Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1AA1746F8F611EFAA422882762E951A.roa
File: C1AA1746F8F611EFAA422882762E951A.roa (raw, json)
Hash identifier: fZUPL4eQZwSxt585FTU0FNIcZ0Uin6cV/gd3zhofOZQ=
Subject key identifier: 00:D4:BE:60:60:CF:09:4B:3E:00:6D:0C:2A:24:F2:B6:A3:72:47:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014318
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1AA1746F8F611EFAA422882762E951A.roa
Signing time: Tue 04 Mar 2025 12:46:57 +0000
ROA not before: Tue 04 Mar 2025 12:46:52 +0000
ROA not after: Sat 07 Mar 2026 12:46:52 +0000
asID: 137962
IP address blocks: 45.195.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82712 (0x14318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 12:46:52 2025 GMT
Not After : Mar 7 12:46:52 2026 GMT
Subject: CN=67c6f641-bc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:36:75:79:d8:3f:42:34:4d:a8:5c:02:8f:
17:7c:2f:7b:cf:e7:29:08:5e:5f:31:95:44:a9:1e:
10:31:57:7d:02:ff:b5:c3:23:49:30:b0:8b:ab:de:
cb:66:14:d1:74:ca:f7:20:e1:5e:25:c6:59:32:5e:
67:96:b1:7d:38:a5:be:31:6c:c8:bb:1e:0e:01:56:
5d:ee:ae:76:71:fc:a6:ec:21:5d:42:5c:95:6d:09:
af:71:d6:0e:5a:7f:82:9b:e5:e0:33:d9:ba:10:3c:
77:e0:bc:de:60:14:85:74:32:42:b1:ed:49:35:40:
08:47:be:7f:e2:0b:5d:46:4f:27:de:b8:ec:80:85:
99:ba:f4:e1:06:80:0b:f6:12:bb:74:66:c6:71:59:
bc:68:94:88:26:b9:e2:f0:1b:62:39:33:4a:de:18:
aa:d2:46:94:b0:cf:21:6f:3a:c9:87:74:6a:10:89:
65:0b:07:5b:f4:7c:8c:52:24:fc:87:66:50:01:80:
62:21:0e:8f:0f:2d:dd:af:b8:35:b1:17:dc:bf:f6:
ae:22:e2:80:6d:c5:a6:a4:62:50:fe:94:ee:2b:b3:
9e:6b:21:f0:51:60:44:77:06:fb:53:f8:6a:08:fd:
f6:7e:b2:c9:99:13:b3:84:89:83:59:fa:68:1e:56:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:BE:60:60:CF:09:4B:3E:00:6D:0C:2A:24:F2:B6:A3:72:47:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1AA1746F8F611EFAA422882762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.72.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:94:6b:86:cc:1b:5f:e2:69:89:b6:03:be:d7:2b:23:c1:92:
a3:7f:db:68:bf:36:4c:d3:cd:93:62:ed:26:cd:d2:ce:7c:1b:
77:ab:5a:d6:76:99:5e:bb:a2:7e:93:f2:8a:c8:82:35:3d:2b:
0f:3c:40:7b:00:4c:cb:68:26:b0:8d:d1:d7:c8:ef:f5:b8:ab:
14:c8:ce:b2:40:3d:b7:9f:da:d3:95:d9:13:65:d6:b7:84:d1:
59:7d:96:6f:55:fd:ab:3a:77:5a:0b:54:c2:37:92:50:39:34:
11:c7:b5:8d:86:e1:77:81:a3:59:ec:78:e5:1d:95:86:e8:8c:
07:0c:69:a2:21:4b:56:f7:db:bb:c1:04:1c:e8:f0:d7:b9:c9:
40:b7:4c:0e:89:7c:6b:b8:3c:4b:1f:f4:ed:1a:ed:14:42:79:
6c:c9:a7:85:01:42:ea:73:ea:2d:5b:7d:fe:44:00:d1:03:57:
7c:49:79:c9:4c:e7:b9:28:bb:11:34:b8:b8:da:3b:4a:c9:26:
d2:45:29:e4:d8:01:32:f1:b8:f6:39:63:11:b8:eb:78:19:8d:
ac:a2:ad:32:fa:2c:d5:34:fa:21:e1:0d:81:9a:a5:02:b7:6d:
db:bf:4f:7e:17:86:59:b3:75:c0:d2:56:87:c0:e4:78:44:4e:
0e:e5:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:00 2025 by rpki-client