Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91451ECAF86511EFA212CCA0762E951A.roa
File: 91451ECAF86511EFA212CCA0762E951A.roa (raw, json)
Hash identifier: Ym4PIMtOlB0oXu5hplJV59yPy/Jw3hMqlm+rksNZE5I=
Subject key identifier: 66:49:BA:1F:30:B6:3F:93:B7:55:DD:5D:F6:A3:FB:57:33:B2:92:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01424D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91451ECAF86511EFA212CCA0762E951A.roa
Signing time: Mon 03 Mar 2025 19:27:38 +0000
ROA not before: Mon 03 Mar 2025 19:27:34 +0000
ROA not after: Sat 05 Apr 2025 19:27:34 +0000
asID: 984
IP address blocks: 45.198.27.0/24 maxlen: 24
45.198.28.0/24 maxlen: 24
45.198.29.0/24 maxlen: 24
45.198.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 19:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82509 (0x1424d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 19:27:34 2025 GMT
Not After : Apr 5 19:27:34 2025 GMT
Subject: CN=67c602aa-9ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:11:ce:b9:0b:2a:15:2c:b6:ff:46:e3:12:
ad:90:21:14:c4:bd:28:4f:ad:02:09:d5:97:d4:19:
6c:a5:f9:44:4e:5d:af:eb:e3:4f:62:85:c7:25:df:
37:ad:a3:20:6e:71:42:0e:71:75:e8:06:b5:06:c9:
9b:fd:5d:e2:ea:7a:3a:c5:37:4a:70:2f:34:be:29:
49:66:b4:2f:cc:39:1d:8a:84:93:09:50:13:21:2e:
a6:ad:9f:24:b5:2d:39:41:bd:30:6c:0e:01:8b:30:
43:f9:50:d3:47:eb:4d:12:e3:ca:a8:3f:37:fc:18:
f9:c5:57:73:a2:bf:8a:55:c2:23:03:e7:03:8c:4f:
f5:6f:e4:40:6e:de:16:c1:52:c6:98:dd:fa:45:49:
ec:2e:f0:b9:0d:10:2b:78:b8:81:33:f0:60:f8:38:
57:82:63:e8:24:a6:00:98:84:d0:e1:09:50:fc:c8:
2a:e4:2e:04:93:53:6a:b8:f0:12:56:7d:90:b7:29:
96:06:53:90:b0:e1:2a:9d:36:30:45:b9:4a:38:3c:
82:13:f1:b4:b7:87:c4:28:f8:f5:2e:96:c5:6c:65:
06:b2:31:ba:54:df:fc:f0:a2:8f:ef:51:d7:21:49:
4d:22:c3:0a:e4:52:50:96:e0:6a:69:8d:1e:ee:2e:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:49:BA:1F:30:B6:3F:93:B7:55:DD:5D:F6:A3:FB:57:33:B2:92:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91451ECAF86511EFA212CCA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.27.0-45.198.30.255
Signature Algorithm: sha256WithRSAEncryption
2c:13:ef:cb:f5:8a:56:ae:6c:c1:86:08:a2:12:88:5e:ec:a5:
56:35:73:52:b8:3f:91:30:d6:10:84:98:98:fe:a2:b9:ac:ad:
40:9a:96:d2:df:a8:8a:fd:d8:2b:a6:73:c9:5a:72:5c:46:36:
cd:9c:00:47:93:b7:9b:7d:aa:28:b0:41:9f:3f:95:71:f6:6f:
f1:c0:2b:1f:95:0f:ef:de:68:e2:63:5d:25:2e:05:79:c9:6f:
89:0b:60:23:cc:a2:a1:4e:5b:23:83:5d:5b:dd:37:e1:d8:be:
00:8f:45:75:9c:4f:ac:9e:6a:de:7a:77:ad:6f:47:83:12:53:
77:5a:cf:0a:02:b9:08:9f:86:24:24:89:ea:4d:4c:e6:c7:0f:
a6:72:3e:a4:e2:fb:f0:3a:26:5f:dc:b6:1a:01:5f:cc:8c:6c:
f3:f2:7d:6c:d6:88:6b:68:9b:d5:f7:1a:ec:c4:73:54:b2:ba:
8e:bb:37:86:f0:d8:3b:90:af:93:d7:09:bb:f3:bd:48:8a:94:
f5:31:10:60:9d:e9:ed:5f:cc:05:71:19:ff:72:c5:e3:de:0c:
2c:af:29:b7:2f:d4:79:b5:ed:14:e0:27:31:80:50:0d:68:42:
51:f1:e6:d6:88:25:02:34:b8:f6:46:78:56:cc:7f:e5:82:d1:
bc:32:59:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:42 2025 by rpki-client