Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1DA2D9CE94911EFA9C5036C762E951A.roa
File: E1DA2D9CE94911EFA9C5036C762E951A.roa (raw, json)
Hash identifier: eIcL3vsXKbmVkPkflZ6ywhZJoBaMoUf6DDIGoZBl6T4=
Subject key identifier: CA:EE:88:2B:05:8F:E7:B5:9B:38:1D:70:2F:50:83:9D:5F:1D:E3:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0121A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1DA2D9CE94911EFA9C5036C762E951A.roa
Signing time: Wed 12 Feb 2025 14:01:40 +0000
ROA not before: Wed 12 Feb 2025 14:01:37 +0000
ROA not after: Fri 13 Feb 2026 14:01:37 +0000
asID: 28458
IP address blocks: 45.195.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74145 (0x121a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 12 14:01:37 2025 GMT
Not After : Feb 13 14:01:37 2026 GMT
Subject: CN=67aca9c4-d938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:b1:ea:b7:11:5b:11:5e:fc:59:4e:4d:18:
2e:0d:d1:f9:d3:8c:53:d1:5d:b4:a6:9e:b3:97:a1:
4f:ae:8d:72:5f:60:27:0d:55:81:1c:81:4a:15:9f:
d9:4a:d0:e0:32:1a:44:f8:e7:a0:52:63:f4:23:12:
a9:dd:03:d4:99:c4:93:93:5e:fd:76:78:ef:39:ac:
08:e3:a8:8c:e4:31:5c:1c:34:9d:ef:a5:e5:24:3a:
5f:c3:4a:0f:6d:c5:3a:00:87:e5:3e:18:19:bd:e7:
cd:22:e4:99:ba:9b:03:40:8a:f7:eb:eb:ab:ed:25:
38:5b:4d:29:3e:7b:2b:a6:aa:dc:1d:0a:ab:20:68:
71:9c:f5:91:ad:1f:70:c3:3f:29:e5:de:cd:c4:15:
01:e0:85:ed:be:ac:e5:bf:89:9d:10:43:bf:03:1b:
89:cd:61:ff:c3:c7:f9:b1:7d:9c:a1:59:f5:da:91:
b1:ae:ec:3f:38:de:63:4e:b4:dc:48:77:08:dd:3b:
1a:e6:07:15:6f:d9:90:d4:bd:86:90:c5:3a:22:16:
74:59:8d:91:55:66:40:34:73:61:40:19:ee:05:fa:
12:4d:6b:9e:72:df:a8:da:f3:9b:ec:5d:11:65:88:
5a:5e:36:de:2a:11:86:5e:8a:62:e0:43:67:da:7e:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:88:2B:05:8F:E7:B5:9B:38:1D:70:2F:50:83:9D:5F:1D:E3:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1DA2D9CE94911EFA9C5036C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:df:18:df:80:72:14:a5:42:c3:c5:87:9a:8f:83:6f:48:3a:
90:bf:89:27:d9:ed:50:e5:e7:12:24:ec:3c:74:09:c7:80:1e:
2b:36:93:3d:f6:72:4b:70:b8:d7:ca:60:98:18:5d:aa:1c:b8:
08:43:57:da:df:52:e7:ce:b4:b9:f4:b4:4e:39:99:f0:4b:90:
94:ac:9e:8e:7d:6f:91:f8:16:64:f0:8e:8b:3d:bf:f3:2e:a2:
5a:99:6a:87:3c:c9:a5:52:16:03:69:13:37:e8:7d:03:04:dd:
b7:61:66:8e:a9:17:c1:9f:4c:1a:5f:05:73:75:41:3c:5d:b6:
f0:27:be:05:ad:27:d4:a1:9a:5e:c9:30:67:35:87:58:e8:2c:
3e:7f:63:e2:1d:70:39:84:a7:75:08:f0:10:17:22:d9:bf:01:
67:e9:b7:e8:40:76:9d:80:05:37:e2:55:39:d9:85:4e:c5:f4:
20:ec:eb:8f:a4:0a:48:8c:c3:49:93:67:57:90:08:f5:bb:e1:
95:c1:45:e8:57:0d:7c:90:6b:23:90:4b:45:81:fc:48:a3:6a:
fb:7b:11:15:5f:5f:7f:a7:7b:f3:e3:6a:c7:d6:83:c5:6f:96:
a4:1f:58:6f:b6:aa:59:4a:e0:d3:c5:64:4b:92:05:e1:3f:57:
07:29:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:12 2025 by rpki-client