Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C99BC48C0CBE11F0A654B5A5762E951A.roa
File: C99BC48C0CBE11F0A654B5A5762E951A.roa (raw, json)
Hash identifier: rDgOL0hCCO3xuq6GNrH5ouWdvXhz/GPoyVbGc+J6p+I=
Subject key identifier: 01:A6:9C:0A:71:58:C1:FD:F9:C5:30:B2:EF:99:C6:93:F6:C8:24:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C99BC48C0CBE11F0A654B5A5762E951A.roa
Signing time: Sat 29 Mar 2025 16:56:41 +0000
ROA not before: Sat 29 Mar 2025 16:56:38 +0000
ROA not after: Mon 07 Apr 2025 16:56:38 +0000
asID: 401615
IP address blocks: 45.196.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84160 (0x148c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 16:56:38 2025 GMT
Not After : Apr 7 16:56:38 2025 GMT
Subject: CN=67e82649-4d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:76:55:6e:1a:bc:90:19:eb:6c:b1:71:d4:
3f:ca:40:36:6d:e8:ac:0e:16:e6:a6:d7:60:b3:ca:
2e:60:d3:da:23:d8:78:ee:1d:74:df:4d:d2:68:3b:
04:ae:fa:2f:ff:8c:cb:58:6b:8d:1d:b1:aa:67:b7:
af:28:7f:11:a0:41:66:d4:eb:9d:76:7c:3f:ff:42:
f2:a2:8e:06:12:5c:40:66:34:42:64:c2:4f:38:9f:
f3:67:d1:c6:f8:64:1c:34:d2:f7:09:f2:66:95:e0:
02:07:c2:5a:32:74:a0:ec:f0:29:75:43:f2:09:38:
f1:8b:d2:e5:db:4e:86:a7:9a:e9:ea:9d:50:cf:d0:
fe:03:a7:39:48:de:c4:af:99:06:84:38:40:1a:fc:
26:c7:ad:c2:84:31:f7:77:74:6d:86:77:ea:f9:9e:
90:8f:7b:48:f1:a7:31:63:ba:15:c0:c6:fe:54:38:
e6:ac:97:80:0a:52:95:82:71:c5:97:42:53:16:08:
0d:65:fa:cc:a1:b5:bd:81:10:f8:76:3f:19:22:58:
41:44:2b:dc:0c:d4:60:81:ff:13:53:bd:f6:0a:1b:
1f:82:38:43:94:98:7c:c4:36:5f:9a:af:68:0f:1d:
d0:b2:9b:62:f1:76:8b:b9:21:38:1a:00:ed:82:cc:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A6:9C:0A:71:58:C1:FD:F9:C5:30:B2:EF:99:C6:93:F6:C8:24:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C99BC48C0CBE11F0A654B5A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.218.0/23
Signature Algorithm: sha256WithRSAEncryption
96:52:df:6d:45:72:fb:2c:31:02:e3:26:33:f8:a4:ae:2e:49:
49:a8:57:5d:9c:3a:72:a3:25:97:91:e9:21:61:dc:56:32:a0:
62:65:91:1b:3e:b2:7e:0f:f1:a2:c0:1b:82:79:54:a6:63:74:
78:4a:99:8e:4f:89:03:e8:07:f0:c7:35:12:4d:f6:9b:a6:85:
90:b5:4b:33:41:8c:13:30:c1:32:7d:7b:45:9e:cd:65:bf:d9:
18:3e:fc:2f:e1:61:bb:60:94:10:ac:ef:a3:48:3f:c5:0e:bb:
dd:ec:15:ff:af:0d:cf:44:f3:f9:e2:30:9f:32:ec:31:9f:3d:
f1:ce:2a:ab:c5:f6:e6:cf:fc:f0:61:d8:84:54:6b:60:24:a2:
dc:7d:51:42:71:b8:5f:22:f1:2a:46:18:c0:26:ec:6c:5f:f9:
78:a6:6d:72:d6:4d:5b:4e:22:09:c2:91:f2:23:26:26:45:8c:
93:dc:c1:8f:b3:3c:58:b3:c8:c8:52:67:94:0d:bc:74:76:a0:
5c:36:f5:95:9c:0f:ba:00:a0:46:ab:59:5f:d6:47:8f:cd:d3:
2a:03:ff:d4:30:83:3a:9d:b1:fb:78:a0:e2:59:c1:57:b0:ff:
33:a2:ba:7e:2c:2b:ae:02:08:60:08:68:97:ab:3d:a3:58:97:
81:1c:24:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:46 2025 by rpki-client