Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE1CD24A0FEF11F08945C883762E951A.roa
File: EE1CD24A0FEF11F08945C883762E951A.roa (raw, json)
Hash identifier: ll1URrQ70CecMLxF63ddd+uPSQZwrvfQv67jCE9WBFA=
Subject key identifier: D1:1D:33:1D:03:26:05:CC:FF:E1:BD:E6:73:CD:5A:65:2B:A8:7F:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01498F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE1CD24A0FEF11F08945C883762E951A.roa
Signing time: Wed 02 Apr 2025 18:26:01 +0000
ROA not before: Wed 02 Apr 2025 18:25:57 +0000
ROA not after: Tue 22 Apr 2025 18:25:57 +0000
asID: 211241
IP address blocks: 45.192.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84367 (0x1498f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 2 18:25:57 2025 GMT
Not After : Apr 22 18:25:57 2025 GMT
Subject: CN=67ed8139-8440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:4b:cb:00:19:9f:f0:43:5d:70:f3:a7:ba:
38:4f:51:0c:73:25:a8:57:a4:4e:a7:0b:40:e1:3d:
cc:7d:e2:d5:30:5f:f1:cc:57:af:84:12:37:be:39:
14:66:eb:3a:ff:c7:74:c3:85:26:87:87:8b:6c:10:
ac:67:ee:56:a3:c4:75:19:48:5a:a1:26:8d:01:f8:
3f:eb:90:73:5e:7d:7d:f9:ca:63:82:bc:65:80:42:
4f:88:e2:86:f3:c6:f4:22:61:93:49:6d:0f:be:91:
df:ad:b2:ba:cf:35:91:43:b1:2a:b9:d0:66:58:62:
90:09:58:66:62:58:83:d9:52:9a:29:42:49:1e:25:
3d:6d:88:b5:07:2a:7f:ae:ec:53:44:d6:db:9c:ff:
7f:3e:2e:2f:cb:ec:21:5d:71:b1:ba:3c:77:81:19:
03:48:c3:43:72:6c:23:42:92:9a:38:5b:88:4c:7b:
b1:29:cb:59:ff:eb:29:fc:37:fb:69:2b:d9:1b:ae:
57:0f:df:6d:53:d5:9a:ec:79:66:2d:23:a1:88:9a:
c0:86:04:b8:ee:ab:de:fb:09:2a:99:83:3f:59:e7:
31:66:0c:4e:dc:c9:e0:00:63:30:7f:a1:3f:3e:c9:
2e:fe:68:60:07:f8:d4:f4:53:23:6d:0b:c5:45:82:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:33:1D:03:26:05:CC:FF:E1:BD:E6:73:CD:5A:65:2B:A8:7F:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE1CD24A0FEF11F08945C883762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.19.0/24
Signature Algorithm: sha256WithRSAEncryption
71:29:70:d2:29:18:9c:ed:3b:ac:e0:a3:3b:83:b8:01:95:87:
9c:ad:5a:47:e0:33:e5:7f:75:d1:04:d8:19:38:00:f3:07:a7:
c1:d9:e0:68:10:08:2b:77:a7:18:cb:cb:f4:0f:4a:f3:c4:7c:
fd:90:9e:19:2c:05:8a:c5:31:54:ca:4a:9a:a0:36:b1:57:1b:
70:b0:c8:2e:5f:06:43:a9:52:72:1f:d1:a1:48:45:e1:45:5b:
1c:81:df:57:28:9f:31:1e:c3:89:b3:2a:64:30:f1:e3:78:ce:
f1:6c:d4:c5:c2:2f:7b:52:77:22:ff:82:8b:f9:32:af:3f:4d:
c4:df:97:a3:8b:9b:99:8d:bf:35:14:e6:88:85:4b:35:ab:7b:
2e:d3:00:53:cb:23:81:f8:87:4e:8f:e0:8b:bb:06:9d:50:f7:
36:fe:ca:56:7e:f9:ab:1c:f7:0e:06:eb:bb:8f:bf:e8:04:70:
a1:79:ad:92:87:6b:2d:24:f9:fb:3d:26:bd:4b:70:02:d0:dd:
18:6a:b4:6a:4e:a2:f5:d4:cb:1a:f1:aa:fc:04:38:35:17:ee:
38:51:1c:63:a6:c9:3c:6c:ce:b7:6e:77:ba:4b:a6:20:12:83:
e1:8e:48:5b:b1:c5:78:ea:e8:ca:16:b4:e7:81:ab:55:c7:88:
68:b6:b5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:51 2025 by rpki-client