Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A431AFEF46711EFABEB9E58762E951A.roa
File: 6A431AFEF46711EFABEB9E58762E951A.roa (raw, json)
Hash identifier: UGTsV9YfoZLrRu+uegM6ZslF1N4BMht29WS412kFSN0=
Subject key identifier: 9D:90:D5:B1:8B:91:AC:9E:92:4A:47:0C:16:DE:E7:F9:B6:18:C9:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A431AFEF46711EFABEB9E58762E951A.roa
Signing time: Wed 26 Feb 2025 17:30:47 +0000
ROA not before: Wed 26 Feb 2025 17:30:44 +0000
ROA not after: Thu 19 Feb 2026 17:30:44 +0000
asID: 984
IP address blocks: 45.201.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79266 (0x135a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:30:44 2025 GMT
Not After : Feb 19 17:30:44 2026 GMT
Subject: CN=67bf4fc7-9043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:70:67:ee:6b:7c:61:e1:e5:6f:7b:a0:ba:
9b:ee:72:71:96:2f:cb:d2:2f:18:83:bd:92:b6:70:
57:b2:81:fa:f9:8f:11:a8:8f:39:0c:45:16:8f:b9:
a1:80:bb:d9:e1:cb:f1:7d:23:3b:6b:1e:ef:8c:2a:
22:6e:ec:d2:a0:1d:1b:48:7f:1a:c6:6e:3d:df:54:
04:c5:92:84:51:f4:ac:68:24:21:b9:75:94:dc:87:
ff:0d:11:1d:2e:fa:ae:cb:9a:a4:85:4a:b4:e6:62:
92:83:e6:0b:e0:2c:e7:a4:26:91:41:d2:f2:12:4b:
62:6d:10:0c:3b:29:4c:ba:68:78:25:e8:cf:70:99:
ea:c7:de:e8:9d:37:bf:d0:7d:ad:9d:df:5e:89:6d:
76:07:d0:53:78:cc:4e:35:a0:9b:b9:74:26:36:72:
04:bd:82:8e:2f:f4:a1:d7:20:80:82:17:a8:48:50:
cd:eb:27:6f:4f:38:4f:c0:51:ea:a0:c4:e4:06:d1:
9c:10:73:60:89:84:b0:c4:9b:53:78:1f:8c:67:20:
de:2e:4b:a4:bd:f2:65:eb:f8:db:cf:7e:ec:bf:ed:
2c:48:af:35:31:15:cc:0c:ea:cd:4a:c7:1f:c1:b6:
e1:0a:57:56:d4:f7:dc:d0:39:5b:35:e3:19:be:25:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:90:D5:B1:8B:91:AC:9E:92:4A:47:0C:16:DE:E7:F9:B6:18:C9:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A431AFEF46711EFABEB9E58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5a:87:fa:3c:97:bf:9a:62:79:b1:1b:44:1e:e0:82:7a:9c:
68:eb:94:df:da:c4:cd:42:fa:b9:71:54:79:3b:ae:a5:ac:f1:
48:5d:45:4b:c0:d2:f5:97:cf:f1:46:7f:85:f1:38:45:4c:07:
ea:67:ac:fe:95:cf:44:77:b5:9b:8e:ab:01:42:24:8c:9a:3e:
f9:90:27:cb:2f:40:31:0b:59:b5:11:ec:95:c9:7b:a0:03:90:
9c:f4:23:98:f9:02:c8:fb:c6:4c:12:e4:18:ac:33:df:60:fc:
c2:e7:d2:66:16:09:ca:18:9a:61:72:4a:20:18:73:72:ff:dd:
23:85:c1:70:4c:c9:a5:ae:7f:fb:c3:40:82:21:24:35:32:f5:
04:1e:2a:5b:98:45:4a:e8:d6:e5:3a:37:b7:98:bb:01:07:bc:
a8:05:95:7d:9f:27:57:c4:f1:eb:37:f3:0f:f2:bf:cf:dc:71:
de:d7:ab:72:36:5d:53:bd:96:5e:d1:39:e3:19:78:f7:0c:e5:
4c:d0:18:2b:97:75:21:49:69:b6:da:06:ac:8c:af:b4:d1:63:
e5:a5:aa:37:e5:a2:9f:29:c9:1b:30:b1:91:cf:33:ee:eb:76:
7c:cf:08:78:e3:b6:5a:70:46:07:17:8e:dd:2c:1a:1a:7e:1e:
9c:aa:f8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:35 2025 by rpki-client