Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80F8F41AF46E11EF9A91D58A762E951A.roa
File: 80F8F41AF46E11EF9A91D58A762E951A.roa (raw, json)
Hash identifier: u+EU2IREe+I9uSEBhIVDP3yil2QUjHXESJr2GunxpUk=
Subject key identifier: 34:0F:92:DB:C3:EC:A3:0A:15:9B:4E:8A:D3:41:A0:C4:4D:EA:97:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01364F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80F8F41AF46E11EF9A91D58A762E951A.roa
Signing time: Wed 26 Feb 2025 18:21:32 +0000
ROA not before: Wed 26 Feb 2025 18:21:28 +0000
ROA not after: Thu 19 Feb 2026 18:21:28 +0000
asID: 984
IP address blocks: 45.201.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79439 (0x1364f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:21:28 2025 GMT
Not After : Feb 19 18:21:28 2026 GMT
Subject: CN=67bf5bac-3a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:13:90:a9:51:a0:28:8e:f7:fb:93:4d:29:
41:fd:73:3c:5c:81:5c:3b:b0:9c:95:19:08:23:95:
b6:f5:c4:1c:00:34:4f:6b:b1:56:26:7a:53:a6:b5:
cc:a8:32:ef:e1:3e:7a:48:be:55:f6:da:8c:6b:e9:
7d:d1:5d:e7:4f:76:24:e8:a3:56:88:ca:95:6c:29:
99:aa:f9:e6:54:6b:ae:c6:d3:66:52:ee:0d:2d:ff:
f7:95:f8:7d:4f:66:98:8b:a4:35:41:56:c4:3a:5d:
5e:5f:3c:5f:ef:eb:49:46:3a:9e:b2:76:15:16:57:
a6:fd:0c:15:8d:65:99:87:ef:2d:89:a1:90:df:21:
ad:5d:54:49:f5:78:cb:ab:a5:92:b9:57:a1:fb:33:
8a:fa:c5:e9:61:00:ab:1e:55:5b:d5:73:df:bf:27:
ae:0f:e0:b7:a8:a3:5b:9c:8f:e5:38:13:2f:91:98:
10:d4:a8:45:c5:00:52:15:29:6b:1e:65:d5:6b:f3:
7e:81:39:11:05:33:28:3d:b1:3a:21:22:44:e1:9e:
51:7d:c7:cc:a7:1d:5d:c1:0f:fb:0a:69:92:4c:47:
32:2a:2b:8a:a8:76:f2:a6:9f:ac:1f:7b:42:bf:ec:
bf:f0:09:34:f1:dd:ab:93:55:a3:09:81:e1:90:7e:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0F:92:DB:C3:EC:A3:0A:15:9B:4E:8A:D3:41:A0:C4:4D:EA:97:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80F8F41AF46E11EF9A91D58A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.68.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:09:b0:eb:ef:a1:0e:9e:ef:e3:fd:a7:45:f1:8c:7d:fb:93:
1d:de:39:b8:c0:50:35:1a:34:d8:06:6c:0b:b8:81:4c:25:c5:
65:7c:f3:84:31:9d:07:2e:0d:49:6a:a9:b8:85:89:99:5b:f3:
02:ae:3d:ac:88:23:d4:f1:98:a8:88:ba:a3:c1:c1:2b:20:98:
45:c8:ba:b3:15:a8:03:17:17:d5:46:3a:68:d7:f6:88:96:ba:
b6:81:4d:34:50:e1:91:09:c5:7a:15:4c:8d:08:da:55:21:64:
fd:a2:38:2c:25:be:b1:6c:93:e0:e2:c1:b4:41:f2:ec:bb:3e:
37:e9:a9:2b:92:80:c5:35:fe:d6:c5:03:6a:1d:6e:64:1d:da:
e4:86:d2:5c:d4:cd:43:a5:0b:59:c2:6e:3c:d5:88:fd:2f:60:
58:57:6c:29:ff:36:88:4e:bc:aa:7b:9a:90:62:d3:5b:de:a2:
f8:70:ef:1a:37:50:67:fb:23:d0:df:00:97:c6:cf:49:2b:c7:
01:6c:18:6c:58:9d:b7:50:61:6a:43:4e:8d:03:c6:ab:2e:46:
1e:a8:29:a5:c4:4d:31:2a:02:ce:c6:8f:7c:24:65:90:9d:8a:
dd:37:28:7e:fd:a9:15:ac:82:53:b6:30:46:65:75:dd:11:25:
19:a8:ec:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:50 2025 by rpki-client