Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61BF034F14011EF8669AD55762E951A.roa
File: A61BF034F14011EF8669AD55762E951A.roa (raw, json)
Hash identifier: 79+XD2x71CLWK2SkrhzIVgF+K28nZVBdWsgUuE+0XgY=
Subject key identifier: 96:73:F5:22:49:30:36:63:32:83:A2:CD:92:5E:40:FB:EE:E3:36:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0128E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61BF034F14011EF8669AD55762E951A.roa
Signing time: Sat 22 Feb 2025 17:15:44 +0000
ROA not before: Sat 22 Feb 2025 17:15:40 +0000
ROA not after: Fri 21 Mar 2025 17:15:40 +0000
asID: 25160
IP address blocks: 45.201.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76008 (0x128e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 22 17:15:40 2025 GMT
Not After : Mar 21 17:15:40 2025 GMT
Subject: CN=67ba0640-d217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:63:c9:6c:43:1f:f2:4e:e4:69:fd:c2:88:
59:af:90:c1:3f:d3:f9:aa:60:d0:78:a9:9c:68:ae:
8f:77:94:65:a2:80:e1:0c:2f:0b:3f:6c:45:cd:ba:
fa:99:95:d4:0d:f5:f3:04:ae:9f:72:04:62:32:74:
ab:4a:85:c2:af:87:b2:9b:99:20:0d:51:16:71:d5:
ac:19:e0:d9:19:ec:c5:cd:b4:ee:b1:ed:d7:fa:5f:
34:fd:be:48:38:1c:52:f2:7c:60:7d:70:3f:e3:f0:
13:1f:55:44:36:92:7d:8a:c0:85:2b:22:aa:ce:21:
61:f0:ba:e4:06:cb:f5:e8:66:86:7e:45:11:90:3a:
6c:4c:c5:80:70:3a:6e:bd:dd:cb:cd:4f:a6:f2:e4:
28:d9:ab:63:7d:13:59:bd:17:2c:82:db:94:d6:f5:
aa:3a:b5:df:b1:b8:08:05:be:17:09:b5:60:04:0d:
fa:e4:9a:85:c8:df:da:39:cf:aa:fb:47:2d:43:d1:
f3:3d:88:7e:ba:72:c2:a8:62:d8:62:bc:44:0a:b2:
40:87:82:c3:84:d2:e9:a0:ab:f7:e4:ce:b5:a9:2d:
6b:94:29:a4:f4:84:4c:ba:2a:c7:62:7b:a7:9e:81:
57:d0:00:6c:e5:e2:1b:33:44:af:51:79:ab:c7:32:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:73:F5:22:49:30:36:63:32:83:A2:CD:92:5E:40:FB:EE:E3:36:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61BF034F14011EF8669AD55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:c7:08:c3:72:1f:21:4a:ca:97:3d:31:31:65:f5:e4:4d:40:
55:f3:e7:aa:e4:a8:29:0a:89:bc:14:63:f3:fc:16:ee:30:5e:
d7:3c:1e:0d:60:d1:d8:91:34:f2:ab:cc:31:05:b2:c9:2c:ba:
c1:3b:d1:57:e4:6a:5d:99:58:13:ca:d2:15:8c:c4:cf:43:4e:
01:c7:29:c8:52:03:a3:72:45:56:96:cd:a8:d5:de:c1:65:8e:
6c:9e:07:75:5d:1f:35:c5:2c:5a:46:22:8a:6c:e8:80:60:99:
54:40:93:84:a6:ec:7e:2e:dc:33:5a:55:4a:68:a5:50:f3:57:
b7:58:c3:b7:14:fc:c4:61:33:aa:a3:e6:4d:87:50:9e:89:e7:
a0:a3:76:85:8c:80:84:e9:69:a3:a7:d1:21:b0:28:ca:bb:01:
36:b5:d3:55:f8:a7:72:1d:4c:76:e1:1f:cb:4c:80:0a:dc:56:
40:c3:de:41:f5:03:1f:8f:87:11:dd:34:a7:17:d6:64:66:23:
73:95:8c:28:8e:24:d2:45:ad:c2:7f:f7:11:93:00:ed:52:8c:
1a:e1:d7:91:86:05:e4:47:9c:88:9e:0b:56:74:a8:a9:98:41:
6b:62:55:4e:30:3f:ab:2d:1f:63:2d:28:74:10:00:fb:db:00:
6e:a6:3c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:41:37 2025 by rpki-client