Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BF8D03AF46B11EFA8655074762E951A.roa
File: 4BF8D03AF46B11EFA8655074762E951A.roa (raw, json)
Hash identifier: ueQRKirV+0FirTYCQkdOa90AIhCGfbzbjXmWJey7Z7Y=
Subject key identifier: E7:3A:85:C2:F0:83:97:03:A0:85:0D:75:5F:15:6C:DE:E2:F8:E7:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013603
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BF8D03AF46B11EFA8655074762E951A.roa
Signing time: Wed 26 Feb 2025 17:58:35 +0000
ROA not before: Wed 26 Feb 2025 17:58:31 +0000
ROA not after: Thu 19 Feb 2026 17:58:31 +0000
asID: 984
IP address blocks: 45.201.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79363 (0x13603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:58:31 2025 GMT
Not After : Feb 19 17:58:31 2026 GMT
Subject: CN=67bf564a-f14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:5d:24:96:37:86:91:43:77:d4:05:e3:49:
f4:a7:df:ae:32:ba:e5:ef:21:a5:f6:c8:f6:4d:10:
aa:ad:a9:4c:88:8b:8c:74:1e:90:49:f5:9c:ad:ad:
e3:9d:2c:72:6e:2b:d9:26:b1:a9:0a:e0:26:ac:aa:
23:4c:4a:26:b2:98:9f:68:0e:3e:63:11:b3:b6:57:
22:38:47:7e:86:01:eb:1b:ed:fc:a7:0a:d4:13:4a:
1c:21:b6:df:8a:57:12:3c:f2:f9:38:f2:56:1a:3d:
98:09:a1:00:ec:e3:29:bb:81:81:3d:0e:e8:a1:3a:
f1:90:0b:3b:4c:f0:cd:9e:63:d3:2a:a5:26:70:61:
7a:cd:b2:37:de:42:4c:b9:50:c6:6a:15:6d:ac:0f:
75:d9:45:5c:24:34:df:0c:d9:e1:88:18:b4:6d:f6:
de:71:d6:7c:9b:b2:fe:b6:3f:89:d0:46:6c:1e:a0:
b8:fd:a8:db:32:d4:3f:09:e5:67:41:56:98:dc:e8:
43:82:59:bc:da:82:b1:bf:16:83:45:4d:78:26:dc:
a7:27:b3:f1:1d:be:26:c8:be:ae:d6:8a:f1:21:e1:
62:a9:5a:35:a1:b7:d1:49:e3:3d:6a:04:20:5c:55:
53:db:75:38:d5:0b:99:e6:3b:c8:9f:57:bc:38:7b:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3A:85:C2:F0:83:97:03:A0:85:0D:75:5F:15:6C:DE:E2:F8:E7:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BF8D03AF46B11EFA8655074762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.57.0/24
Signature Algorithm: sha256WithRSAEncryption
92:99:b7:2f:9e:b9:69:f2:11:90:51:1b:da:45:1c:e8:78:1c:
7c:fc:e2:51:9b:09:15:55:5e:95:1b:4f:31:00:47:7c:52:d6:
a0:b6:41:27:db:87:a8:ef:42:39:54:c7:11:5d:56:bc:c4:cc:
93:f1:91:3a:c3:43:b0:45:c9:8d:2d:64:1b:40:69:4b:43:58:
81:2d:01:65:66:cd:2e:59:a5:dd:23:b7:cc:c6:7a:c7:24:29:
c0:13:39:36:29:ef:49:ea:d6:e4:87:4f:3e:78:d6:8d:47:65:
69:ea:7b:f8:6c:f5:fe:7d:a0:d9:bc:de:6b:33:5e:a3:f2:b4:
ac:ea:db:24:b1:5a:f8:28:16:04:db:8f:8c:78:c8:1a:32:31:
dd:f8:6b:ca:af:3f:25:2a:62:4d:15:07:eb:2b:27:67:e2:13:
4f:5c:cf:36:94:2c:08:c0:48:4d:c7:13:d8:a2:56:ed:6d:0c:
d6:cf:8e:f5:2a:2a:1f:f1:2b:a7:52:c3:17:bf:9f:9c:63:0e:
b3:2a:2b:91:04:53:e9:0f:89:43:c0:cf:fa:2e:db:84:b7:72:
f1:ce:c6:cb:86:ec:29:40:39:47:ba:19:d5:8e:c5:7a:0a:ec:
b6:74:88:1d:f2:37:b8:7f:b4:ff:d5:c8:0e:ac:ec:2b:14:d0:
d8:75:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:11 2025 by rpki-client