Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0F5B328F46911EF8632866A762E951A.roa
File: C0F5B328F46911EF8632866A762E951A.roa (raw, json)
Hash identifier: wu2CHpd8fqqFJjTfW6yFF8sJY7QXT0vLGw4SonkCOIU=
Subject key identifier: 0E:96:30:69:3E:5B:AC:AF:EA:92:04:AE:B7:AD:25:E3:3D:A0:4D:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0F5B328F46911EF8632866A762E951A.roa
Signing time: Wed 26 Feb 2025 17:47:32 +0000
ROA not before: Wed 26 Feb 2025 17:47:28 +0000
ROA not after: Thu 19 Feb 2026 17:47:28 +0000
asID: 984
IP address blocks: 45.201.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79323 (0x135db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:47:28 2025 GMT
Not After : Feb 19 17:47:28 2026 GMT
Subject: CN=67bf53b4-b607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:c7:e6:a0:f7:d9:92:fc:f8:c2:a3:b9:11:
57:5f:16:34:96:4d:8d:30:64:21:e1:82:ab:53:56:
27:b4:85:60:99:99:0e:83:ee:9c:3e:c4:69:8c:90:
b7:6d:2a:ca:af:43:ed:0f:6a:4b:50:07:e7:73:eb:
1f:c8:dd:7a:a4:24:28:e5:f5:fd:43:b6:fc:33:5b:
88:ba:a2:c0:80:b6:13:73:9a:04:4d:dc:6e:c8:7a:
93:58:0e:ba:34:e0:9c:3c:68:f1:82:2f:00:dd:16:
22:7c:a4:e6:1f:c8:bc:27:92:d5:84:d3:4f:71:4f:
8a:16:1a:33:f3:25:df:77:4f:6d:8b:c9:a2:55:b6:
2d:61:69:b2:ef:86:0b:c9:35:76:b6:9c:df:c5:fa:
1f:02:42:96:58:f4:f9:f0:21:5d:0c:db:70:c5:63:
78:b0:a0:f2:b5:26:83:12:ad:fc:40:02:b1:08:49:
35:6f:a5:d9:32:03:1e:42:d2:7e:d5:40:65:64:56:
db:12:ed:6a:18:2e:66:16:92:4c:14:56:af:16:52:
2d:ce:2b:d2:c5:9e:51:b4:e3:04:7a:b5:d4:25:ac:
ba:aa:d7:87:e5:d5:51:e5:46:24:7e:b5:a2:87:73:
ed:c6:42:81:12:2e:98:00:ea:37:6e:f9:57:f1:df:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:96:30:69:3E:5B:AC:AF:EA:92:04:AE:B7:AD:25:E3:3D:A0:4D:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0F5B328F46911EF8632866A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.52.0/24
Signature Algorithm: sha256WithRSAEncryption
84:93:71:12:bc:76:b6:0e:38:5b:9c:4e:12:6f:56:56:0d:c4:
b4:ff:ec:3f:60:f2:32:15:d6:36:ee:60:47:0c:55:97:d3:35:
83:15:7b:99:4e:b6:02:54:ec:ac:88:a4:7e:73:59:66:d8:36:
ee:dc:70:d2:a0:1d:68:a2:ec:91:89:86:a3:c1:3a:4d:bc:f1:
a2:bf:80:2f:70:8b:16:6f:92:c2:33:e3:ae:ff:72:b8:ec:dd:
f6:5e:7a:4c:13:fd:23:81:35:5a:b8:8b:c6:70:ae:4c:71:f7:
31:4e:e9:b7:1a:11:46:b6:3d:f3:8a:e9:71:2f:d4:e9:2c:ac:
47:6c:2a:1d:88:c2:31:df:85:d8:5b:92:2f:3d:44:b1:8a:84:
7d:7a:7f:1f:45:e8:7e:9d:4c:56:f5:d0:2a:c9:98:33:69:c2:
ad:f7:6b:6a:67:fa:8c:bb:3f:0c:49:df:15:2d:38:8d:64:4c:
6c:b0:2c:98:a4:d2:6f:ed:fc:55:15:09:7c:37:49:5c:82:e0:
6d:69:cf:88:22:22:7c:d4:c9:df:e9:6a:65:d6:e1:9b:b5:b1:
08:b5:c2:75:b2:c9:94:dd:69:98:5b:5e:a0:ed:5e:31:19:67:
95:bc:91:c1:e6:a7:d3:68:23:b7:a3:77:19:99:51:b2:e0:ab:
d5:e7:99:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:26 2025 by rpki-client