Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E1160C2108611F0A9FDEB96762E951A.roa
File: 8E1160C2108611F0A9FDEB96762E951A.roa (raw, json)
Hash identifier: 5yFXWs59xBwY46p7WwXnuKTyWOOAogatPdRESZZDyjI=
Subject key identifier: C3:3F:0E:A4:89:9C:55:E3:2F:53:A4:7F:7D:42:11:9A:3F:7A:AA:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E1160C2108611F0A9FDEB96762E951A.roa
Signing time: Thu 03 Apr 2025 12:24:14 +0000
ROA not before: Thu 03 Apr 2025 12:24:10 +0000
ROA not after: Mon 14 Apr 2025 12:24:10 +0000
asID: 7018
IP address blocks: 45.199.152.0/23 maxlen: 24
45.202.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84458 (0x149ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 12:24:10 2025 GMT
Not After : Apr 14 12:24:10 2025 GMT
Subject: CN=67ee7dee-1a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:da:fb:66:fb:e1:ea:f5:72:9e:a4:9d:d4:
b2:d5:f1:55:0b:8e:03:f5:8d:22:b1:ee:46:8f:67:
f1:8c:57:8a:59:3c:0b:e0:04:5a:3b:13:1b:99:22:
fb:d4:ba:95:99:ec:4f:64:77:d4:d8:2f:3f:1b:4c:
f4:c2:ce:6b:e6:96:00:98:cb:5b:bb:9f:c8:e1:ab:
a2:bb:d0:d7:17:f2:4b:88:75:79:f7:18:2b:46:be:
39:ad:02:fd:53:27:3a:a8:70:41:14:9b:67:3c:f3:
d8:7c:05:9c:7d:78:84:1d:30:7c:a1:f0:e0:23:05:
46:3a:a8:e3:04:24:37:1b:bd:5c:23:a1:d7:2d:1e:
06:4a:9b:c9:9e:07:a3:3a:ab:51:00:f8:b0:b8:89:
b1:19:81:44:3b:fa:8e:c7:b4:cf:55:7b:7a:ca:51:
31:47:51:32:4b:f7:bd:5b:3c:c6:1d:ee:bd:48:98:
82:f4:ab:0c:f5:f0:c1:50:c8:a8:7d:4d:ba:d3:16:
5e:2c:da:fc:38:50:cc:86:21:8e:45:6a:ea:06:22:
d1:9f:25:43:d4:87:53:7a:f8:16:99:32:0b:60:15:
98:86:fb:c3:c7:64:f4:c8:b3:9f:a1:35:34:17:59:
69:28:62:ea:25:2e:18:9b:b8:f1:e9:65:ca:77:4e:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3F:0E:A4:89:9C:55:E3:2F:53:A4:7F:7D:42:11:9A:3F:7A:AA:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E1160C2108611F0A9FDEB96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.152.0/23
45.202.0.0/22
Signature Algorithm: sha256WithRSAEncryption
11:f3:1f:a9:b7:35:99:ea:f1:9a:f7:fc:bb:cd:4c:e0:07:ca:
25:8c:1f:13:29:19:d4:3b:f9:c2:30:59:47:08:1d:61:80:d8:
f1:2c:6c:dc:95:66:f4:3c:5a:f3:37:56:e6:f1:96:5e:70:e9:
2d:ba:ae:7c:a4:46:3a:d0:7d:69:11:56:a8:a6:92:61:56:e1:
92:61:73:71:14:fb:c8:3a:88:73:4c:da:35:7f:f7:85:8d:c6:
60:38:c0:db:19:02:7e:76:51:39:5d:a1:6c:d9:9c:82:7a:60:
52:f6:4e:56:df:bb:af:a3:b0:b9:a9:cc:90:37:5f:e4:02:71:
37:61:75:e5:e4:b2:5b:a6:fc:d8:6f:dc:12:be:54:2a:03:cb:
dc:c6:b0:a0:15:15:3c:d1:30:76:38:a7:95:24:3f:c4:66:2c:
73:e6:08:3a:bd:cd:42:67:d7:08:37:ad:46:f9:d9:2d:11:5c:
34:e9:b1:46:03:8f:e6:bd:ff:89:a7:0f:19:3f:ce:0f:8e:bc:
6f:19:a2:05:b1:63:6c:e8:24:e6:e4:f0:fd:92:6d:4a:86:f9:
96:48:cc:51:67:38:62:75:af:2e:f1:10:33:45:5b:24:59:cb:
8a:83:b0:0e:88:d0:35:5e:20:60:c4:dd:02:0d:a6:80:ac:b7:
7f:13:8a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:24 2025 by rpki-client