Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C9D6100106F11F090084F8D762E951A.roa
File: 6C9D6100106F11F090084F8D762E951A.roa (raw, json)
Hash identifier: /pmw3oqg0rhsSsPEfCA4CTe/rgydvf/TFejwVx3PgvQ=
Subject key identifier: 61:74:2A:CE:74:A0:F3:34:83:07:B3:C7:64:B3:3B:4F:07:67:09:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C9D6100106F11F090084F8D762E951A.roa
Signing time: Thu 03 Apr 2025 09:38:40 +0000
ROA not before: Thu 03 Apr 2025 09:38:35 +0000
ROA not after: Sat 12 Apr 2025 09:38:35 +0000
asID: 135097
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84386 (0x149a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 09:38:35 2025 GMT
Not After : Apr 12 09:38:35 2025 GMT
Subject: CN=67ee5720-459a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:5d:24:33:07:ea:87:f3:71:f4:34:3a:c2:
de:50:0c:b0:77:53:4f:03:fa:73:d1:57:9c:3e:d1:
11:ba:37:bf:0b:27:e7:54:8c:eb:c6:2a:ff:72:1a:
77:39:95:e0:0e:f1:56:e5:36:ba:5c:3e:e9:57:b1:
89:24:aa:41:02:49:31:7c:a2:6d:dd:02:b6:04:f7:
18:33:89:eb:c9:3d:77:f9:ed:17:01:a3:c9:6a:7f:
10:e6:a2:c2:c9:90:ea:a2:01:3c:1b:95:c6:04:28:
53:2b:99:5b:19:f4:57:90:5f:e0:18:f6:47:0e:fd:
cf:6c:7b:40:4f:af:f8:28:bb:c9:4b:3d:48:ed:b0:
2e:cb:5b:b9:71:c9:0b:bd:75:15:3a:e8:7e:4e:60:
1b:7f:22:88:52:f1:d6:41:cd:f4:ac:2e:6a:b3:70:
94:b1:4b:db:f3:41:fa:76:bf:e0:1b:7d:6a:51:8a:
16:22:79:46:5d:e8:5b:01:4e:ef:3a:d1:d9:c0:59:
ea:ad:0a:07:90:9f:1d:3a:7e:4d:61:0d:8c:72:3d:
83:46:68:c6:66:b7:96:25:49:46:4f:29:37:32:85:
bf:49:35:c4:73:76:6c:7e:49:fe:c9:12:12:10:cc:
4a:a8:2b:8d:d2:01:6f:69:89:65:6e:ef:24:35:7a:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:74:2A:CE:74:A0:F3:34:83:07:B3:C7:64:B3:3B:4F:07:67:09:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C9D6100106F11F090084F8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0a:79:9b:84:80:f8:37:a7:b7:b6:03:26:d4:21:4f:08:37:20:
91:de:64:7a:3c:3f:ec:65:64:7c:6e:bd:0a:70:51:76:23:08:
de:30:58:7c:06:5b:6b:76:df:19:54:83:5d:b3:3a:52:83:02:
58:1a:b3:b1:8f:92:4c:bf:19:d8:dd:b1:03:f5:9a:61:0f:c5:
5b:53:82:15:2a:00:ec:a6:c0:55:22:89:f6:69:00:c2:07:fa:
af:e9:8a:07:66:09:ad:39:40:a8:e7:eb:5b:26:2c:bc:ba:1e:
bb:21:6f:5b:0f:31:cd:c1:8a:c1:e6:76:3b:82:ed:f6:8d:24:
32:62:6c:49:6b:b0:bf:fa:a4:1a:f2:40:a5:f4:56:d7:52:fb:
d8:10:34:7c:6a:88:76:6a:85:47:1d:82:c8:03:a3:1f:f3:fb:
c9:82:71:88:7f:c9:50:f3:cc:c0:5a:47:28:af:63:74:7d:f5:
df:1d:db:ac:a8:04:ff:bb:48:ef:cd:79:87:ce:ab:8e:fc:cd:
b8:cd:76:7c:e3:c7:f4:69:49:88:ac:9b:63:69:ab:af:0a:51:
81:63:29:e1:2c:df:79:57:43:f3:fd:61:b2:ae:56:df:32:88:
64:90:0f:2a:00:98:9b:73:c0:05:2c:69:b6:c9:f3:5e:6f:28:
65:96:d7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:07 2025 by rpki-client