Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92567B80E55D11EFB6D26A64762E951A.roa
File: 92567B80E55D11EFB6D26A64762E951A.roa (raw, json)
Hash identifier: +LYZDBfkPu39MFqCkTQKPbnGNHOepXMmbUJbbp6+m50=
Subject key identifier: 59:ED:9F:65:2C:DE:EE:0B:6F:53:77:D5:BB:83:00:38:8E:77:19:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92567B80E55D11EFB6D26A64762E951A.roa
Signing time: Fri 07 Feb 2025 14:12:32 +0000
ROA not before: Fri 07 Feb 2025 14:12:28 +0000
ROA not after: Fri 21 Jan 2028 14:12:28 +0000
asID: 17561
IP address blocks: 45.196.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73188 (0x11de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 14:12:28 2025 GMT
Not After : Jan 21 14:12:28 2028 GMT
Subject: CN=67a614d0-24d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:1c:1d:e2:33:95:2a:18:81:b7:02:b4:a0:
ae:5c:9d:66:01:aa:08:46:a6:3f:26:dc:01:49:be:
07:86:75:49:da:bc:e3:9b:71:62:4c:16:f6:6d:13:
fa:80:9a:08:47:e4:84:c1:bf:72:6f:7f:91:0d:ec:
c8:70:f6:7c:7f:5f:15:96:e0:65:6d:31:01:89:d3:
f2:2b:7b:d6:6d:c6:36:89:bc:db:12:49:1e:ab:45:
34:69:17:e9:12:f6:a0:5f:b4:86:c5:1a:8a:81:99:
62:a0:f1:c5:e8:3c:27:03:aa:77:38:38:98:b1:39:
ed:0b:e0:fa:cb:88:8e:0c:19:e5:cf:bc:2d:76:c5:
97:1a:08:35:fa:f3:24:11:7f:67:86:c2:24:c5:9a:
11:3b:fa:7a:29:2e:6b:d7:24:57:ce:04:f4:2c:99:
06:1b:0c:d7:29:89:58:10:82:ef:b9:62:11:62:62:
ad:8c:27:61:c4:7c:b0:f0:8e:5c:ea:16:23:73:81:
f9:cb:b0:71:99:40:cb:d2:e9:f8:bf:53:f8:1a:fe:
17:41:ab:9a:bb:8b:00:1d:7e:73:2b:48:a9:38:0e:
00:2d:df:e2:30:7c:ec:77:4a:37:8e:f1:28:e3:ff:
f9:ac:63:52:c0:10:93:f0:6f:bd:d1:61:17:89:0d:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:ED:9F:65:2C:DE:EE:0B:6F:53:77:D5:BB:83:00:38:8E:77:19:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92567B80E55D11EFB6D26A64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d4:35:52:1b:ad:1c:2b:b5:e2:80:e7:1e:dd:4e:a2:ce:c2:
b5:8c:54:56:34:3b:ab:9c:8e:67:05:86:e2:40:24:24:fc:81:
02:aa:88:21:0a:71:ea:19:d4:4d:8f:d7:62:51:a4:91:8d:0a:
62:b0:68:4d:2e:14:7d:b4:fd:c8:da:b7:e8:20:00:9b:6b:8d:
29:c0:69:5e:0b:ec:74:0e:40:80:e1:ec:1e:ba:25:44:82:47:
f2:97:5f:35:c8:0b:ef:a5:af:19:99:3a:d6:6a:5b:a2:bd:2e:
20:f0:99:7b:1c:2b:21:16:f1:5f:08:33:2f:48:4d:3b:9e:bc:
41:09:7e:fc:73:2c:55:52:91:88:22:35:d0:e6:55:6f:03:af:
ce:e4:aa:4c:b4:b3:91:ab:4d:3a:fe:b0:6b:00:f3:48:7b:e3:
a5:d3:d2:eb:60:60:a3:4d:02:df:d5:50:21:44:4a:b7:c1:ad:
f0:48:6e:de:e7:39:bb:74:c2:ad:ce:6d:72:88:b9:4a:99:e8:
4f:2f:ba:a1:24:72:42:76:3f:31:06:70:40:0e:90:a4:0c:93:
b7:b1:c9:58:ae:54:96:3b:c2:cc:92:b5:50:13:eb:f2:2c:e7:
06:35:c4:43:78:df:f5:25:b1:79:9a:14:44:a4:ea:0d:79:36:
6e:b1:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:34 2025 by rpki-client