Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/965EC7A4F41D11EF8C9CA955762E951A.roa
File: 965EC7A4F41D11EF8C9CA955762E951A.roa (raw, json)
Hash identifier: eaaxmclgpKy3zLtqdyfrAqlyW+zkclYzcQkkiWOsFsY=
Subject key identifier: 76:6C:AE:87:04:E4:C5:8D:0F:F4:09:BF:AA:FA:67:CB:B6:E0:87:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01300F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/965EC7A4F41D11EF8C9CA955762E951A.roa
Signing time: Wed 26 Feb 2025 08:42:19 +0000
ROA not before: Wed 26 Feb 2025 08:42:15 +0000
ROA not after: Sat 19 Feb 2028 08:42:15 +0000
asID: 17561
IP address blocks: 45.197.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77839 (0x1300f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 08:42:15 2025 GMT
Not After : Feb 19 08:42:15 2028 GMT
Subject: CN=67bed3ea-3763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:e3:8b:35:c7:9c:78:91:a6:3a:e7:c5:ee:
e0:2d:d2:ba:97:b6:e6:f8:a0:8a:bf:41:ac:93:d3:
05:48:b2:7b:03:54:0f:94:6f:ae:f3:6f:00:3d:23:
5c:6f:d7:fb:1f:bb:96:ba:7b:38:03:a9:0b:27:71:
61:13:6b:b8:ca:c0:f5:4c:a4:0f:f7:e3:a3:a6:1e:
1c:6a:82:5d:7f:5c:ab:2f:02:1d:a8:b9:2d:e6:fa:
ed:41:63:54:57:50:33:88:4b:fb:43:8b:4b:be:f7:
74:85:ba:ad:de:a1:63:0b:cc:58:bc:f8:a3:db:67:
3c:fb:e1:a4:00:b0:7b:2d:b0:55:54:4b:b4:6d:6c:
ae:a4:7f:9b:6f:2c:dc:13:09:bc:7e:22:cd:3f:bb:
4a:20:8e:0a:3e:1e:4c:3b:ab:cd:f6:14:8a:c9:38:
ba:aa:ed:d2:0b:63:83:71:87:f3:80:4a:6f:9e:14:
8b:51:e4:99:ca:8c:b6:d8:e4:8a:18:c3:9b:28:fd:
00:79:79:93:90:10:1c:c5:01:3b:57:27:37:79:c9:
73:b5:b6:9c:22:47:bd:d5:06:ea:4e:c8:dc:ac:64:
63:cc:0a:a5:d7:4e:ef:7c:3e:bf:28:fe:63:71:ac:
fb:4b:3f:d3:8a:58:fd:d3:a4:8e:fd:cd:f2:96:8a:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6C:AE:87:04:E4:C5:8D:0F:F4:09:BF:AA:FA:67:CB:B6:E0:87:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/965EC7A4F41D11EF8C9CA955762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.59.0/24
Signature Algorithm: sha256WithRSAEncryption
94:89:15:7e:29:86:7a:35:b0:56:c8:12:07:86:4b:d7:aa:4f:
45:bc:7a:83:98:47:68:b2:e5:7c:21:fe:ad:15:85:7f:87:e8:
4e:39:ce:b6:a2:8a:27:8f:c3:09:ba:e5:52:cd:e7:4d:27:14:
e6:ab:cf:a8:0a:64:66:46:60:54:f5:8a:68:63:ae:e8:36:b6:
86:c0:4e:2e:8d:03:9f:9f:12:6d:d0:8e:5f:e6:52:76:e9:36:
8f:f4:30:6a:bd:c0:5b:fa:89:50:57:f4:7e:5b:e1:27:bc:bf:
e6:b3:81:96:7f:fd:71:31:58:95:ee:47:bb:ac:34:73:f5:25:
d9:2c:08:4d:f1:e1:92:b8:d4:65:4a:34:80:b9:b5:b0:9d:73:
ce:b1:a3:eb:bc:df:0f:84:49:b8:9f:3a:59:cd:20:6e:8d:55:
df:25:23:87:f7:c4:fe:7a:70:6e:c4:90:94:d6:9b:93:0b:08:
e8:75:87:95:40:8b:a9:19:7a:34:72:4d:f0:b9:95:2f:62:00:
13:df:59:d3:c8:d2:76:f6:c2:0f:0e:6a:03:06:b5:cd:b8:29:
c2:ec:b1:c7:a6:89:4e:f3:91:6e:b3:4b:36:ec:b2:58:68:7e:
b7:6d:d0:6b:23:ff:36:55:8d:ca:d4:d0:85:09:a8:9b:fd:08:
76:74:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:55 2025 by rpki-client