Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D123130F43D11EF9AACC8B1762E951A.roa
File: 7D123130F43D11EF9AACC8B1762E951A.roa (raw, json)
Hash identifier: tnhbkEYqorU6eQGSSCudmvO1/oNBsstt8LyPbkpAF48=
Subject key identifier: CB:4F:CC:7F:DE:32:05:33:4F:D3:BD:E5:AD:48:6A:F9:61:2E:7E:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01327D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D123130F43D11EF9AACC8B1762E951A.roa
Signing time: Wed 26 Feb 2025 12:30:40 +0000
ROA not before: Wed 26 Feb 2025 12:30:36 +0000
ROA not after: Sat 19 Feb 2028 12:30:36 +0000
asID: 17561
IP address blocks: 45.198.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78461 (0x1327d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:30:36 2025 GMT
Not After : Feb 19 12:30:36 2028 GMT
Subject: CN=67bf0970-fee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:d5:54:39:a9:35:f1:77:7e:18:65:0f:8a:
c4:90:8d:5a:51:1e:95:0f:2d:a5:9e:b6:64:1b:20:
77:51:7e:ee:17:4a:f2:2b:b4:ec:f2:46:ed:da:15:
ad:0f:08:89:bf:e4:5d:aa:92:58:6d:74:33:0f:63:
fd:cf:a8:4c:16:73:83:b7:e1:1b:6d:8c:1f:66:7c:
a7:6b:bc:67:63:f9:dd:92:35:aa:05:c7:5c:62:a8:
f5:3c:d1:1c:b1:43:c9:be:70:e4:31:c5:1e:1c:42:
4c:a0:01:ef:e9:9a:ca:84:e6:d8:51:45:fc:c2:46:
46:c2:dd:a7:ac:b8:67:ae:4c:da:14:fd:ae:d8:09:
d1:69:19:e9:72:1f:10:da:b6:9a:bc:63:fb:c9:26:
e7:99:ab:07:8b:35:7d:2f:28:b2:ab:f9:b2:af:be:
52:4a:1d:3a:f0:c1:c9:cd:eb:51:2b:98:0e:f8:3a:
5e:23:82:d1:78:ed:56:c3:46:65:2f:1d:21:62:e8:
d5:99:b2:d7:16:32:eb:6a:4e:19:96:d7:2e:22:f1:
d7:d4:50:3b:d2:38:f1:f6:ab:4e:56:cf:7e:e0:8b:
f0:28:33:dd:b2:3f:f5:32:dd:6e:9c:91:fb:ec:a7:
de:7d:59:39:2a:39:f4:f3:40:2a:a8:00:a7:4d:31:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4F:CC:7F:DE:32:05:33:4F:D3:BD:E5:AD:48:6A:F9:61:2E:7E:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D123130F43D11EF9AACC8B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.249.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:cd:7a:10:64:fb:18:11:aa:12:c5:5d:68:e8:aa:2b:d2:f8:
22:0c:2c:7b:f5:d3:52:79:77:da:1a:d5:94:45:ed:cc:98:8f:
94:a3:b0:37:35:bd:e3:db:b2:b3:26:65:b0:ff:b2:72:4f:48:
ae:cd:33:28:16:65:dd:07:ee:9f:75:4c:24:6a:77:df:7f:ce:
73:ac:64:29:cf:e8:38:04:3b:09:d6:e6:86:e7:7c:b6:3f:ea:
7d:a2:e9:25:52:e5:bf:0b:27:a2:7a:fa:89:d1:46:b7:10:7a:
59:5d:d8:f6:86:f8:51:6d:b6:4c:d0:dd:64:64:8f:3f:89:a4:
5c:35:75:e2:5d:be:1c:32:47:dd:82:3d:3f:6f:44:a3:41:6c:
15:5b:9c:dd:75:8c:12:bc:47:4c:0b:39:3f:a9:f2:a7:9f:9e:
2b:7b:bd:bb:29:d0:50:2a:39:a4:d1:da:dd:a7:77:11:11:bf:
f5:6f:86:a7:62:4f:a6:c1:05:38:13:2a:a0:b0:f8:f1:df:ca:
9b:94:c4:cc:11:7f:f7:ff:52:87:a5:33:e2:12:99:c1:03:9c:
3d:c0:b0:b0:4c:8e:fa:34:64:e2:4a:ba:ae:4e:6b:f7:48:aa:
8b:9b:92:8a:67:56:8f:68:fd:88:2f:cf:88:10:72:a0:01:f7:
42:0c:2b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:55 2025 by rpki-client