Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC085056FB2F11EF88F55787762E951A.roa
File: BC085056FB2F11EF88F55787762E951A.roa (raw, json)
Hash identifier: U24hB5u51/wqJoHclchBlnK1d1qh804v7pygSnX21gU=
Subject key identifier: B5:80:A1:7B:62:93:D6:FC:76:34:4F:1B:BD:80:F5:39:20:09:3A:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC085056FB2F11EF88F55787762E951A.roa
Signing time: Fri 07 Mar 2025 08:39:51 +0000
ROA not before: Fri 07 Mar 2025 08:39:47 +0000
ROA not after: Sat 12 Apr 2025 08:39:47 +0000
asID: 51847
IP address blocks: 45.207.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82918 (0x143e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 08:39:47 2025 GMT
Not After : Apr 12 08:39:47 2025 GMT
Subject: CN=67cab0d7-2c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:e9:c7:22:1c:00:ad:45:71:bd:47:d7:c7:
a9:a3:7b:62:0a:ca:6d:6a:de:50:00:2b:8d:8e:5e:
e3:34:42:5c:03:3f:bb:8f:0f:04:b2:bf:cf:e0:70:
56:0b:ab:a9:8d:6c:67:15:59:39:d6:2f:2d:06:ae:
1b:01:78:5f:98:fa:1f:16:fb:c5:2e:0b:95:75:ea:
4f:58:8c:a8:20:5c:c4:31:ca:cd:37:79:4e:a7:d2:
e7:88:08:b7:01:2e:22:87:6e:02:29:5a:6d:d8:57:
87:4a:7a:8e:ae:2e:56:7d:f2:d0:31:f4:2f:36:f9:
0d:4b:61:8d:b9:68:b6:fa:df:88:db:14:62:f1:1a:
75:75:33:18:da:38:0a:92:c0:16:7c:45:f3:1a:03:
26:d7:f9:a0:e8:54:4d:09:23:70:92:3d:70:a2:87:
8f:24:6d:9f:1b:3a:f5:66:c3:28:6c:31:49:62:71:
4f:61:d6:38:ba:b8:d7:20:96:c3:87:e2:06:27:0d:
5d:8e:b1:a6:bc:d3:6c:75:0d:86:cb:c3:a1:4e:d6:
14:ab:4c:0f:0b:2c:9c:15:72:74:46:2b:bf:c9:db:
fb:c9:da:88:4c:ee:b8:2b:67:be:24:c7:7c:ac:f7:
f5:8e:ff:4a:16:bd:d1:2c:1f:95:c7:75:d2:3e:b7:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:80:A1:7B:62:93:D6:FC:76:34:4F:1B:BD:80:F5:39:20:09:3A:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC085056FB2F11EF88F55787762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
33:a2:40:5d:78:13:9a:af:4c:6a:2c:2f:a3:85:5d:cc:b9:93:
2f:1a:72:d7:c2:16:a4:06:06:84:74:67:aa:bb:59:4c:e2:a1:
ef:19:51:c5:d4:ac:55:56:f3:d1:8a:b7:60:87:56:6a:0d:a6:
80:ef:4d:6f:d0:e7:97:3c:ca:c9:b8:e7:ed:a1:cd:9e:cf:34:
44:74:6d:2e:ea:c2:fa:6b:1b:f5:62:8e:00:f5:c4:b7:0c:7a:
a1:c8:68:38:59:29:77:83:af:ef:51:27:ee:5e:49:36:d3:f0:
9c:62:a5:83:06:8b:10:38:2d:9a:fb:a5:4f:cf:65:a1:ce:d6:
49:03:39:61:c5:b6:f7:b9:d6:f4:61:d3:f6:44:fb:b8:61:7c:
f0:8c:7c:08:c9:a4:11:17:f4:17:a2:ad:31:04:16:be:cd:db:
c9:03:b2:dc:8c:6a:34:39:81:87:9b:52:5a:70:c3:82:48:6b:
3b:8b:b2:c2:ba:94:a2:e6:93:c5:d4:05:b8:1e:88:74:c5:9a:
56:2d:fa:5b:11:68:c9:88:09:00:2c:44:95:7d:3d:50:5f:9f:
81:f1:f0:ce:49:19:35:31:ad:2e:c0:7b:c1:9f:84:d2:5a:b4:
31:04:15:1d:ee:38:a7:e9:c5:d2:d8:20:86:5b:ed:d2:dd:9c:
75:51:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:49:02 2025 by rpki-client