Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5826AD9EE55411EFAE2110A7762E951A.roa
File: 5826AD9EE55411EFAE2110A7762E951A.roa (raw, json)
Hash identifier: nK50mjQ/bx/ZQ6hX8XZh6vsiU4KStru/JBypFz2ku4s=
Subject key identifier: 78:06:5C:20:56:6E:47:F3:6D:BD:64:64:B7:ED:15:56:46:5B:A6:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5826AD9EE55411EFAE2110A7762E951A.roa
Signing time: Fri 07 Feb 2025 13:06:29 +0000
ROA not before: Fri 07 Feb 2025 13:06:25 +0000
ROA not after: Fri 21 Jan 2028 13:06:25 +0000
asID: 17561
IP address blocks: 45.192.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73118 (0x11d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 13:06:25 2025 GMT
Not After : Jan 21 13:06:25 2028 GMT
Subject: CN=67a60555-8aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:78:cc:41:61:68:2a:08:05:93:f1:a5:8e:
61:fe:eb:4a:e2:8c:62:2d:cf:6f:13:7e:c0:67:b2:
17:ce:6e:74:f4:15:cc:87:1c:9c:48:1a:8f:1f:1f:
6c:6f:45:90:b8:eb:a0:36:41:9c:f7:72:a3:ce:26:
61:26:ec:9a:f3:41:28:ce:b3:c8:6b:98:60:65:f2:
b3:4d:14:ff:d1:3a:be:91:6f:b1:e4:f2:04:f5:86:
84:d1:e5:5a:f6:95:b4:3e:cb:e7:cb:a3:c4:f0:3d:
2c:38:30:a2:4e:a8:64:23:03:c7:93:46:91:22:ab:
0c:94:1c:54:18:a2:de:54:32:8d:75:ca:79:f5:c1:
f0:77:d7:55:18:98:5b:9e:ef:2f:f9:37:ab:f7:ec:
4d:6e:5e:c0:b1:05:bf:fa:a4:a1:fa:a1:b2:a8:f8:
8e:61:c1:3d:04:c0:a5:81:26:0a:30:9f:6f:d3:1e:
d3:0e:de:04:c9:ee:dd:c7:08:98:08:1f:bf:5a:cd:
a7:22:47:b5:de:96:3c:c8:fd:89:06:89:18:9c:43:
4a:b6:21:60:a8:30:99:7b:33:a6:dd:a0:a2:33:ed:
fb:de:4b:13:4e:f1:e8:29:a3:c8:05:5a:51:23:2a:
21:35:84:84:a4:49:c5:d1:70:e7:3e:e0:bc:04:65:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:06:5C:20:56:6E:47:F3:6D:BD:64:64:B7:ED:15:56:46:5B:A6:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5826AD9EE55411EFAE2110A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.29.0/24
Signature Algorithm: sha256WithRSAEncryption
14:63:0e:25:5c:be:8c:4a:2d:b1:44:26:5a:ad:eb:6d:3b:6c:
db:e6:ee:d3:d6:6e:a9:56:70:a8:99:4f:ac:bc:23:79:6f:3f:
ad:0a:1b:f9:5d:55:d2:c7:52:d4:76:bd:ec:d0:5e:b5:4a:5f:
d2:1a:9b:54:49:a0:b6:59:53:bc:cd:a5:87:1f:e0:ba:b1:f0:
08:9f:3a:cc:6f:93:5f:16:90:72:71:1c:c1:45:ba:95:1f:c3:
a5:cf:5e:e9:c0:af:48:a7:7d:bb:2a:60:d2:47:ad:a4:67:3a:
ee:a1:98:72:8c:60:cc:aa:41:e8:60:7c:1e:2f:58:00:6b:d3:
d1:53:c4:33:3f:94:1d:6e:54:fc:f3:2a:d6:4f:ec:03:d2:b5:
3e:bf:a7:87:86:4f:09:0f:63:e1:0f:16:ba:5c:03:8e:24:b0:
36:ae:6b:a5:66:2f:53:ac:79:89:2f:3e:f7:f6:40:b1:a2:b6:
7d:d4:ad:48:4d:19:76:ac:e6:fe:0e:64:97:4c:92:8d:de:7a:
2f:70:a1:3b:12:a6:c3:2a:12:20:1a:2a:ef:88:d5:a7:ac:69:
11:50:c4:82:f8:5d:e4:ca:8b:bb:76:e2:25:28:02:67:e2:a0:
79:bc:8f:0a:56:84:e6:94:ef:18:12:1a:3a:8f:cb:88:96:16:
bd:ab:a1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:01 2025 by rpki-client