Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD57E4DCF42D11EFA6F08146762E951A.roa
File: DD57E4DCF42D11EFA6F08146762E951A.roa (raw, json)
Hash identifier: ZuwsGXtUw0pK91yCR/0ln763IPaUsdpLipfXTEciNEw=
Subject key identifier: 21:1B:8D:F0:4E:B0:B6:FA:9B:62:38:D0:A9:E9:DB:0C:15:FD:3F:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01313F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD57E4DCF42D11EFA6F08146762E951A.roa
Signing time: Wed 26 Feb 2025 10:38:50 +0000
ROA not before: Wed 26 Feb 2025 10:38:46 +0000
ROA not after: Sun 20 Feb 2028 10:38:46 +0000
asID: 17561
IP address blocks: 45.203.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78143 (0x1313f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:38:46 2025 GMT
Not After : Feb 20 10:38:46 2028 GMT
Subject: CN=67beef39-85de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:fd:d5:5e:ac:43:de:28:2d:8b:1c:08:89:
b8:e7:13:ca:c3:a5:20:2f:44:b5:6e:5b:8a:ed:60:
a0:47:98:e0:10:a3:d9:2d:77:38:04:0d:18:e0:29:
bc:69:61:f3:6e:65:ae:c2:c5:4d:5c:09:64:5d:e8:
66:26:ec:a0:b7:1c:91:97:68:fc:e6:81:8f:11:a3:
b5:ec:10:90:31:e4:01:71:54:79:81:65:21:2a:f7:
67:ef:79:a0:43:eb:a4:f0:00:f8:4e:f0:a0:4c:88:
d1:0e:4f:35:5e:75:2b:b6:d9:c7:96:d8:2e:97:b8:
92:50:73:6d:bf:88:c4:78:2e:5c:e8:b9:75:f1:bc:
39:d1:fa:a2:49:b9:74:ef:3c:fa:e6:16:3e:8f:90:
2d:f5:62:22:35:ff:03:75:42:88:c0:f8:e4:b3:31:
8c:41:15:6a:87:5b:c4:29:b2:76:ae:e6:33:eb:0f:
5b:ee:dd:1e:ef:1f:f8:06:9f:be:a0:7a:f8:92:71:
2b:36:a9:89:92:00:b4:e1:ed:02:d4:c2:91:36:68:
75:f6:8f:28:2b:36:0a:a3:dc:99:62:62:99:ce:53:
bd:c3:e4:69:91:8d:d2:8e:8c:e9:7f:4d:03:0f:06:
f6:38:6c:12:18:fa:15:77:33:54:77:c5:73:68:21:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1B:8D:F0:4E:B0:B6:FA:9B:62:38:D0:A9:E9:DB:0C:15:FD:3F:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD57E4DCF42D11EFA6F08146762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:9b:20:a7:7c:7a:ad:ea:9d:34:00:36:7b:e3:a1:bb:1e:cf:
d6:ff:a9:88:a9:04:af:89:fd:9c:21:51:cd:89:fc:a2:92:b5:
58:42:13:84:84:f2:a1:d3:a0:b5:4b:29:3c:73:01:62:7d:00:
9d:28:9c:7f:89:e6:77:1e:c5:58:a3:c5:31:83:ad:55:61:9b:
83:57:3e:eb:49:f7:ad:c7:e4:42:23:42:9f:af:5a:ae:4d:c2:
cf:73:2f:37:91:fe:3a:c8:83:e9:c8:93:a1:b1:31:c3:f6:66:
fe:7a:93:fd:59:7d:62:58:ce:6d:41:f4:b4:8d:2e:9a:37:44:
41:d0:0e:97:3f:ad:a3:03:7e:dc:68:47:1a:83:16:53:b1:fa:
1d:34:45:3e:48:3e:f5:51:b5:0c:36:44:b7:66:c4:cd:5b:67:
cf:ec:69:f0:bc:30:7b:6e:22:ac:d3:48:c9:04:8c:14:11:99:
fc:c4:bb:f3:f7:8f:b7:1f:b5:aa:c6:a0:03:87:ff:0b:52:6d:
f1:5c:3b:4f:76:b9:9b:f9:59:d7:c6:cd:8b:10:29:ca:e7:75:
ec:e8:bf:3b:e0:5c:9b:b1:5e:15:66:04:56:34:93:2a:0e:17:
2a:fa:6e:eb:ac:ca:82:fe:76:9e:f7:dc:87:f2:50:3b:de:cb:
5d:b2:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:05 2025 by rpki-client