Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C070D6B8F43111EF9B083961762E951A.roa
File: C070D6B8F43111EF9B083961762E951A.roa (raw, json)
Hash identifier: +/cZzssq9CIuNAhPDBKtoC5dBQa6NVuISuUlDX+7A78=
Subject key identifier: BA:01:D4:EB:32:F5:A4:60:D6:D1:3E:89:3E:0F:07:09:F2:57:3B:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01319A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C070D6B8F43111EF9B083961762E951A.roa
Signing time: Wed 26 Feb 2025 11:06:39 +0000
ROA not before: Wed 26 Feb 2025 11:06:36 +0000
ROA not after: Thu 19 Feb 2026 11:06:36 +0000
asID: 328608
IP address blocks: 45.205.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78234 (0x1319a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:06:36 2025 GMT
Not After : Feb 19 11:06:36 2026 GMT
Subject: CN=67bef5bf-b008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:1e:3e:46:01:82:fe:73:4f:03:c9:20:50:
34:c4:60:4f:04:cc:b4:dc:3e:a6:e8:52:9c:d9:60:
ce:aa:b6:ec:13:0e:79:57:3e:94:3e:00:82:0d:90:
25:4a:00:b0:15:84:19:df:9a:8b:19:6c:28:6c:0d:
bb:c2:1f:67:4c:ac:fe:7e:eb:77:b7:3a:81:e3:d8:
2f:fd:c0:80:85:71:78:e8:62:a4:52:2e:51:a9:af:
e3:41:b9:28:79:67:6d:16:20:50:c7:f9:42:41:fc:
43:f3:33:f8:29:96:16:87:26:95:a0:5c:50:39:60:
2f:66:c5:87:c5:8d:2a:9f:88:57:4a:18:0e:be:83:
db:0f:f5:7d:45:6f:4e:0a:a8:73:90:56:86:5f:e7:
a7:7d:f3:45:be:c6:3f:9d:d8:bf:83:0c:e1:43:80:
c4:b1:7d:bb:d0:2a:00:85:d4:d9:d9:38:f6:13:26:
04:00:15:1f:94:84:1c:5c:6f:23:1b:31:4f:63:9b:
9e:a4:0d:00:49:85:09:21:9b:4f:b6:d1:4d:52:72:
36:e7:f4:20:bc:b1:ca:31:41:b3:08:bc:b8:b9:d7:
6c:06:07:51:53:a4:55:06:06:81:66:35:b6:d8:78:
fa:f8:ed:2f:3e:de:6c:9c:00:c3:a7:21:02:c9:37:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:01:D4:EB:32:F5:A4:60:D6:D1:3E:89:3E:0F:07:09:F2:57:3B:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C070D6B8F43111EF9B083961762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:58:46:6d:d5:32:a8:e2:3e:6b:2c:7e:82:18:8a:f6:02:d2:
10:f6:78:af:e0:80:68:18:12:d1:bf:d0:90:3a:db:68:41:0d:
17:25:5c:96:25:4f:85:5d:94:82:21:40:26:7b:ce:b4:08:f5:
4e:c2:62:e5:d1:3e:30:4c:38:70:08:d9:a6:77:7d:9b:35:d9:
fe:fd:5e:bc:e3:ae:87:89:e7:73:cd:5e:83:61:3c:88:dc:ca:
57:53:b7:54:c4:da:02:e6:8f:61:c0:78:70:68:3f:1b:37:61:
f0:b9:0f:32:85:c3:75:6f:4f:39:6a:06:41:99:ec:d8:6c:57:
e9:05:c9:07:3a:ef:15:8f:f2:95:09:79:a7:f4:61:e9:fa:86:
34:92:0e:0f:2b:02:32:4b:09:2f:75:8b:22:a2:ba:60:cf:88:
ea:ef:f9:12:54:96:83:55:6e:b0:21:56:7d:8a:a5:e5:b9:28:
b4:20:81:38:af:b8:d4:f0:15:a5:e6:ea:27:ba:e7:1a:f3:f3:
46:b3:0f:d4:9a:63:2b:4b:a6:4b:bb:bc:7c:f1:48:84:be:55:
63:a7:f9:79:37:45:d4:b2:18:33:a3:51:cc:fb:7f:23:d9:df:
51:a7:72:fc:2c:ba:40:8b:28:fe:0c:53:b0:bf:8c:bf:8a:84:
52:7c:83:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:46:32 2025 by rpki-client