Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA7A530CF47911EFBBBD1D5B762E951A.roa
File: DA7A530CF47911EFBBBD1D5B762E951A.roa (raw, json)
Hash identifier: JOk2AILUmnT674LTAZWIoikp7XBowgwa/dTBEAJQtZg=
Subject key identifier: 63:99:5B:34:60:64:C7:45:3E:B0:AF:94:3D:71:F1:10:0C:43:FE:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01372B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA7A530CF47911EFBBBD1D5B762E951A.roa
Signing time: Wed 26 Feb 2025 19:42:47 +0000
ROA not before: Wed 26 Feb 2025 19:42:43 +0000
ROA not after: Thu 19 Feb 2026 19:42:43 +0000
asID: 984
IP address blocks: 45.201.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79659 (0x1372b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:42:43 2025 GMT
Not After : Feb 19 19:42:43 2026 GMT
Subject: CN=67bf6eb6-bd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:1e:b5:58:93:e2:8f:8c:5e:d8:38:8a:c6:
cb:b7:d9:8e:ab:21:f8:cf:c4:56:6e:bd:60:43:73:
39:43:f2:2e:a4:bb:68:39:c5:35:f0:e4:c5:d6:aa:
e1:a4:da:53:e1:78:1f:c8:91:40:60:2e:15:78:9e:
3f:3f:91:48:5d:2b:4b:c2:9f:93:ad:77:d3:6b:c3:
ac:03:db:1f:e0:96:2a:86:52:da:a0:30:b4:e2:e3:
7e:8a:82:38:d1:0f:79:37:b2:26:47:17:58:7a:d8:
b7:09:1b:fb:65:12:54:e4:20:2d:e3:af:cf:68:7c:
c8:99:8f:cf:55:4b:eb:b8:de:94:61:f4:7a:b2:49:
1e:b3:e3:e7:ea:67:36:db:1f:fe:8a:a0:a2:ee:70:
09:8a:87:df:7d:98:62:01:01:7f:06:ee:ca:b5:e0:
ce:20:26:10:d7:08:db:51:c5:2a:d9:06:62:bc:be:
2e:18:56:cf:0b:60:a4:03:b5:47:64:b7:aa:47:d3:
4f:ba:14:4c:4a:90:b0:8d:32:9c:b1:67:c6:db:a6:
9e:8e:bf:0f:99:af:71:73:a9:20:48:08:7d:cc:3d:
99:59:8e:21:97:2f:88:2d:b4:df:de:b0:6f:16:27:
25:f2:ff:f2:39:e2:52:2e:97:be:36:72:11:dd:29:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:99:5B:34:60:64:C7:45:3E:B0:AF:94:3D:71:F1:10:0C:43:FE:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA7A530CF47911EFBBBD1D5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.103.0/24
Signature Algorithm: sha256WithRSAEncryption
97:23:0f:c7:e8:54:af:5d:ee:42:88:c4:38:ec:00:2e:5e:08:
9e:10:02:b2:9f:90:7c:c6:c8:80:d5:c2:19:ff:2e:97:77:98:
46:4c:f6:f4:39:6e:aa:a2:9f:7a:ea:d3:d1:19:05:b8:cb:a0:
ac:60:22:9e:2e:23:65:b1:d4:ec:ac:5c:0a:08:cc:ba:33:4d:
ac:26:03:3f:38:b1:61:55:ce:0b:b2:78:aa:41:36:84:7a:4f:
c8:4c:4e:2f:93:43:ca:f5:d9:2b:10:94:c9:56:19:de:8f:81:
0e:64:0f:c7:b5:71:aa:bf:81:a9:91:0a:bf:19:53:b8:e8:de:
e0:1b:de:21:36:17:10:a7:1b:ca:34:b9:76:b3:b5:f7:53:96:
80:13:df:66:75:bc:9f:13:54:d3:0c:1b:a8:24:a4:59:3e:95:
e6:c3:8a:c8:06:70:7e:e2:2c:b2:4c:60:0a:46:ad:13:85:4d:
82:1d:75:36:06:44:54:37:21:7f:8c:58:2d:7d:2f:75:c7:89:
30:74:f0:b8:ff:e7:3f:94:dc:d9:5c:c2:22:a5:db:b5:88:b1:
b3:52:e2:b4:f7:67:7a:74:f2:eb:a2:52:99:05:18:0e:58:ca:
d9:cb:94:42:1d:47:6f:ad:67:c4:17:66:0f:7b:32:c4:d5:16:
8b:12:78:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:48 2025 by rpki-client