Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918D81C8FF2811EF99EB8E88762E951A.roa
File: 918D81C8FF2811EF99EB8E88762E951A.roa (raw, json)
Hash identifier: +Klh+uAXugmRz85WvnQfK3XATbZyO98thsSDXwceoOc=
Subject key identifier: E7:79:E2:F7:61:F7:E2:17:6F:79:1F:28:3C:A3:0E:39:8F:7C:F9:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014536
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918D81C8FF2811EF99EB8E88762E951A.roa
Signing time: Wed 12 Mar 2025 09:58:38 +0000
ROA not before: Wed 12 Mar 2025 09:58:34 +0000
ROA not after: Thu 17 Apr 2025 09:58:34 +0000
asID: 36137
IP address blocks: 45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83254 (0x14536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 09:58:34 2025 GMT
Not After : Apr 17 09:58:34 2025 GMT
Subject: CN=67d15ace-d649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:b5:78:41:11:a5:b7:4b:03:4b:75:f1:e4:
2e:24:3b:52:bc:b3:cf:ee:e5:dc:11:2b:5f:e7:3e:
be:ef:10:e8:a6:41:a0:7e:3e:d2:e8:d8:6b:fc:29:
33:57:da:2f:af:25:dc:85:00:81:fb:bd:3c:d3:bf:
38:77:41:6e:e6:20:86:4a:2f:75:da:8c:ed:c7:08:
e9:0f:9d:21:98:20:8d:e2:21:b8:fa:a0:f7:ec:3b:
30:7a:6b:12:9c:b6:cf:dd:b4:cd:ce:48:28:74:5b:
5d:e2:94:e8:89:9f:b0:c2:16:9e:94:4b:12:77:bb:
4a:4e:53:a0:8a:ae:66:73:7f:d7:15:04:8e:f6:f8:
a8:96:af:7d:1c:75:e2:90:df:d6:41:d0:82:01:e7:
5e:9c:e4:81:fb:31:5e:a3:e2:17:8e:2b:d7:da:02:
c6:b5:26:1e:84:70:52:bf:15:bd:65:3c:0a:6a:84:
11:6d:d0:69:f0:1e:43:1a:7d:b4:19:1d:48:dc:f0:
f0:5f:35:93:5f:5e:16:32:dc:d9:1c:ad:49:1f:89:
59:8e:3d:51:9f:81:f3:e7:27:fb:8e:9e:a9:19:03:
5e:75:86:ee:7f:23:50:03:c8:71:b5:89:ee:11:df:
2d:93:9a:d7:6f:05:db:66:f1:6a:93:6d:2e:c3:db:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:79:E2:F7:61:F7:E2:17:6F:79:1F:28:3C:A3:0E:39:8F:7C:F9:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918D81C8FF2811EF99EB8E88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1c:09:eb:42:95:85:14:c1:b1:9b:9b:7e:ce:63:ea:ef:9e:b8:
a3:f6:37:1f:d6:39:2c:63:1a:66:eb:40:42:44:88:5e:a7:cc:
b6:d1:fe:90:4b:7d:5c:7e:2c:dc:eb:70:a3:c6:2c:17:e2:f3:
c8:be:09:ff:67:cc:da:02:c7:f7:e6:5b:23:c8:f2:c6:ee:48:
83:bb:39:02:2e:e0:51:6e:97:19:d5:32:4b:9d:8d:94:30:63:
5e:16:81:a6:93:51:27:f3:4c:f2:bb:01:17:79:e4:c6:7a:15:
90:52:1d:3d:a2:ce:b0:75:92:d8:9b:6d:04:d1:56:d7:92:b2:
48:fd:95:fb:ec:fd:fe:9b:16:63:4e:93:82:08:09:b1:97:a0:
02:51:ca:e2:e2:f2:ec:47:a3:a1:94:2c:ab:f7:c1:e8:87:05:
ec:c1:3a:5e:96:8b:60:71:35:b6:6e:12:95:fc:fc:e0:ae:43:
5d:e6:65:43:55:85:1c:d4:82:de:55:6b:81:43:02:60:70:c8:
82:b4:f9:d6:f5:69:04:04:68:cb:70:d0:b2:30:24:2a:7e:8e:
dc:9f:73:be:9e:e1:19:1c:76:2a:b2:c2:af:88:c7:72:ea:31:
56:cd:ba:5f:4a:67:b3:5f:44:12:82:14:c4:ea:af:6c:eb:a0:
9c:d0:00:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:51 2025 by rpki-client