Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6849A7E6F68211EFBCF83658762E951A.roa
File: 6849A7E6F68211EFBCF83658762E951A.roa (raw, json)
Hash identifier: Lpq9MI+02yVgMwqavVIRe8gCjooAeFRmkbPsv0MKucg=
Subject key identifier: 5A:DC:A1:F1:F8:E9:17:CB:F6:C0:D7:9D:B8:86:10:E6:F2:89:70:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014002
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6849A7E6F68211EFBCF83658762E951A.roa
Signing time: Sat 01 Mar 2025 09:49:03 +0000
ROA not before: Sat 01 Mar 2025 09:48:59 +0000
ROA not after: Sat 05 Apr 2025 09:48:59 +0000
asID: 14315
IP address blocks: 45.197.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 09:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81922 (0x14002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 09:48:59 2025 GMT
Not After : Apr 5 09:48:59 2025 GMT
Subject: CN=67c2d80f-bc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:1b:95:30:00:f0:ac:df:b8:9b:73:85:23:
bc:7b:d8:0a:4a:49:b5:30:d7:21:a7:70:00:9c:80:
f0:c3:6a:64:a7:7a:f9:f5:7e:23:5e:1d:c4:62:2f:
dc:cd:ff:bc:0f:dc:f3:27:0c:6a:c4:55:79:c2:07:
40:f7:23:1a:35:a3:96:ad:a6:b2:32:d5:35:1b:c0:
8b:ec:f5:f0:ec:94:6c:f5:90:07:17:17:17:a0:fc:
02:0f:31:3b:eb:73:ba:2c:09:7a:79:ea:7e:3b:18:
0a:c5:86:af:17:13:61:5d:83:87:1f:3c:6c:bc:63:
36:0e:ff:19:7f:fe:fe:e8:01:1e:ba:ae:65:4c:a7:
b8:31:b3:1b:36:7d:0f:52:92:d7:ec:ab:2a:f3:ba:
53:be:6a:7c:45:7b:65:91:03:8f:36:4e:99:e5:76:
3b:c1:0d:e3:9e:39:b6:24:5a:7c:5d:52:cf:b3:d6:
66:d6:8a:c6:81:24:b3:5e:0f:ba:28:46:59:b2:87:
de:f4:b0:4a:0c:45:a8:f9:81:68:54:e3:42:f0:5b:
ab:24:b7:a8:33:c1:63:68:66:e9:ad:5d:b1:bd:64:
e4:7b:4c:73:46:0e:91:29:e4:6c:1f:65:47:5d:6a:
33:f0:67:d7:80:bd:c1:92:fb:d5:2e:10:c6:86:14:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DC:A1:F1:F8:E9:17:CB:F6:C0:D7:9D:B8:86:10:E6:F2:89:70:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6849A7E6F68211EFBCF83658762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.139.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c0:9b:5d:aa:ba:96:1f:1a:21:d0:bb:91:40:c0:7b:89:40:
10:94:c8:05:8d:61:9e:6b:df:72:ea:1c:83:24:63:e5:17:89:
b5:16:ac:cf:83:45:8f:64:21:b7:b2:cd:70:69:a4:3f:46:64:
89:df:fc:9a:b6:4d:bd:88:51:cd:45:f0:3a:85:72:a7:09:f3:
26:6e:cd:73:95:33:86:41:d7:94:85:b1:6a:c5:23:0c:5f:d0:
a3:27:ab:c5:e8:41:d8:93:e2:bd:5d:c8:ea:95:5b:5f:1a:cc:
a9:70:06:27:c3:dc:c0:b5:5d:0b:02:86:eb:53:95:ae:5f:f7:
df:59:fc:d8:4e:b5:00:df:59:a8:d2:47:f8:20:60:f4:33:98:
1e:e9:39:b0:a2:46:90:f4:0c:fd:3f:05:d0:a1:83:f5:ce:f4:
43:73:8a:1a:b9:a6:45:b7:97:ee:44:d9:db:b0:30:3b:0d:11:
d0:3f:62:98:6b:62:13:be:77:0d:d0:98:5a:ad:0f:43:6d:a0:
1f:ee:c8:17:7c:0f:3a:f6:cd:c5:c0:32:68:ff:04:1a:b0:40:
40:f9:ae:05:37:f4:08:47:e2:5e:f0:ed:4c:ed:d7:ff:d8:a5:
d0:c8:1c:d6:3e:ef:d6:52:03:b9:11:f1:64:6e:b6:83:ed:aa:
c5:58:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:39 2025 by rpki-client