Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9702D20F49E11EFB562AD50762E951A.roa
File: A9702D20F49E11EFB562AD50762E951A.roa (raw, json)
Hash identifier: 4DXxI7UhMNxRJ5bBvk3yirjq+55VYYry94ff50aLFC4=
Subject key identifier: 5F:89:A6:C7:F3:35:53:86:84:16:FD:4C:B0:C9:41:74:C6:25:97:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013851
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9702D20F49E11EFB562AD50762E951A.roa
Signing time: Thu 27 Feb 2025 00:06:16 +0000
ROA not before: Thu 27 Feb 2025 00:00:12 +0000
ROA not after: Thu 19 Feb 2026 00:00:12 +0000
asID: 984
IP address blocks: 45.201.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79953 (0x13851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:12 2025 GMT
Not After : Feb 19 00:00:12 2026 GMT
Subject: CN=67bfac78-0696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:40:ae:c3:42:03:bb:7a:eb:42:d1:55:ac:
86:88:fb:0c:4b:2f:5e:6f:7e:32:d6:70:d2:ba:50:
07:fd:ed:f4:cd:9f:e1:22:0f:38:72:0f:7f:47:35:
3c:04:e4:c5:2b:b9:72:53:7a:fa:39:46:68:03:1b:
0d:90:4b:6e:21:df:e1:e2:97:0e:e4:9a:95:4a:80:
11:2e:71:5c:66:c9:c4:79:d2:c4:8b:35:b9:92:e4:
c2:c1:0a:09:cd:dd:f7:e9:5e:06:44:51:e0:d4:db:
7d:d8:7c:03:c6:f7:f7:9b:34:38:fb:cc:dc:90:1d:
4a:7a:ca:c1:ea:95:1d:19:5b:28:48:3b:17:38:50:
22:b2:80:e7:ba:aa:75:97:39:45:c7:44:d2:3d:60:
bc:8e:b2:df:48:cc:53:5f:63:52:88:b9:a7:72:a7:
ae:df:69:e1:07:bc:72:40:d1:f8:4c:fd:bf:85:70:
61:a2:e9:a0:09:0d:7f:d0:5d:f9:5b:83:09:36:a0:
0b:88:c9:33:e5:f3:45:bd:49:c3:ee:bf:b7:fd:17:
1b:d5:fd:10:eb:5c:be:2f:ef:d2:1a:05:05:59:7d:
d4:50:f3:22:80:74:de:82:d3:7f:2f:71:d2:2f:10:
84:46:8c:8d:80:5e:83:dd:51:82:28:cc:72:b3:11:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:89:A6:C7:F3:35:53:86:84:16:FD:4C:B0:C9:41:74:C6:25:97:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9702D20F49E11EFB562AD50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.119.0/24
Signature Algorithm: sha256WithRSAEncryption
60:3e:6a:21:87:e1:38:2f:7e:85:42:c6:30:2b:e4:51:9d:6d:
22:cd:d6:e9:dd:f0:53:e5:fb:75:ec:9b:3c:0a:4c:63:58:9a:
38:64:42:1c:eb:d6:62:b3:f9:9c:6d:ed:b7:83:a6:f0:8f:a6:
8c:7e:3a:35:96:dc:b1:de:bb:f6:3c:83:1c:17:75:ea:6b:55:
a7:59:87:c7:81:46:b4:8f:22:66:29:85:8e:37:ae:52:5d:1c:
27:41:03:f0:fe:23:e8:43:85:5b:d7:ce:45:fb:6f:bd:d9:7f:
b4:1c:b1:9b:b0:a9:a3:34:6a:af:03:81:8a:a5:d9:25:f2:18:
45:a8:8b:94:86:b4:97:c8:e6:a8:d5:57:93:e8:08:d3:20:1e:
14:af:f6:8f:bc:62:ba:8f:0d:f0:a9:81:57:e2:74:a2:57:60:
d3:72:fc:b1:00:93:ab:a4:3f:68:73:31:ea:da:89:82:ac:ee:
1c:b6:b8:34:ef:0e:5b:2c:77:fe:5d:e4:c1:80:d5:88:74:95:
e4:5d:8c:1d:28:98:9f:5a:9b:c5:28:5a:c7:7e:ed:ef:9c:07:
a2:37:09:76:76:15:e4:e0:41:c1:a7:de:30:a0:6c:c8:9f:51:
d8:88:12:df:23:f0:88:e2:73:92:ef:96:f4:c0:98:7e:94:4b:
63:3f:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:46 2025 by rpki-client