0a:07:17:
6d:9b:a1:ee:91:fe:00:59:99:65:e0:5d:69:9b:06:6d:09:94:
57:f8:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:40 2025 by rpki-client