Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA94D3C4F39111EF9E68CE93762E951A.roa
File: CA94D3C4F39111EF9E68CE93762E951A.roa (raw, json)
Hash identifier: vRALfh9Co8m5vqlpHvdRBKKtHucoKgM2PzasV8tF9YE=
Subject key identifier: 1C:29:F6:AA:A9:DC:E8:C3:1A:1A:AB:95:E0:B7:75:D4:FB:82:87:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E85
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA94D3C4F39111EF9E68CE93762E951A.roa
Signing time: Tue 25 Feb 2025 16:01:37 +0000
ROA not before: Tue 25 Feb 2025 16:01:33 +0000
ROA not after: Wed 09 Apr 2025 16:01:33 +0000
asID: 63139
IP address blocks: 45.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77445 (0x12e85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:01:33 2025 GMT
Not After : Apr 9 16:01:33 2025 GMT
Subject: CN=67bde960-6bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:6c:d6:66:06:32:73:7a:40:00:65:83:74:
7b:f3:07:93:0e:d7:99:8b:20:83:5c:c2:ee:7e:2a:
95:f5:cc:4d:fd:45:4b:c0:98:71:6c:0f:7b:8a:62:
5c:57:f3:6a:72:3a:0b:db:c7:e7:4f:74:6b:19:9a:
f1:16:7f:ee:9e:57:48:bf:c3:a2:45:07:88:d1:a4:
ed:e6:62:26:29:41:0f:ca:53:fd:80:11:f5:dc:f8:
4d:06:f5:33:cb:05:8d:d7:ee:32:e8:a5:aa:7f:fd:
fc:0a:3a:81:3d:94:af:a9:65:22:2e:a1:08:60:3f:
23:88:c9:c3:42:28:84:60:c7:cf:49:56:e2:a7:f4:
ba:b2:e5:e7:4c:5f:a6:c3:f5:b4:ca:b1:3c:17:f8:
b6:47:25:ab:91:f4:06:3e:5f:95:d0:95:39:d7:e6:
90:a3:77:0d:7b:f0:c5:15:2b:ef:60:41:e4:1d:dd:
95:3b:55:83:9b:d4:f1:3c:7e:cc:5c:0f:16:9f:08:
bb:1c:73:ad:b7:dd:b3:a8:dd:49:01:c8:16:ee:79:
01:b9:f2:0e:56:f8:6d:ca:70:cf:95:b1:13:2a:3b:
1f:a3:97:65:82:ec:39:e1:a5:ab:ac:9a:55:25:28:
38:9f:b6:cb:20:95:37:8d:e1:e5:14:91:cc:96:c2:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:29:F6:AA:A9:DC:E8:C3:1A:1A:AB:95:E0:B7:75:D4:FB:82:87:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA94D3C4F39111EF9E68CE93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:58:72:12:c9:8d:f0:9d:ed:72:89:a2:88:89:b2:ab:73:e1:
3b:05:16:16:62:2b:46:45:9d:3f:18:31:40:d2:d8:d5:44:81:
78:7f:f3:23:5e:94:28:0c:18:a1:17:3b:ce:c4:f4:a9:98:c1:
23:bc:bc:eb:66:43:20:de:50:e5:d8:1a:e5:cd:61:a6:6a:ff:
74:9b:ad:12:d6:d8:10:d4:4c:bd:1e:99:4b:f9:fa:a4:cf:af:
23:f6:7b:7e:88:8c:2f:d3:7e:48:1b:f9:c4:c3:29:de:0e:ca:
1c:ec:44:51:91:cc:59:c4:de:7e:f9:50:61:06:b1:08:7b:63:
6a:fc:08:8c:76:c5:b7:dc:c1:11:e0:56:cf:3c:ab:26:a5:63:
94:6a:78:5c:2c:6b:35:3f:7e:9c:96:05:d6:6b:89:63:f8:8a:
61:01:8e:4f:3e:1b:a3:bd:f2:57:98:89:23:19:81:68:59:6e:
b3:12:dc:6a:98:8f:9b:51:ae:af:3f:d1:01:3a:93:b4:de:55:
3d:a0:19:3c:80:dd:a4:42:6f:8d:a1:57:2f:d4:6e:26:ec:be:
41:52:dc:b8:11:ee:61:c3:f9:c3:e5:28:04:b6:34:0f:f5:85:
85:84:72:b4:fb:54:cb:83:e8:70:ca:a6:27:84:a8:48:eb:a9:
af:56:14:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:19 2025 by rpki-client