Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B56EB5CCDFE711EFB1498C8C762E951A.roa
File: B56EB5CCDFE711EFB1498C8C762E951A.roa (raw, json)
Hash identifier: u/weUmt1GgJAu9fhMl3f/+00eTNu5lZdweo6TqnwGps=
Subject key identifier: 31:18:AE:38:F6:90:B7:17:49:8C:AD:16:EF:63:A6:44:CC:41:0E:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01162D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B56EB5CCDFE711EFB1498C8C762E951A.roa
Signing time: Fri 31 Jan 2025 15:26:15 +0000
ROA not before: Fri 31 Jan 2025 15:26:11 +0000
ROA not after: Sat 03 Jan 2026 15:26:11 +0000
asID: 40065
IP address blocks: 45.205.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71213 (0x1162d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 15:26:11 2025 GMT
Not After : Jan 3 15:26:11 2026 GMT
Subject: CN=679ceb97-fefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:4e:0d:48:a2:3d:66:d0:b2:6d:4c:c4:79:
4c:e0:7c:bc:08:15:a2:f8:8d:ca:58:bd:a9:ee:3a:
d0:4b:2b:5a:88:4d:70:68:5f:dd:67:9f:8c:3b:ff:
ec:9a:28:7d:1e:c2:ff:49:0a:b1:81:d4:a3:0e:64:
f2:77:19:00:7b:ba:ea:ee:49:c3:7e:42:6c:00:2d:
19:8e:5a:24:99:ef:73:67:f5:8d:2b:4e:c2:fb:ef:
af:5e:8b:2c:b6:0f:6e:16:5f:91:56:1f:01:34:b0:
a9:03:63:3c:82:31:f4:a4:fe:4c:bd:41:f3:de:0e:
0d:31:ac:e2:7d:84:5c:6f:c2:ad:26:ca:73:6f:30:
11:aa:f1:89:86:f8:e4:af:2a:f0:f2:36:43:e5:eb:
03:d8:30:6b:2c:52:b1:fb:24:fd:92:83:ed:94:c2:
cd:5c:70:4f:dd:3a:54:75:a3:6e:22:38:67:b0:c9:
40:38:e1:66:a6:82:ca:0a:06:ae:6b:f3:7c:f6:bf:
11:28:2a:9a:c2:61:59:23:3a:c4:6f:77:61:1b:3e:
50:8c:64:c4:2a:ae:04:71:63:b4:4f:66:84:b4:dc:
a3:6d:88:f6:f0:b3:a1:06:f8:18:ba:ef:25:4a:5f:
bd:72:ac:30:24:07:a0:e8:3d:02:8b:bd:c9:86:d8:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:AE:38:F6:90:B7:17:49:8C:AD:16:EF:63:A6:44:CC:41:0E:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B56EB5CCDFE711EFB1498C8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.32.0/19
Signature Algorithm: sha256WithRSAEncryption
43:66:3b:c6:a4:40:3f:b4:51:93:86:b2:aa:2f:14:e3:91:01:
51:e7:73:00:3e:bd:48:be:67:54:b4:00:78:8b:71:2d:43:43:
07:75:22:36:20:3d:1b:28:2d:2d:5c:6a:38:f4:f1:43:8d:f7:
08:01:0c:b8:d3:98:7e:10:4a:61:d8:16:11:98:55:f6:ef:e5:
1a:14:c9:80:2c:35:0f:59:2f:be:d6:bf:ba:b1:ae:cb:90:41:
58:40:ef:ce:1e:06:07:a4:e4:c2:ef:10:04:39:04:98:8d:ff:
3e:fd:ae:a4:92:1c:86:31:7c:8a:30:d8:6a:b4:2b:69:07:6b:
1b:5d:1a:e8:bc:eb:63:be:95:1e:37:05:56:0b:13:e3:12:7f:
26:45:c1:a8:85:1e:3e:1c:fa:35:ea:4c:7e:d7:5d:cb:47:56:
5c:bf:a2:25:1a:7e:aa:bb:71:b7:d4:1c:f9:31:af:c2:6e:31:
63:8b:2d:9f:01:43:3c:6b:c4:3c:4d:fc:75:b2:38:eb:1f:e5:
4e:9d:a8:c7:a5:e7:83:df:b0:26:8e:2c:52:48:b5:ce:34:ed:
ed:54:19:ce:96:d3:cb:18:2e:cf:32:6f:3e:bc:da:d6:4d:02:
58:20:19:71:b8:a9:5e:1a:46:3a:2f:6f:fb:a7:c0:91:b2:54:
f4:6a:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:05 2025 by rpki-client