Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9496B1E0018111F0B209C2A1762E951A.roa
File: 9496B1E0018111F0B209C2A1762E951A.roa (raw, json)
Hash identifier: uxg/ozWcxxJOFYlaf86oMoUn+QJcllvFBQ9TJr1WvjI=
Subject key identifier: 7F:80:BB:0F:21:BD:FE:D4:52:84:FA:61:48:2C:34:90:99:83:68:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01463A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9496B1E0018111F0B209C2A1762E951A.roa
Signing time: Sat 15 Mar 2025 09:40:50 +0000
ROA not before: Sat 15 Mar 2025 09:40:47 +0000
ROA not after: Mon 21 Apr 2025 09:40:47 +0000
asID: 2914
IP address blocks: 45.192.23.0/24 maxlen: 24
45.192.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83514 (0x1463a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 15 09:40:47 2025 GMT
Not After : Apr 21 09:40:47 2025 GMT
Subject: CN=67d54b22-3b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:1b:ac:0d:40:a2:f7:dd:26:7e:e7:28:10:
51:c1:c8:3c:f2:ae:08:fc:87:f3:30:9a:95:e3:d1:
bc:41:95:08:ad:a8:21:10:c6:d8:d7:0b:46:6e:70:
7c:23:71:34:27:c5:ea:41:b9:57:23:b4:4c:59:b5:
f0:76:16:fe:3e:12:8f:46:5c:66:21:6e:1f:d7:6c:
96:59:2a:fc:8e:7e:80:a8:4c:51:c9:f4:da:dd:a3:
85:e3:52:3f:c2:2f:c6:10:00:4e:97:f6:73:aa:be:
21:b6:95:63:17:bf:98:9a:d5:6e:8e:cd:cf:c4:29:
a9:43:82:de:71:7f:33:98:93:3e:02:76:d8:77:31:
a4:8a:b2:7a:84:8b:fe:b8:65:29:12:cb:53:8e:2e:
37:8a:20:82:61:3e:aa:01:68:6d:77:70:1e:02:b4:
ba:00:9a:d1:ae:49:d8:07:b8:59:1e:b9:ef:ec:38:
a9:1e:ea:7e:c8:eb:93:1f:75:ad:6e:02:89:c3:b7:
1d:17:65:70:14:e8:9c:9b:e0:56:6f:12:19:96:59:
0a:34:c6:e3:51:96:e1:0d:25:8d:92:ca:ea:ad:88:
b4:d9:63:58:d2:c2:a9:b8:3c:76:f1:f5:ea:7b:4f:
51:c4:ff:b2:af:85:65:24:89:02:6b:1e:08:46:fe:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:80:BB:0F:21:BD:FE:D4:52:84:FA:61:48:2C:34:90:99:83:68:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9496B1E0018111F0B209C2A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.23.0-45.192.24.255
Signature Algorithm: sha256WithRSAEncryption
1e:ba:d6:1b:57:c8:09:6e:03:73:0c:4e:d4:69:7d:f4:1b:5f:
03:93:66:40:8e:18:99:1d:e7:b9:b5:fa:d3:08:ac:ee:70:69:
9f:97:47:15:d4:a2:35:11:a6:ea:d9:3c:bb:33:8c:e3:b3:9b:
86:93:49:e0:d9:d5:ea:97:05:db:f4:75:b0:6d:6d:a7:5c:57:
cc:df:e9:96:06:4a:66:64:2d:bc:ac:8f:ad:1f:6f:92:8f:10:
18:52:dc:e3:e2:a6:55:97:77:a2:03:a2:8d:03:0f:c8:8f:50:
e5:0a:fd:6c:0f:8e:71:f0:cd:9e:a6:ca:7b:e4:b1:c5:ad:7a:
e8:73:4e:d9:c9:ed:ae:81:62:05:52:48:c5:bd:17:b9:29:b1:
1b:e4:ca:bb:25:e3:15:d0:03:1e:a8:48:64:6f:14:f6:71:33:
06:2b:83:c4:e8:18:eb:68:50:63:47:3a:18:75:7e:be:08:17:
b2:5b:6d:b8:7c:21:f5:61:b0:ab:32:85:bf:8d:9b:09:1a:70:
83:a4:13:69:ef:08:0a:a9:2d:63:9f:dc:57:f0:70:61:b5:6d:
da:50:b1:b7:dd:fb:36:f9:bd:f0:b8:ad:c1:1a:11:62:5b:93:
a5:fa:bd:b6:29:35:9d:ba:a3:11:05:5e:c3:93:a3:e1:aa:0a:
17:78:8e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:42 2025 by rpki-client