Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9A1F6D4F84811EF99B3FF60762E951A.roa
File: C9A1F6D4F84811EF99B3FF60762E951A.roa (raw, json)
Hash identifier: 91D5ED8PRnRAeLg8isuMPc095T7elM0PjqTYJSMhC9g=
Subject key identifier: 3B:CB:3B:78:58:C6:F9:7E:D9:20:57:FE:E0:7F:FF:5F:42:88:38:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0141F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9A1F6D4F84811EF99B3FF60762E951A.roa
Signing time: Mon 03 Mar 2025 16:01:38 +0000
ROA not before: Mon 03 Mar 2025 16:01:34 +0000
ROA not after: Sat 15 Mar 2025 16:01:34 +0000
asID: 137899
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82419 (0x141f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 16:01:34 2025 GMT
Not After : Mar 15 16:01:34 2025 GMT
Subject: CN=67c5d261-8e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:aa:15:80:10:1e:c3:d7:f9:a8:2e:e6:6f:
31:03:01:09:c6:c7:52:34:a2:4e:3c:19:8e:da:46:
5b:8f:d3:6a:3e:91:22:89:31:9d:eb:28:e5:22:01:
6f:ba:cf:ac:e5:46:2b:a5:01:b8:39:8f:87:3c:81:
10:ac:05:3f:56:6c:08:08:99:0a:00:38:f5:af:b5:
f9:bc:42:8a:e0:51:46:6d:40:a1:22:a9:8e:cb:31:
64:b1:3d:98:9a:84:54:99:72:6c:2b:25:32:0b:35:
95:0e:8f:83:4b:4f:30:0a:fa:a5:4f:86:1c:20:08:
70:fa:26:5b:44:fe:01:eb:38:a6:22:58:cf:ef:c1:
23:3c:2e:f5:b6:70:8c:9b:57:17:0c:f9:fa:43:83:
d5:5c:d1:07:83:83:ff:a0:66:53:b1:f9:64:b5:f9:
ce:73:48:ba:71:d3:07:fa:0b:08:5b:2f:12:21:d5:
f1:67:f5:d5:c9:69:aa:fa:92:b4:a2:87:91:ae:1d:
80:55:a9:cb:c2:46:a3:68:c7:d3:ca:24:59:43:f7:
8a:f7:48:c6:96:ed:6b:39:cc:f6:cf:9a:5b:82:cd:
7a:70:d0:72:ee:47:ef:42:07:cc:5d:39:b2:73:ce:
2e:df:a3:ee:72:03:95:8a:53:d2:0c:bf:db:9b:de:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CB:3B:78:58:C6:F9:7E:D9:20:57:FE:E0:7F:FF:5F:42:88:38:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9A1F6D4F84811EF99B3FF60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
51:85:23:0a:17:3a:57:1f:47:e7:19:e8:b9:fd:54:7a:84:07:
1c:fc:b5:74:a1:be:dc:fa:38:01:1d:e2:cd:eb:1e:48:4e:52:
de:98:53:5c:83:d5:3a:eb:5b:4b:b2:e6:9f:84:32:2f:55:18:
95:0f:d5:db:d3:f9:22:1b:7d:13:b3:ae:8a:ab:1a:02:d0:fb:
5a:f4:ac:34:e0:98:12:0a:a7:90:af:eb:89:6a:10:79:d2:56:
a5:e0:d5:01:57:ef:64:9a:a0:9a:24:9f:28:9e:f9:71:f9:d4:
4b:4f:21:28:73:1e:93:d0:a7:38:59:ae:35:4f:fd:05:6e:4a:
5b:e7:89:db:48:62:91:ac:15:31:49:3b:7d:f3:89:e2:45:c0:
8d:c7:0e:ad:04:29:25:79:c7:ab:61:20:a9:f1:e3:ba:b8:e7:
fc:0c:a9:f1:dc:c5:95:57:d1:6e:d2:1a:e1:14:7d:3d:ed:a4:
e8:03:0e:8e:c5:e5:42:92:2f:ab:23:0d:ae:3e:18:25:9a:0c:
5c:a2:ab:89:28:d7:70:a7:aa:82:ae:e0:49:49:5d:9f:a9:4d:
a5:73:e6:65:dc:67:bb:fe:b8:a0:a3:bf:83:c0:b2:67:c4:71:
6f:3f:32:37:95:4b:0b:dc:16:ff:4c:7e:47:a5:7e:7c:c5:1d:
8b:ed:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:49:16 2025 by rpki-client