Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9081E1AF43B11EFA2FA8FA7762E951A.roa
File: E9081E1AF43B11EFA2FA8FA7762E951A.roa (raw, json)
Hash identifier: FD9rR8uiLt57dGDEl5Vpm9HI49MlGq/gcnYaJ8glvL0=
Subject key identifier: 32:D4:69:1B:1A:96:92:BA:42:A5:B6:5E:A2:38:77:E2:AE:10:89:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013256
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9081E1AF43B11EFA2FA8FA7762E951A.roa
Signing time: Wed 26 Feb 2025 12:19:22 +0000
ROA not before: Wed 26 Feb 2025 12:19:18 +0000
ROA not after: Sat 19 Feb 2028 12:19:18 +0000
asID: 17561
IP address blocks: 45.199.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78422 (0x13256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:19:18 2025 GMT
Not After : Feb 19 12:19:18 2028 GMT
Subject: CN=67bf06ca-1fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:8d:c8:fa:e5:81:14:16:36:d0:02:02:36:
1c:17:77:ec:c8:f9:04:7a:83:f3:c6:77:cd:06:f7:
9f:e4:ec:a6:0a:29:6b:8e:6f:6a:ba:03:c9:07:da:
59:f1:60:f9:c3:03:cb:11:8e:ff:29:6b:6a:13:91:
f2:4c:02:83:6f:b6:b5:15:b5:1c:2e:b4:69:bd:6b:
8e:9c:e8:ca:ba:27:7c:c2:80:0c:34:34:ce:8b:05:
ee:98:47:53:b0:95:1d:e6:b5:d5:b8:f0:f1:df:56:
f4:e3:b1:94:0e:b6:7a:2a:6b:4d:0e:85:7c:ba:a4:
37:81:c2:e5:5f:47:ae:ba:75:f4:22:7d:eb:e9:cf:
94:8a:1e:20:48:fe:08:33:62:05:77:5e:93:b4:35:
31:db:d0:a3:c2:fc:04:cd:c8:34:89:5d:db:99:01:
59:e3:70:18:97:e9:f8:fc:83:0d:ac:9c:44:73:8f:
82:da:46:0d:98:c1:a5:4e:7d:b2:2f:b2:fb:25:61:
3c:04:f5:e9:d7:31:b0:12:40:06:4d:4d:b9:9a:6b:
60:e5:c3:9e:31:6a:89:9d:42:7c:95:d4:2a:3d:88:
92:18:f8:dd:d5:d2:f5:70:44:2a:3d:01:f4:20:86:
8f:ff:89:38:d3:ff:6e:92:3f:47:3d:cf:14:37:28:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:69:1B:1A:96:92:BA:42:A5:B6:5E:A2:38:77:E2:AE:10:89:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9081E1AF43B11EFA2FA8FA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.188.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e7:c5:1c:31:b7:a6:9b:9a:3c:ee:92:8f:42:64:c9:c2:ee:
8b:51:b7:9f:b6:36:14:0b:5e:a6:77:d5:a3:8d:84:34:18:70:
a2:27:fa:0f:f3:6b:9d:fd:74:a3:4b:03:39:1d:83:55:b8:82:
1e:78:3d:73:84:3e:bc:a6:64:19:b8:38:78:a6:10:0a:de:30:
42:bb:2c:74:f8:3a:02:95:b4:ea:72:b1:d0:ba:3c:d7:b0:8d:
c9:fc:02:a7:d1:1f:19:ae:5c:b7:39:78:da:43:3f:5d:f2:93:
19:16:0a:16:0e:64:5f:6d:54:a3:c8:5b:d6:23:ee:83:11:c0:
f4:4f:66:3b:79:95:df:18:9e:0d:9f:d7:02:60:00:70:b5:7c:
62:d8:94:31:4c:ef:e1:54:2c:9d:62:03:06:c8:85:ad:f7:ac:
85:34:73:80:e0:f9:a2:8b:ce:7e:f0:98:2e:11:30:ef:61:eb:
4d:9a:09:b3:67:d2:57:b0:21:0a:a3:9f:d6:ab:39:61:07:44:
95:d6:98:d7:31:4e:3b:3c:1d:1f:96:29:ad:be:ce:ee:4f:d4:
29:a9:82:47:fe:96:d2:74:34:c0:d5:bc:7d:07:f5:e3:34:2c:
ea:35:4b:96:67:9d:a8:c1:bb:27:9f:6a:76:1e:03:ed:1f:e1:
39:5a:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:11 2025 by rpki-client