Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A2C9B86F36511EF8D851B6B762E951A.roa
File: 8A2C9B86F36511EF8D851B6B762E951A.roa (raw, json)
Hash identifier: K1MZfd83m9BAOlQ1xuEEgWXL7cNMqcpFLx8qpdZD6y4=
Subject key identifier: F9:D6:4D:47:58:73:9F:59:C1:08:5C:44:86:D6:4B:8B:74:CC:DB:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A2C9B86F36511EF8D851B6B762E951A.roa
Signing time: Tue 25 Feb 2025 10:44:51 +0000
ROA not before: Tue 25 Feb 2025 10:44:46 +0000
ROA not after: Wed 09 Apr 2025 10:44:46 +0000
asID: 63139
IP address blocks: 45.197.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77358 (0x12e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 10:44:46 2025 GMT
Not After : Apr 9 10:44:46 2025 GMT
Subject: CN=67bd9f23-142a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d9:67:5c:41:e3:d6:15:ce:bd:71:cc:c7:7e:
27:36:50:26:e4:22:9b:c4:f7:1d:2a:35:10:43:65:
53:ca:2f:0c:c7:41:7c:bb:51:91:06:1a:09:ce:2f:
1d:48:36:ac:70:d3:35:11:5f:d1:3a:ef:ae:96:34:
eb:24:47:e9:52:2a:a4:e0:bb:7b:67:48:3d:29:f8:
70:09:13:3a:ba:cd:43:75:18:ef:07:b9:ae:e6:5b:
95:2c:40:c1:5a:0f:9d:4d:11:7d:c2:2a:e2:65:a7:
15:2a:21:79:7e:2d:62:9a:b9:4f:e3:37:97:85:0b:
90:dd:d4:ce:a6:22:c2:14:e1:15:2b:6c:5d:10:0c:
f4:35:44:4e:95:0a:4a:eb:7c:90:57:ae:ea:6c:80:
99:a1:77:3d:3a:10:fb:fd:6c:92:57:b5:04:46:05:
9e:bb:57:5c:46:63:3b:1b:33:43:48:7b:c5:d3:a8:
3f:0c:74:7a:af:5c:91:93:d2:ed:85:87:73:a1:f1:
b3:1e:a8:4f:d1:9b:39:7e:71:4b:03:4c:83:7e:d8:
f1:5c:ae:9b:5b:0c:a7:f6:b9:9c:de:8b:d8:04:22:
4a:81:1c:ae:0d:88:e2:e9:87:53:3b:b8:da:eb:40:
92:39:c3:f6:28:b0:18:75:a5:f5:25:a1:e8:be:06:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D6:4D:47:58:73:9F:59:C1:08:5C:44:86:D6:4B:8B:74:CC:DB:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A2C9B86F36511EF8D851B6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.85.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c0:a8:25:e8:35:c4:2c:f8:65:98:46:ab:42:76:7a:21:08:
86:56:2b:84:57:93:c5:57:0e:3b:18:87:47:da:78:dd:61:f7:
85:68:ec:4d:0e:ca:6b:50:2d:d2:ea:07:9f:b4:de:74:b4:38:
cb:63:51:a3:41:ad:d8:ad:27:28:78:67:2d:4b:0f:4f:74:fb:
4d:98:5a:47:98:6b:73:75:c6:48:97:54:16:d6:59:3f:72:64:
86:4f:08:c9:2a:e7:d4:21:e0:d6:f4:47:04:a4:80:95:0a:9f:
c6:b3:e4:de:18:fe:1c:77:9e:78:ae:ff:0f:51:59:ad:8e:0f:
42:8e:80:b8:1e:1c:c8:e5:57:2a:07:dd:5f:08:ed:e0:90:97:
b8:93:f6:62:75:e8:98:e8:ce:db:b1:10:dc:c2:ce:a0:e6:59:
56:3c:9a:16:c6:28:92:64:18:18:18:68:d9:ee:d9:c9:f5:48:
dc:3e:4d:09:dd:d9:36:51:82:7e:3c:c7:fe:50:6f:d1:73:56:
b7:01:bd:7b:7d:ed:46:31:6c:01:25:db:68:c6:c7:51:8b:98:
5b:06:1e:89:e4:0e:2e:4c:b8:1e:44:23:1f:08:48:29:ab:e8:
cb:75:b8:04:64:30:46:a0:fe:d6:d4:aa:a1:46:e1:5f:68:b1:
66:b5:d6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:44 2025 by rpki-client