Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83EC468EF43911EF8FF77C98762E951A.roa
File: 83EC468EF43911EF8FF77C98762E951A.roa (raw, json)
Hash identifier: 4JgA4MTem0THmSnIY6hSi8VfbHmJu8Zu1npVvpZ50ok=
Subject key identifier: 86:DB:9E:D1:EC:27:9E:42:19:F3:14:E8:31:09:6E:C4:4C:1B:50:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013217
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83EC468EF43911EF8FF77C98762E951A.roa
Signing time: Wed 26 Feb 2025 12:02:13 +0000
ROA not before: Wed 26 Feb 2025 12:02:10 +0000
ROA not after: Sat 19 Feb 2028 12:02:10 +0000
asID: 17561
IP address blocks: 45.199.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78359 (0x13217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:02:10 2025 GMT
Not After : Feb 19 12:02:10 2028 GMT
Subject: CN=67bf02c5-1af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:92:0b:64:e2:cc:f6:32:7c:e1:8e:c5:74:
f8:d5:4c:3b:10:11:f2:14:0a:7c:a5:e0:b2:35:f2:
c7:23:63:3b:eb:85:65:ac:11:d8:1d:aa:74:4e:0e:
ee:b2:cd:5a:7f:49:48:c8:53:6a:5b:1f:23:9d:21:
11:0d:9b:60:b8:11:f1:3d:e8:91:ca:08:f0:3b:94:
b6:2a:05:35:05:1e:c2:e8:0d:4d:0d:06:83:30:ea:
ba:fc:12:80:09:b2:18:af:ac:6b:50:57:fb:2d:f3:
3e:f9:8c:31:70:de:63:55:e5:1f:58:95:85:ea:c7:
e0:1f:bd:fc:b6:a8:b0:44:4d:7b:b0:6a:38:6a:1b:
7e:e7:0a:c5:5e:29:81:3b:67:79:dd:5f:7f:df:a5:
db:f7:50:43:bd:38:c2:e5:0e:0d:db:e0:d1:19:fd:
74:4d:08:f1:19:54:ef:f4:2e:08:95:71:db:87:66:
72:5c:64:47:70:d1:31:12:f6:ad:2c:e9:d2:c4:f2:
92:fc:3e:90:7e:f9:3f:44:df:a3:e0:39:4c:e3:75:
96:de:b2:4a:b3:dd:c7:1e:26:70:21:49:35:2c:5a:
a8:4c:a0:4b:74:f8:0a:7b:66:0c:41:02:e1:32:d0:
63:14:15:db:f9:57:26:4c:b3:2e:44:ed:8c:91:2d:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DB:9E:D1:EC:27:9E:42:19:F3:14:E8:31:09:6E:C4:4C:1B:50:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83EC468EF43911EF8FF77C98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a0:d5:e8:68:a4:d5:62:01:26:a1:ad:5b:de:48:b3:60:5b:
24:52:86:8e:d2:2b:7b:4a:34:09:e5:72:a5:58:ec:8b:83:83:
26:66:b5:da:33:ba:9b:bb:b0:96:fd:b2:b4:cf:d0:38:c6:ee:
65:7b:6d:7a:81:42:2d:10:5d:88:46:43:c9:ec:55:f3:98:f7:
8e:38:3a:c6:6e:18:48:70:c3:a6:17:8c:b1:69:ca:f3:74:29:
7d:0e:dc:00:73:0c:27:0b:53:bc:c7:3c:3d:59:b6:97:e2:47:
15:24:f8:75:8a:6a:a7:0c:27:f7:34:ee:7f:1a:f7:ac:e2:1d:
57:b3:a9:24:65:a8:8f:6a:fe:33:d3:c2:38:b9:db:78:1a:88:
ed:4b:8e:74:b8:22:6d:d2:3f:d8:f3:13:f2:2a:11:8b:48:77:
44:09:10:9f:57:4c:29:dd:a9:af:92:9f:3a:82:a9:a3:55:c0:
38:ad:81:7a:fb:61:26:05:e9:39:23:28:22:a7:78:54:57:af:
92:d5:d5:d4:d9:85:60:2e:a1:20:02:fa:40:6e:eb:ae:2f:61:
d9:81:ef:0f:57:c8:bb:25:a1:18:38:bd:3e:be:79:fa:c2:2a:
03:60:3c:b5:ce:bf:34:9d:0c:86:9f:24:95:bd:ab:d2:a0:ed:
29:08:45:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:40 2025 by rpki-client