Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E050D084F42F11EF87E31B55762E951A.roa
File: E050D084F42F11EF87E31B55762E951A.roa (raw, json)
Hash identifier: +MBeVrRAoWVsNjRpnn4gQlR4UK71Jb3QbzhTrOmpAzw=
Subject key identifier: FD:9A:98:80:06:A2:38:86:C9:63:72:0A:89:ED:C3:FD:C6:15:3D:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013172
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E050D084F42F11EF87E31B55762E951A.roa
Signing time: Wed 26 Feb 2025 10:53:14 +0000
ROA not before: Wed 26 Feb 2025 10:53:10 +0000
ROA not after: Thu 19 Feb 2026 10:53:10 +0000
asID: 328608
IP address blocks: 45.205.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78194 (0x13172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:53:10 2025 GMT
Not After : Feb 19 10:53:10 2026 GMT
Subject: CN=67bef299-acfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:04:59:72:2e:fc:97:b8:84:aa:ac:ab:d1:
be:d4:ba:a0:b3:33:96:08:f2:4b:4e:8b:90:a4:f5:
0e:40:06:da:3b:03:17:8a:c5:15:c3:ad:9d:ea:ff:
31:e4:99:28:5b:27:51:e5:54:39:d1:91:d5:32:4b:
84:d6:82:56:93:b9:4e:97:16:dd:df:2b:a6:8d:61:
b5:5b:4f:0d:5d:85:d2:70:de:dd:e8:76:0d:55:be:
d9:e6:07:ec:04:df:4d:62:7d:45:e6:98:a1:a7:bf:
e0:b4:b0:5d:2b:5d:fb:f2:54:9e:3a:62:ae:62:86:
15:d7:8d:de:86:f8:2f:77:ee:de:9e:a5:f2:10:a2:
8d:2c:8a:74:bf:f6:64:a0:f3:c4:88:35:7f:16:0e:
98:3b:b2:23:ae:d3:43:21:af:5c:62:77:2a:6f:19:
dd:1f:8e:c8:6b:bf:86:d2:8b:1c:dc:61:ac:5f:e4:
e1:47:37:fa:bd:76:16:e6:cf:ea:fb:95:67:f6:51:
6c:0e:15:e1:55:e0:5f:88:9f:fc:a9:87:16:b4:35:
38:e2:00:37:c8:99:13:0f:25:66:ed:71:80:10:25:
e6:59:18:0f:2f:ed:36:60:52:1b:81:f2:44:46:62:
4a:e5:0f:fa:c6:ba:77:2a:34:97:04:d8:88:54:30:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9A:98:80:06:A2:38:86:C9:63:72:0A:89:ED:C3:FD:C6:15:3D:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E050D084F42F11EF87E31B55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:56:79:14:11:9d:10:f6:2d:fc:5a:ab:18:08:9d:4f:13:be:
05:b8:f8:6a:ca:e8:3d:a3:64:49:c5:ae:f2:59:8d:3d:aa:ba:
87:a1:29:cd:fa:6e:13:02:d8:92:2b:1c:e9:23:34:45:66:f6:
6a:50:e0:85:e6:1f:cd:86:bc:07:b3:6e:b2:d5:72:44:2f:d7:
e2:20:04:c3:a0:36:23:7f:f9:be:cd:e5:35:bd:fb:57:41:f9:
25:b2:78:cc:bd:fa:dd:fe:e3:30:93:0e:0a:d4:50:0a:80:c9:
17:de:df:e4:40:49:3c:f8:11:b7:4b:2c:19:65:24:ba:e4:f9:
f4:c2:97:e3:c2:74:e3:20:5c:3a:96:6e:2b:85:b4:6c:0f:48:
4f:5c:bc:86:0e:40:92:06:ae:7a:45:52:01:5a:fa:26:85:32:
6d:53:8d:83:60:c1:20:7f:ca:59:13:19:d8:b6:20:43:fe:c9:
60:e5:34:fa:4f:9d:34:3e:63:c4:0a:98:64:ef:2c:a2:17:48:
cd:30:68:3f:0a:e1:80:01:8f:c2:ce:74:33:1b:d3:b9:cf:1d:
d9:cc:53:50:e0:b4:81:2e:b6:fc:1d:91:ff:36:05:bb:96:5a:
b0:06:d1:ea:80:a0:ff:d1:d8:89:4d:1d:aa:00:e9:3e:81:53:
e7:d3:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:06 2025 by rpki-client