Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649E71B000C011F08E2E7B47762E951A.roa
File: 649E71B000C011F08E2E7B47762E951A.roa (raw, json)
Hash identifier: b3+/SQaRhFvXbY3eZp/jUYHpJvee7U8ZIgW4whKoKzg=
Subject key identifier: D9:B6:E3:62:E6:AD:4C:D2:F0:BE:E0:99:CF:E5:E2:C3:7D:F0:C9:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649E71B000C011F08E2E7B47762E951A.roa
Signing time: Fri 14 Mar 2025 10:37:57 +0000
ROA not before: Fri 14 Mar 2025 10:37:53 +0000
ROA not after: Tue 22 Apr 2025 10:37:53 +0000
asID: 395886
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83436 (0x145ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 10:37:53 2025 GMT
Not After : Apr 22 10:37:53 2025 GMT
Subject: CN=67d40705-71bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5e:15:1e:04:1e:b2:6d:51:a0:b3:65:eb:a2:
97:47:d4:44:55:e5:55:26:4b:ad:cd:d8:b6:76:18:
ee:b0:c7:18:6b:e5:60:ad:07:6b:79:dd:dc:22:d8:
e1:ed:66:2e:ff:0a:09:5d:af:6a:c7:12:8e:02:59:
76:fb:cd:aa:34:99:c1:44:ae:0c:32:ea:d8:d7:e2:
cb:cf:76:a7:ca:2a:ac:4a:59:13:41:d5:36:27:81:
10:95:78:34:73:61:44:4d:73:28:9b:ff:89:86:b1:
07:c9:2b:55:f2:61:73:76:fc:19:56:4b:66:b4:6f:
d3:7d:c1:ba:94:8f:85:c0:ba:f0:6e:14:c5:06:c5:
f1:09:80:03:d3:c7:36:ea:0f:70:9a:1d:90:61:5e:
8a:50:00:c8:99:de:c9:4b:77:07:77:0f:7c:6b:8e:
66:83:10:13:e7:7c:5d:1a:fb:d2:13:48:12:fe:a3:
ed:e2:91:1c:37:72:3f:97:2b:ec:4a:b7:a8:06:15:
87:5c:b0:82:fd:2c:10:2a:ed:1e:1d:e2:14:02:34:
ed:bd:43:25:26:a2:f1:68:5d:fb:16:1b:a3:1c:ed:
4b:b9:67:7e:a3:8a:14:5c:ee:06:b7:47:23:cf:8b:
79:a7:b2:89:2d:a0:bb:24:44:70:7f:8d:a8:a2:f9:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B6:E3:62:E6:AD:4C:D2:F0:BE:E0:99:CF:E5:E2:C3:7D:F0:C9:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649E71B000C011F08E2E7B47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
93:ee:c3:41:7f:00:ee:0c:c5:bc:b1:9e:bb:b9:46:db:12:d4:
04:e5:71:c9:7e:97:bb:e3:de:c0:6a:85:b6:b4:b8:55:67:c8:
a0:07:02:b4:04:ea:ab:54:d1:1e:9e:cc:81:f6:62:cf:68:e7:
8f:89:f8:f5:7f:b1:01:16:d7:f2:d3:42:fc:be:20:5d:f0:08:
8a:eb:48:d1:7e:8e:d6:27:ed:a6:5d:bb:f9:4b:0e:d0:1f:79:
c0:50:89:aa:85:ab:14:55:df:2d:9c:d6:3e:53:4a:c0:65:ba:
fa:12:76:fa:d2:a0:b0:b6:a0:1b:30:8f:e0:0b:fe:ea:27:3d:
c6:75:9c:7a:82:9c:1b:8f:13:80:aa:a8:09:15:ab:6a:aa:48:
e0:cb:7b:f2:13:6a:84:a6:2f:60:5d:f1:87:9c:de:d6:3f:a2:
5e:92:7a:bc:a1:ac:35:5f:73:41:39:9e:5b:44:f3:03:b7:f0:
fc:1b:ec:30:63:6f:c5:21:97:ff:4f:2f:f0:3e:4b:5e:68:b8:
5d:4f:27:3c:91:6b:a6:13:b3:59:a2:27:79:10:4e:b8:e5:47:
1b:2c:e9:5b:45:b0:9a:bd:76:db:d5:42:1e:59:d3:1f:f9:35:
90:7d:c1:0d:7b:ff:e8:04:3c:fa:6b:33:9d:2a:6f:fa:dd:d5:
2f:2a:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:06 2025 by rpki-client