Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2AC83D8F39511EF80B562AD762E951A.roa
File: C2AC83D8F39511EF80B562AD762E951A.roa (raw, json)
Hash identifier: uhiaZ4djWkhrHA5ZFCKOzh5JrirMLvjamu9EKJjNc90=
Subject key identifier: E3:9A:D7:BC:8E:8A:C1:1D:6E:42:25:71:C7:DE:C0:1B:B5:EA:AD:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2AC83D8F39511EF80B562AD762E951A.roa
Signing time: Tue 25 Feb 2025 16:30:01 +0000
ROA not before: Tue 25 Feb 2025 16:29:58 +0000
ROA not after: Wed 09 Apr 2025 16:29:58 +0000
asID: 63139
IP address blocks: 45.197.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77469 (0x12e9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:29:58 2025 GMT
Not After : Apr 9 16:29:58 2025 GMT
Subject: CN=67bdf009-3afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:03:07:23:08:4a:66:37:ee:ce:af:1e:9c:
69:63:f7:c8:9b:72:91:b1:93:4b:f3:b6:a5:b9:7c:
fd:07:2a:f8:05:3f:9f:7e:c3:10:1f:62:c6:a2:04:
1e:32:f6:7d:4f:36:ec:7e:0d:d3:68:69:ef:9d:9d:
3c:25:3f:56:f1:28:d5:29:66:23:3f:94:bd:39:fd:
04:f8:30:96:7e:03:c9:b6:fc:d6:a5:55:ca:a2:88:
fe:3b:f5:c1:b7:41:dd:64:7c:a9:d6:4c:a0:67:04:
e0:d6:7b:e4:e4:33:96:1d:c7:a0:79:d4:81:96:5a:
2f:27:37:fb:54:33:65:3a:ae:ca:27:c8:42:93:db:
39:31:94:4e:02:32:7f:92:7c:02:e0:90:3c:f5:37:
cf:d0:c5:1e:ca:51:bb:d4:a6:e0:01:a9:c0:a0:27:
74:4d:9c:b4:82:37:b5:0c:d8:ef:6a:49:f4:6b:23:
74:15:80:08:31:04:0a:09:77:f6:40:67:41:3b:6d:
52:99:36:e5:17:65:47:d7:56:58:7a:63:56:7b:ee:
3f:df:79:13:7d:e8:85:d5:7c:c9:91:0a:16:02:75:
0a:9b:49:ff:05:39:d9:e3:9d:bb:ec:ad:ac:89:74:
c8:24:8a:e8:6a:46:d9:65:d8:e6:d9:9f:f8:59:1b:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9A:D7:BC:8E:8A:C1:1D:6E:42:25:71:C7:DE:C0:1B:B5:EA:AD:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2AC83D8F39511EF80B562AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:7c:36:69:94:16:d3:b6:11:32:7c:d2:d6:bd:f3:f9:8c:cf:
41:61:c5:24:14:6f:18:00:60:fb:e3:be:a4:67:cd:8e:f8:29:
0e:8d:09:a4:60:14:e3:74:32:67:6a:64:8a:17:ed:9d:07:b4:
24:0f:d0:85:6d:f2:21:72:75:b2:5f:61:d1:8c:f0:44:31:bf:
01:b2:5f:c6:89:f9:ff:a0:4a:cf:aa:92:41:7a:fe:0e:7f:e6:
04:c3:28:10:d3:cd:dd:a8:af:4c:0b:55:62:37:c0:5d:c8:1b:
68:10:59:79:ac:de:82:4f:62:b7:fe:e5:3a:e2:5f:89:bc:a2:
8b:13:58:63:9f:d5:d8:23:f1:7e:5e:7d:f0:40:af:76:ae:3e:
58:be:59:02:a0:5b:72:03:03:e5:b1:1b:8b:02:3c:3c:f7:7d:
a5:38:0c:4a:b0:e0:4b:45:f9:0b:87:6a:2b:f0:9e:86:da:12:
ef:e4:53:af:bf:66:74:75:4f:f9:dd:31:db:c0:47:ef:a6:50:
06:03:7f:2f:a2:5f:e9:63:13:18:20:26:3d:44:2e:41:07:eb:
64:b4:81:ed:9e:69:f7:7a:0d:ba:99:62:1a:53:0c:7a:e4:f7:
38:d5:84:e9:04:b5:52:a0:cb:7a:e4:31:8a:7c:b8:1e:a9:d3:
c5:d3:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:08 2025 by rpki-client