Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9814C6A80AD811F0B42BA779762E951A.roa
File: 9814C6A80AD811F0B42BA779762E951A.roa (raw, json)
Hash identifier: 9bHJwH0pMecK3sLBcPZknLpnKC67UlklSZsP+EWa7Lg=
Subject key identifier: 3D:7D:1C:DC:56:91:35:27:32:9E:3F:F0:9A:94:AE:C5:9A:33:D9:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014863
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9814C6A80AD811F0B42BA779762E951A.roa
Signing time: Thu 27 Mar 2025 06:56:23 +0000
ROA not before: Thu 27 Mar 2025 06:56:18 +0000
ROA not after: Sat 03 May 2025 06:56:18 +0000
asID: 61112
IP address blocks: 45.207.156.0/23 maxlen: 24
45.207.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84067 (0x14863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 27 06:56:18 2025 GMT
Not After : May 3 06:56:18 2025 GMT
Subject: CN=67e4f697-a72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:08:23:af:05:ae:e1:8a:07:6e:9f:0e:5a:
0c:49:99:59:5d:e9:1e:ae:e7:75:a7:37:e5:55:34:
83:23:1e:8b:4a:0d:8f:52:9c:ff:65:c9:a1:8a:b4:
c3:23:45:3f:94:8f:dd:38:0f:a8:04:3a:cb:2c:68:
f1:2e:a2:3e:04:d8:8c:c2:7f:81:0b:f7:16:ba:95:
7e:c3:cb:be:96:e2:b8:bb:42:59:10:44:00:ed:2f:
91:ce:50:35:e8:ec:89:1f:60:5f:23:d7:29:47:ae:
d7:3a:76:2b:3d:2d:4a:e3:81:74:45:da:a4:cf:1b:
dc:cd:a5:32:bc:9f:71:f3:be:82:03:dc:c7:c6:e8:
c5:43:dd:a9:58:00:9c:2b:2c:de:9a:ed:80:0e:20:
be:e6:90:36:5a:7a:71:ad:5d:da:17:7c:c8:45:ac:
01:e3:6b:fb:27:9a:8a:fe:a1:c5:67:ea:5d:3a:86:
0a:6d:49:ae:41:3a:cb:ea:b0:15:b8:91:98:ab:82:
0d:78:59:dd:e8:65:57:4b:f7:b3:8e:c8:a9:18:b5:
80:d5:fa:39:29:5f:5c:24:f6:6b:ba:ed:5a:f5:1f:
d8:b3:ee:7f:8a:07:cd:47:8a:0d:1c:49:0e:bb:37:
3b:9c:a3:f3:a6:01:26:50:a0:7c:43:14:4a:2f:03:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7D:1C:DC:56:91:35:27:32:9E:3F:F0:9A:94:AE:C5:9A:33:D9:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9814C6A80AD811F0B42BA779762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.156.0/22
Signature Algorithm: sha256WithRSAEncryption
84:b4:59:d3:89:83:16:f1:ba:3b:9c:f5:4c:cc:9d:ce:e5:cf:
ca:12:7c:33:c4:98:9a:0f:19:d6:dc:4d:1c:d1:2c:44:0f:21:
5c:2f:d1:7a:66:0c:d0:df:d8:cf:69:26:18:16:c5:2e:b6:08:
7c:d3:7b:e1:02:fe:dd:f6:cf:ed:62:45:61:54:07:24:5b:7a:
1c:dd:f0:eb:9c:06:7f:fd:20:8a:3e:f3:9a:4a:78:f8:ad:14:
dd:fa:5d:f9:6c:18:ad:58:ee:63:4a:f4:47:c9:24:f6:8d:a4:
ac:e5:e9:1c:ec:51:2d:2b:8c:b5:2d:c3:ce:e2:3b:5e:c8:4a:
3f:83:e5:d2:2c:cb:59:3c:56:2e:47:fa:8d:69:ef:06:fe:ce:
d5:d1:06:ba:63:0b:0b:b8:1a:05:77:24:54:d0:d5:8e:e2:db:
90:95:bf:ca:e5:17:56:a1:12:6e:21:8c:55:67:44:14:73:1c:
a4:d5:3b:9f:ff:cb:05:f7:b1:0d:86:fa:e9:34:5b:5a:74:cd:
82:28:52:35:21:d7:df:63:df:d8:e0:a1:10:6e:ff:dd:48:7e:
fa:82:97:1f:52:bc:13:a4:85:1c:61:ae:13:cc:80:a4:16:a1:
8c:a3:10:12:83:ae:1a:43:13:4d:2e:78:12:5d:b8:4d:05:de:
59:9b:7f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:59 2025 by rpki-client