Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF17ABB4E54C11EFADC05975762E951A.roa
File: BF17ABB4E54C11EFADC05975762E951A.roa (raw, json)
Hash identifier: k7bEF9ZhetRMoqE2wi8turpq6dl+dV0hkuyt/yIacdE=
Subject key identifier: FC:E1:AD:3D:C5:A0:5A:04:00:22:44:6A:4F:9E:C0:C2:FD:09:1F:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF17ABB4E54C11EFADC05975762E951A.roa
Signing time: Fri 07 Feb 2025 12:12:06 +0000
ROA not before: Fri 07 Feb 2025 12:12:02 +0000
ROA not after: Wed 21 Jan 2026 12:12:02 +0000
asID: 984
IP address blocks: 45.192.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73051 (0x11d5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 12:12:02 2025 GMT
Not After : Jan 21 12:12:02 2026 GMT
Subject: CN=67a5f896-3166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:f5:33:11:2e:7a:13:0c:85:5b:f3:db:ab:
0a:1e:30:ec:9c:61:c3:a6:65:ae:fd:be:43:9f:8d:
d4:e1:f1:9e:3f:b7:ec:81:f0:03:87:37:d3:73:0b:
37:8e:fe:68:00:01:a2:f6:f8:a8:fd:c6:0d:a6:1f:
42:3b:f1:e9:fc:17:e7:2f:3a:08:7a:08:db:10:1e:
1a:93:6b:be:ff:cc:d3:64:d3:7d:f5:e8:d3:fe:71:
c9:93:3a:26:13:55:90:db:39:bd:68:17:5a:3c:5e:
79:2f:05:5e:61:78:0a:17:f0:ea:1c:fb:54:02:dc:
56:69:e1:4a:ba:86:1d:70:dd:17:8e:d7:75:fd:1d:
92:ec:8a:d0:d0:51:34:0a:d3:f4:d5:ee:89:bb:fa:
fa:a2:ee:5a:f2:ce:91:84:cd:12:74:85:dc:3a:32:
80:bf:ad:d4:48:48:60:c5:4f:e1:3e:95:52:d2:a3:
08:32:10:02:30:af:0f:b3:0b:52:bb:4d:82:d3:78:
c2:fa:27:96:2f:50:0a:b4:5b:e3:f3:f4:53:fd:19:
e5:f5:fb:3e:21:4b:b8:31:cb:c0:21:38:1b:73:cb:
46:2c:33:74:b8:4f:c9:a1:2c:b6:dc:6d:56:ff:a9:
f6:52:65:86:e1:fd:79:ef:b8:47:82:18:74:44:e3:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E1:AD:3D:C5:A0:5A:04:00:22:44:6A:4F:9E:C0:C2:FD:09:1F:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF17ABB4E54C11EFADC05975762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.16.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:79:8d:84:a6:b7:b3:ac:27:eb:61:f4:14:7e:78:e0:5c:32:
70:be:f9:e9:78:a3:86:42:4a:dd:dc:a1:87:83:ab:7a:8a:8d:
fa:3a:b7:66:5e:fe:52:a0:d2:4b:51:83:d3:77:69:69:51:81:
52:fe:d7:50:2f:54:08:ea:8d:e8:81:b1:cf:b5:28:7b:af:e6:
f8:4e:58:37:48:09:87:a3:dc:16:ef:2c:fd:61:c8:80:4e:25:
f8:98:71:bd:25:c7:21:83:f5:6b:c6:78:38:58:42:6a:fb:62:
19:28:78:5d:4b:09:c5:c1:db:d7:b5:69:fb:06:ad:4e:2b:75:
b8:3e:ac:64:53:01:b1:8c:c2:7a:74:8b:85:9e:a4:56:80:e0:
70:8a:84:16:6d:bd:08:99:d7:d5:aa:27:7e:88:a6:54:c8:05:
f5:bb:b7:11:22:fa:4d:03:d4:55:d1:e8:dd:77:2c:b8:32:60:
df:89:e9:18:a7:db:3e:3f:2c:5f:df:b0:ac:21:85:34:92:cc:
92:0b:41:1b:66:f1:ac:69:09:9c:ca:9f:c1:e0:8b:a4:ac:38:
fc:2d:be:ec:c4:5c:de:f9:e1:6b:50:37:df:bb:ac:07:e2:12:
32:c2:70:87:7d:84:9f:12:29:88:90:62:52:fd:9f:48:70:74:
66:c7:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:58 2025 by rpki-client