Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/941024E604BE11F09438E1BE762E951A.roa
File: 941024E604BE11F09438E1BE762E951A.roa (raw, json)
Hash identifier: cM5ipsinvK1EuD7DTOQpeWZlfMI14IcFWAcPcIReWcw=
Subject key identifier: AB:97:F6:4B:B6:D3:82:F1:03:22:FE:AB:3F:02:92:08:F0:98:A2:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014707
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/941024E604BE11F09438E1BE762E951A.roa
Signing time: Wed 19 Mar 2025 12:35:02 +0000
ROA not before: Wed 19 Mar 2025 12:34:59 +0000
ROA not after: Wed 09 Apr 2025 12:34:59 +0000
asID: 7018
IP address blocks: 45.203.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83719 (0x14707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 19 12:34:59 2025 GMT
Not After : Apr 9 12:34:59 2025 GMT
Subject: CN=67dab9f6-abb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:87:0d:59:99:ad:72:27:ba:44:54:d9:83:
2f:92:86:de:e8:db:c1:c3:81:7c:79:69:2e:1e:f4:
a1:01:95:c0:24:1d:1f:ad:25:11:46:b9:b1:63:71:
9a:77:4b:1d:4f:8b:98:ee:5b:be:c5:85:d7:c9:63:
1a:45:d0:ed:a0:da:24:9f:a6:4a:dd:48:e4:e7:15:
38:b2:4a:88:6e:e7:04:46:18:75:b0:96:6a:9f:4b:
fa:84:9b:0c:f9:e3:81:d1:91:ef:99:06:ad:c0:ab:
b7:12:94:90:30:e1:d9:20:f2:48:e8:9b:77:03:c1:
98:ae:d0:dc:57:6d:98:bb:ab:1b:52:4a:90:ae:64:
b9:7e:8a:54:30:dc:7d:32:1a:3d:24:70:6b:f5:f3:
79:6a:45:a3:45:71:c3:56:1d:47:9d:57:0d:2b:57:
0c:75:7a:15:02:ad:a9:73:94:5a:21:f2:25:51:38:
c8:cf:a9:d2:ee:8b:6f:5d:38:3b:63:8e:b9:b4:64:
ab:d3:bf:83:d3:72:cd:9b:35:14:1b:f5:fd:7f:22:
f0:9e:c7:7b:2c:40:3b:40:1f:49:39:86:bf:2e:9d:
42:35:e0:9c:08:7b:16:a3:f5:3c:26:7f:f7:dc:b3:
55:ab:93:74:73:62:8c:62:96:2f:b3:13:8c:20:c4:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:97:F6:4B:B6:D3:82:F1:03:22:FE:AB:3F:02:92:08:F0:98:A2:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/941024E604BE11F09438E1BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.48.0/21
Signature Algorithm: sha256WithRSAEncryption
56:f7:1c:2a:09:e2:18:f4:4a:cd:80:2a:67:8e:4a:c4:f8:9b:
9d:75:40:89:e8:ee:41:74:5f:40:7d:68:8f:a8:7b:0a:70:6b:
ab:e9:b1:6d:49:a2:5a:3e:f5:b7:10:ed:a2:cf:42:f6:99:9c:
a3:ec:76:ac:d8:3c:18:e0:23:83:4c:86:c4:27:4f:f8:09:99:
a2:a1:dc:6c:21:46:16:f4:a2:49:3b:81:7a:c4:c0:64:ae:61:
a9:a1:74:93:b7:cb:fd:55:36:91:fc:6d:8c:74:04:fa:65:d6:
42:a0:20:f8:d5:38:fc:dc:0c:0e:bf:ed:6f:23:a7:f3:53:ba:
13:83:71:aa:1c:d4:97:e9:06:1f:9b:eb:26:23:da:4f:32:5e:
3c:47:a7:6d:0d:6e:6d:eb:e9:4f:3d:55:de:2c:a6:b6:c3:67:
56:d9:30:bd:87:04:29:ff:96:1e:c7:2f:f6:fe:75:7f:9b:79:
af:b6:0f:b7:35:77:d7:88:2f:10:06:54:5b:42:aa:05:5c:53:
87:60:dc:29:65:4b:07:ec:56:d8:75:52:4e:17:21:ff:26:37:
3e:07:de:5f:ce:21:44:79:da:a2:2e:f5:2e:03:08:e8:37:5f:
87:ee:23:72:fd:d6:c7:a1:f1:c1:8c:83:6a:c6:0a:7b:91:61:
c8:42:30:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:46 2025 by rpki-client