Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/951D42EA0CC711F0BAAA2159762E951A.roa
File: 951D42EA0CC711F0BAAA2159762E951A.roa (raw, json)
Hash identifier: idjMLfqTjR/s0/wJmF/diHqMRz/rVMO0dQpVNNzbdck=
Subject key identifier: E6:85:82:3A:74:5F:2E:68:73:C5:53:0B:6D:80:43:5E:0E:6A:13:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/951D42EA0CC711F0BAAA2159762E951A.roa
Signing time: Sat 29 Mar 2025 17:59:39 +0000
ROA not before: Sat 29 Mar 2025 17:59:35 +0000
ROA not after: Wed 23 Apr 2025 17:59:35 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84186 (0x148da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 17:59:35 2025 GMT
Not After : Apr 23 17:59:35 2025 GMT
Subject: CN=67e8350b-70b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:64:93:8a:7e:da:7e:8a:92:0f:52:d8:2d:
46:72:fd:f4:01:da:cf:23:38:b4:29:ae:a9:c6:df:
4e:71:33:46:af:1d:0e:80:33:39:46:2e:85:d2:07:
a5:86:8f:be:4e:d4:45:8d:a7:a2:e2:6d:74:30:dd:
ca:47:be:c9:af:4c:40:80:a7:9c:08:15:5a:c1:d7:
39:bd:bd:e5:bd:8f:fd:ae:82:29:be:b0:bb:9a:46:
a5:a2:4f:46:b9:1a:d2:d2:00:ed:8d:9f:8d:17:27:
ec:a3:78:4b:68:0a:fa:b7:7c:fe:08:26:08:af:34:
b4:cc:59:9c:96:02:71:8d:b2:a8:d7:c6:a3:9d:e9:
62:b0:c4:bb:2b:ad:41:0d:d3:8d:99:69:58:90:87:
fb:4f:8e:6a:d4:88:46:66:41:c7:fa:25:36:b5:a7:
99:10:5c:b5:03:28:32:8b:ee:02:9f:37:d9:5d:fe:
51:22:a6:e0:43:f8:b9:5d:15:7f:12:a8:51:a1:0e:
6d:47:1f:f0:06:e9:27:71:c4:30:82:b3:24:b7:af:
12:7c:74:63:8c:8e:e2:32:b1:80:88:be:f2:af:fd:
ca:cb:3c:21:f9:ce:0a:87:04:60:90:76:fc:51:aa:
a2:a5:e4:23:33:53:9b:c6:08:28:9f:fc:85:46:e4:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:85:82:3A:74:5F:2E:68:73:C5:53:0B:6D:80:43:5E:0E:6A:13:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/951D42EA0CC711F0BAAA2159762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
79:40:a6:85:ba:c4:72:04:c0:ae:82:98:85:b7:39:5a:76:4c:
d1:a1:64:1a:b4:07:d1:d6:d8:06:19:da:b7:06:b8:1c:ba:ef:
3a:cd:c2:22:eb:d3:d0:71:7f:76:ba:42:37:f6:00:4a:2f:8e:
2d:a4:35:1a:c9:c7:19:5f:24:1e:3f:b8:52:d4:be:09:13:a7:
79:8c:35:58:95:96:c4:3e:86:94:2f:ef:cf:9c:53:8a:98:86:
5a:95:7a:92:c6:66:78:0d:d6:b8:dc:df:73:34:4e:fc:4d:b5:
94:dd:d7:47:04:e9:db:56:25:94:48:d0:78:51:cc:58:89:19:
08:39:79:79:f3:22:02:c7:a9:a5:65:ca:d2:c2:6b:9f:6c:43:
1e:dc:06:5f:16:69:12:ec:a0:e0:17:63:1e:1e:7c:d6:b1:75:
d7:97:c6:f2:8a:b5:51:81:04:32:67:a3:95:0e:3d:04:07:7c:
ea:69:65:9d:5c:a0:a2:c5:76:db:e9:d7:86:b2:24:e7:91:ff:
62:10:cd:92:b2:a7:13:d9:66:0a:ea:93:30:16:44:e9:74:91:
a9:61:00:b0:6f:0d:b8:0e:54:59:83:73:be:15:df:2a:9c:59:
61:cd:ee:7a:38:f5:75:e8:9b:c9:60:c2:76:10:5e:53:9a:5c:
e6:17:c5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:57 2025 by rpki-client