Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E658269AF1B311EFB326CC9E762E951A.roa
File: E658269AF1B311EFB326CC9E762E951A.roa (raw, json)
Hash identifier: jZSoa7JuwPCSf4lkNwWA+x4bVXyUHt/N1ft2XbFRwtY=
Subject key identifier: 85:71:AA:BC:76:46:8C:08:D0:6E:66:E4:DF:63:0C:E7:53:C4:58:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012A2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E658269AF1B311EFB326CC9E762E951A.roa
Signing time: Sun 23 Feb 2025 07:00:44 +0000
ROA not before: Sun 23 Feb 2025 07:00:40 +0000
ROA not after: Fri 21 Mar 2025 07:00:40 +0000
asID: 25160
IP address blocks: 45.201.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76330 (0x12a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 23 07:00:40 2025 GMT
Not After : Mar 21 07:00:40 2025 GMT
Subject: CN=67bac79c-5332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:cb:68:3b:78:f9:d8:2d:2b:ab:62:49:e3:
7a:55:ba:99:b4:71:cd:68:81:e4:d8:2d:c3:ee:3b:
f9:f5:00:3d:81:bc:83:34:ff:66:5c:ae:b1:a5:bf:
c5:49:a8:58:b9:77:85:02:38:f6:db:03:47:d6:f2:
dc:67:fd:7e:43:22:e2:d6:5a:9c:a8:18:53:5c:91:
5b:6e:60:09:f2:d9:d6:54:8e:3f:52:b4:5e:0b:17:
c5:78:43:63:db:57:77:68:c6:23:e1:bc:06:92:10:
8b:6a:b7:fc:c4:6b:da:35:de:c0:79:79:89:26:40:
82:52:d9:1a:86:d4:ff:f2:9d:ad:d0:1c:80:a6:01:
d7:ef:98:59:f7:77:52:36:18:d5:5b:92:47:d4:6a:
4e:bf:2e:bd:8b:20:c2:3e:76:24:9d:96:9f:e4:af:
bc:7e:c7:13:d9:29:c7:9a:eb:b8:b0:f2:59:5a:58:
7d:63:1f:24:92:d9:c8:c6:64:b4:1d:77:3f:a0:d3:
7c:07:06:28:80:45:ec:1e:a1:5e:6f:eb:f6:26:7c:
02:b6:a3:0d:e8:6b:4e:73:50:90:79:53:34:1c:35:
d8:80:76:b1:32:c6:4f:a5:e1:65:dc:18:c8:16:b2:
c8:ad:f2:17:39:b3:56:b7:3d:c5:ce:36:f8:f9:58:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:71:AA:BC:76:46:8C:08:D0:6E:66:E4:DF:63:0C:E7:53:C4:58:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E658269AF1B311EFB326CC9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:4e:4d:43:5d:74:7b:19:f4:24:6e:5f:cb:1d:d2:06:ac:39:
49:5f:0b:ee:92:2f:e4:5b:06:cf:1a:c4:fe:03:a8:93:e5:95:
21:ad:cc:a5:44:00:f8:39:dd:0e:bb:bd:89:11:ef:94:6f:b1:
d3:08:7b:12:45:da:43:51:2e:f3:56:90:5f:e7:3e:9b:8d:41:
9b:bc:0b:8c:10:8a:f3:4e:b1:f4:3e:e8:55:12:33:37:d0:95:
1d:ce:a2:82:6c:65:d1:2e:5b:36:ed:8a:97:19:77:77:77:0d:
25:60:54:62:16:80:03:4b:17:dc:29:a8:da:1c:75:ae:01:ee:
51:7b:fa:50:9f:5a:87:20:46:dc:83:1e:ef:d4:2c:ac:ad:c4:
35:d1:4a:51:f0:04:0c:94:50:93:11:de:0d:55:9c:a7:d6:78:
a0:63:a0:3d:75:99:c0:f8:c0:d8:16:02:80:1e:de:97:b9:22:
64:c7:f5:ca:3c:1a:fd:a7:12:32:db:78:13:c4:b4:41:cc:1a:
92:0b:a3:9c:98:06:15:66:eb:9b:eb:d3:d7:37:0d:59:25:d0:
98:1b:6c:46:24:ac:07:a2:e8:b8:ab:bc:fc:28:9e:b6:74:53:
28:dc:53:f3:c0:e6:cd:8f:ff:df:2d:03:f9:54:36:6d:a2:a2:
cb:2f:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:56:28 2025 by rpki-client