Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1CEEFECD57F11EF8CB6827C762E951A.roa
File: D1CEEFECD57F11EF8CB6827C762E951A.roa (raw, json)
Hash identifier: 5nDxz4YyYApOx0phQWkqpiuv13RG0+uluu1s6YUuzMs=
Subject key identifier: B7:1A:33:EC:4C:1B:29:46:C8:34:42:75:0C:C2:E3:23:D1:D3:77:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1CEEFECD57F11EF8CB6827C762E951A.roa
Signing time: Sat 18 Jan 2025 09:37:23 +0000
ROA not before: Sat 18 Jan 2025 09:37:19 +0000
ROA not after: Wed 31 Dec 2025 09:37:19 +0000
asID: 209242
IP address blocks: 45.194.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68437 (0x10b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 18 09:37:19 2025 GMT
Not After : Dec 31 09:37:19 2025 GMT
Subject: CN=678b7653-7daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:98:e5:85:01:90:0e:4c:89:2a:9a:13:9a:84:
27:f4:bf:41:5e:97:dd:da:59:5d:18:4a:26:e3:9b:
e9:85:d1:58:53:df:79:95:a3:8c:13:7c:fc:d3:ea:
e4:74:3a:b9:f9:2e:67:ff:fb:71:58:7c:13:a5:d9:
43:ce:0b:f7:11:73:75:3f:f0:8b:56:d8:37:1a:8f:
a5:5e:38:d0:d2:c2:14:12:c8:38:b2:e5:11:e1:fb:
a3:8f:52:4e:bc:a6:15:4c:b8:59:3e:b4:b5:0a:04:
55:17:86:79:7f:ff:23:03:38:06:d9:d0:75:7e:31:
cd:9f:1b:4d:c7:5d:96:77:d7:d1:97:1b:db:b3:88:
b5:d4:d5:a1:c3:ed:4b:aa:49:50:9f:3e:3b:75:f9:
db:83:8f:b0:ec:56:b1:29:cc:bd:5b:5f:38:56:57:
30:10:f4:4b:1a:b0:56:39:71:59:34:0f:89:be:fe:
29:44:9c:58:17:eb:6f:c1:67:89:c8:79:d4:21:0b:
9c:0c:ec:44:5b:39:3e:9b:9a:d3:49:29:84:b1:0a:
b6:8f:35:58:59:75:e9:73:a8:5f:9a:56:2c:1a:d0:
32:dd:54:b8:a8:a8:91:d1:ae:96:18:9a:89:ed:65:
ab:d0:d7:73:0f:fd:e0:f0:7c:c0:d1:a7:12:bd:1e:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1A:33:EC:4C:1B:29:46:C8:34:42:75:0C:C2:E3:23:D1:D3:77:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1CEEFECD57F11EF8CB6827C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.53.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e4:d5:58:5b:07:d5:0c:55:80:37:f1:65:aa:3d:e1:c0:81:
2f:6c:82:aa:13:de:34:9c:ef:65:f0:bd:91:3d:d9:a4:51:48:
04:9d:d1:1e:c6:8d:e2:c4:3d:23:bd:ff:44:a8:8d:e0:59:e1:
74:70:88:ed:78:1d:7e:15:50:22:ab:f8:85:03:a0:f2:0a:08:
8f:ac:33:b9:44:67:13:42:cc:60:e0:5f:03:15:26:e7:5d:2a:
42:1d:93:2b:79:c0:7b:67:c7:3a:53:f5:4d:82:1d:d4:55:5d:
a6:86:1d:06:b7:12:33:4d:cd:7a:e6:5b:5d:b6:a9:56:9b:fe:
8e:8a:9d:38:ca:b4:6f:90:32:d9:92:c6:16:14:eb:ad:fe:e2:
0f:0c:bb:3b:3c:83:ca:a1:4b:e0:fe:a6:2f:e6:33:61:e4:1b:
cd:ac:77:66:79:3c:b6:63:82:dc:31:15:56:1a:31:a5:74:a0:
f4:0a:55:58:e0:f6:6f:78:e7:1b:ff:78:82:b1:45:bf:43:05:
2c:84:eb:8f:9a:53:68:59:a9:8f:7e:54:87:f2:2f:4e:13:62:
73:1f:d1:c1:c8:3f:7d:e4:72:ed:6c:11:b7:f3:1d:29:a1:14:
f3:56:2b:c2:b0:d3:5a:32:b8:82:ef:32:77:52:4e:d7:5d:20:
92:1a:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:49 2025 by rpki-client