Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73E1030CF41F11EFAEB51C60762E951A.roa
File: 73E1030CF41F11EFAEB51C60762E951A.roa (raw, json)
Hash identifier: 8e+DukosHzLTx4STCsPHHO6pMbc4YPsufFZAS4bo2k8=
Subject key identifier: 41:F1:E4:A0:36:8C:FF:DD:F0:05:42:19:BB:03:B9:69:11:28:6F:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013034
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73E1030CF41F11EFAEB51C60762E951A.roa
Signing time: Wed 26 Feb 2025 08:55:40 +0000
ROA not before: Wed 26 Feb 2025 08:55:36 +0000
ROA not after: Sat 19 Feb 2028 08:55:36 +0000
asID: 17561
IP address blocks: 45.202.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77876 (0x13034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 08:55:36 2025 GMT
Not After : Feb 19 08:55:36 2028 GMT
Subject: CN=67bed70c-4cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:9a:ed:e2:98:10:5e:45:db:85:8c:43:bd:
59:64:46:b9:c9:a6:f7:d3:60:ef:02:4b:bc:a6:28:
1d:9f:f1:ce:19:5f:32:e7:68:f8:8b:cb:de:6f:e8:
c3:f0:5b:d5:80:bd:22:86:7c:9b:fa:dd:4b:e7:8d:
7e:a2:81:96:db:94:34:f6:14:fb:44:27:db:06:c6:
f9:df:97:04:60:5f:0b:47:3b:40:25:17:b4:15:38:
f5:bf:a2:6d:74:92:97:93:cd:ce:d4:0c:77:27:2d:
56:4a:65:66:93:69:ab:93:51:c7:ef:92:d6:65:9e:
d4:5f:72:34:7e:a5:dc:a5:e0:0d:30:cf:ca:64:8e:
e6:53:08:7a:4f:55:6b:3c:f6:0a:86:b3:83:f5:7b:
ea:4c:7c:d1:1d:45:5e:e8:f0:2b:f4:99:3b:62:ea:
5b:5f:74:82:54:31:21:b0:ee:ff:95:c5:79:4b:3e:
98:c4:3b:7a:7b:83:50:22:f3:45:89:b0:2c:bd:a8:
e8:65:70:c0:f9:41:0d:dc:bc:6d:57:3d:ca:ed:3a:
83:2e:24:ce:58:db:a9:a2:03:f0:15:46:29:c0:d3:
21:25:f7:76:39:78:be:1b:e5:8d:79:60:05:22:c3:
74:99:46:50:1d:a6:98:79:71:75:21:fc:8d:a5:1d:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F1:E4:A0:36:8C:FF:DD:F0:05:42:19:BB:03:B9:69:11:28:6F:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73E1030CF41F11EFAEB51C60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.198.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c4:52:e2:b0:20:1e:a1:14:d9:0a:87:2d:3a:34:c8:ba:02:
fa:8a:8c:16:c9:01:68:a5:8b:e4:60:0e:82:85:e3:d9:7a:33:
77:40:1a:0f:a7:29:43:05:7a:6b:7c:fb:43:42:f8:81:af:96:
3c:3c:8d:46:91:05:5f:be:bf:ed:12:2e:15:db:84:53:bd:03:
ac:cb:e8:12:68:96:89:52:a7:1c:d8:27:52:9e:79:8e:a5:0e:
1a:aa:71:68:c6:7b:fb:65:7f:e9:98:63:b0:2e:30:80:7e:2f:
fd:02:90:68:64:67:d8:7d:93:b8:d1:e4:32:7e:cd:15:61:80:
b0:09:bd:9e:ee:0d:46:e2:4c:22:c3:3b:9b:d4:f0:94:1e:53:
83:63:ac:a2:a4:3d:48:d0:93:fa:1b:54:24:3e:5a:04:72:68:
bd:76:93:3a:97:e2:d0:45:f4:d4:f6:c0:92:4a:fc:f8:fe:e9:
49:63:57:ce:62:9e:6c:c2:02:8c:14:af:7b:fa:9b:8c:eb:3a:
24:19:88:55:31:0e:36:29:5d:f6:3f:35:fb:26:92:d3:78:55:
cd:da:d5:e8:e2:51:33:f5:a5:04:4f:af:e4:d4:72:a1:72:22:
de:34:cc:1b:2e:eb:26:c5:76:2f:a1:fe:50:f8:24:71:bb:99:
89:6e:24:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:04 2025 by rpki-client