Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADEB01F4F43A11EF80FE7C9E762E951A.roa
File: ADEB01F4F43A11EF80FE7C9E762E951A.roa (raw, json)
Hash identifier: v489/t9L2dVoFtt8+/V5Kyyp3kqRv7GT267RHYDYjmU=
Subject key identifier: 50:E0:03:A1:83:1D:28:37:AE:A6:77:A9:3A:91:8E:13:3B:20:E9:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013238
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADEB01F4F43A11EF80FE7C9E762E951A.roa
Signing time: Wed 26 Feb 2025 12:10:33 +0000
ROA not before: Wed 26 Feb 2025 12:10:30 +0000
ROA not after: Sat 19 Feb 2028 12:10:30 +0000
asID: 17561
IP address blocks: 45.199.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78392 (0x13238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:10:30 2025 GMT
Not After : Feb 19 12:10:30 2028 GMT
Subject: CN=67bf04b9-1ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:5c:a5:10:78:2d:3e:27:3e:ba:64:30:6a:
28:bf:0c:6c:d6:f1:3d:0b:e8:be:fe:2d:59:cf:b0:
6f:e5:93:ff:85:a8:07:d7:45:b0:8c:c0:88:6b:51:
ad:e5:de:fb:f1:ab:ed:cf:6e:56:39:ee:ff:09:8a:
1d:3a:81:f8:a8:97:6a:d3:d1:d3:71:a7:98:ff:e3:
d1:3b:dc:63:59:2d:dc:4e:12:4a:d8:bb:24:f3:dd:
db:ab:e6:8d:f4:af:d7:22:5e:29:63:a1:26:74:31:
07:7a:90:d8:a4:95:0d:b5:9d:d7:da:56:cb:7c:87:
cb:61:2e:26:f7:c9:91:f5:b3:7b:2d:b6:68:bd:95:
82:81:dc:5f:b7:ad:81:32:2d:b4:09:cf:b5:2a:2e:
1b:5d:ca:14:46:88:0f:5d:91:78:89:a9:be:a0:5e:
a3:30:a2:2e:dd:bb:b0:8c:ac:08:a0:32:b6:78:11:
0b:c9:f1:31:92:0b:44:55:dd:7d:bc:b7:e5:57:a2:
5a:a7:70:6e:15:7c:e8:a3:de:ff:6a:f4:ed:4d:16:
cf:fa:f8:bb:7b:94:c0:65:ab:a5:7f:34:61:ef:e9:
0a:bd:34:1e:9c:57:4b:0b:20:31:b0:cd:d3:be:db:
17:4c:ce:56:fa:cf:0a:ac:4f:17:49:82:df:db:d3:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E0:03:A1:83:1D:28:37:AE:A6:77:A9:3A:91:8E:13:3B:20:E9:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADEB01F4F43A11EF80FE7C9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.150.0/24
Signature Algorithm: sha256WithRSAEncryption
58:07:65:37:41:ec:85:b3:cb:11:ae:df:b2:f4:ca:ac:df:ff:
91:96:a0:9c:44:cc:cd:94:c6:d8:d2:28:49:55:ae:a3:cc:28:
a7:34:ce:76:3c:a7:f4:4e:a1:01:53:bb:a5:97:42:19:b7:2b:
ea:dd:c8:e4:c8:51:85:2e:d9:de:f7:77:6e:9b:99:7b:fc:27:
84:69:b9:37:37:41:e4:50:f3:33:0c:bb:28:80:58:55:d9:0e:
cc:4c:09:02:2b:b1:2d:ac:5d:1a:07:bc:90:3b:2a:42:e5:03:
95:a2:5a:c0:d2:ce:9b:e4:29:c5:c9:d9:88:cf:ab:33:59:ce:
7b:3f:a5:3e:80:13:76:c8:9a:d6:5d:e8:94:92:4c:72:1b:56:
fa:8f:87:93:53:47:da:29:e6:6d:fb:30:53:16:59:cb:e9:81:
5c:e3:81:69:99:a4:61:fb:6a:65:3f:ac:f8:3e:1f:08:73:c9:
88:a7:04:60:7c:33:fa:16:07:88:fe:32:76:55:4b:ce:c5:17:
b6:98:e8:d6:8a:d1:80:12:02:a0:8b:25:09:f2:e7:11:64:42:
99:16:26:c5:44:30:dc:c0:e7:6a:16:83:00:22:7a:1d:0b:37:
8c:e5:f0:69:ae:3e:44:f8:76:8c:82:e5:15:5b:6f:9e:da:3c:
46:af:d0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:55 2025 by rpki-client