Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EB3E3B4E55611EFBD2EA0B2762E951A.roa
File: 5EB3E3B4E55611EFBD2EA0B2762E951A.roa (raw, json)
Hash identifier: Sm5GkwAcjjQkoF+yhRSAjgnYkWdKIKC50SjphUGXGP4=
Subject key identifier: 22:99:C3:B0:A9:08:57:8D:CD:86:E1:67:D2:DD:00:6B:FA:E3:CD:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DB3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EB3E3B4E55611EFBD2EA0B2762E951A.roa
Signing time: Fri 07 Feb 2025 13:20:59 +0000
ROA not before: Fri 07 Feb 2025 13:20:55 +0000
ROA not after: Wed 21 Jan 2026 13:20:55 +0000
asID: 984
IP address blocks: 45.195.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73139 (0x11db3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 13:20:55 2025 GMT
Not After : Jan 21 13:20:55 2026 GMT
Subject: CN=67a608bb-b41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:d1:c7:35:a2:0c:18:fc:dd:b8:6e:92:45:
df:38:ea:1e:c2:4b:c3:76:0d:89:cb:65:38:84:b5:
75:ef:1f:10:ea:53:5a:19:cb:7b:37:67:79:8a:c2:
e1:3d:94:c8:82:14:63:ce:f9:05:60:1c:ec:2a:38:
0e:f9:0e:43:9c:71:33:d3:4f:f9:88:5f:32:c2:e2:
8e:f6:ba:6a:17:01:de:c2:3d:74:5b:17:ae:a7:73:
b3:02:c3:74:6b:c5:d6:57:13:fc:c9:bf:cd:22:e1:
b1:94:b6:99:f8:a8:84:3d:db:df:28:78:82:6f:5a:
83:2f:da:ed:92:5a:53:e1:98:82:7f:30:ce:d7:b9:
98:b7:0c:6e:e6:a7:55:bd:36:83:9b:c0:f9:08:07:
8d:7f:29:26:ed:9e:8a:5b:34:5b:30:94:9c:be:60:
f4:f7:8e:74:9c:63:2b:2a:ef:37:60:fd:0a:0c:dc:
66:ec:b1:29:b3:4c:90:b0:3a:5b:7d:c7:10:a9:3e:
da:65:86:68:68:c0:fb:fc:67:09:42:68:67:27:ec:
ac:cc:00:92:e6:49:f9:01:5b:36:a4:73:51:c6:91:
83:e9:ad:e6:57:5b:83:23:44:55:ca:17:b5:c5:3e:
91:b7:3b:46:0c:dd:63:93:b9:e3:71:57:e0:c3:fb:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:99:C3:B0:A9:08:57:8D:CD:86:E1:67:D2:DD:00:6B:FA:E3:CD:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EB3E3B4E55611EFBD2EA0B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.201.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2b:c0:8c:49:14:a2:24:d3:9f:43:fe:70:34:f3:0f:d9:1e:
e9:e3:1e:f5:8b:42:72:49:bd:3a:1e:82:be:ff:1e:2b:67:21:
23:5a:39:ae:b3:43:52:2c:10:0d:11:af:2c:33:eb:59:99:7d:
85:77:c8:6a:02:8e:43:a6:48:81:7c:9b:67:a7:43:7e:8e:a0:
e9:be:4f:17:3b:c0:45:4f:aa:9b:7e:bf:0a:3c:22:f5:d3:a3:
5e:11:e3:2e:39:25:4d:f7:1f:47:71:16:cd:56:18:c0:03:01:
3b:53:c8:6d:c1:de:bb:88:eb:c7:45:81:99:5f:85:c4:63:5c:
ee:9f:68:ef:ac:f4:89:c4:37:b3:4a:f3:02:de:b1:99:70:8e:
bf:31:fd:5a:23:8f:d4:7d:da:a8:de:b8:d6:09:86:f1:f0:af:
47:b7:01:9c:85:dc:a3:6c:39:8b:2b:3c:f2:37:8c:64:44:e5:
8b:15:ef:80:5f:91:9a:2b:56:3f:fe:eb:cc:9c:cb:64:6d:99:
a8:a7:5a:83:46:e8:9d:e0:bf:f2:8f:55:ff:e6:f0:8b:04:25:
bf:d8:5d:c3:be:70:b4:85:54:8d:fe:be:68:47:15:88:7c:d4:
52:e1:8d:e8:04:5d:ef:1f:71:22:5f:88:4c:e7:b1:84:27:58:
24:08:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:07 2025 by rpki-client