Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB054786107F11F0BAA0BC71762E951A.roa
File: FB054786107F11F0BAA0BC71762E951A.roa (raw, json)
Hash identifier: QKw5iWUsbA1xtebBTgh5kx3sxcQs/GmQzhq1aT5osUc=
Subject key identifier: 10:10:B1:69:9D:F7:B6:36:0C:DA:AA:02:80:1C:54:D5:82:3B:55:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB054786107F11F0BAA0BC71762E951A.roa
Signing time: Thu 03 Apr 2025 11:37:11 +0000
ROA not before: Thu 03 Apr 2025 11:37:06 +0000
ROA not after: Sat 10 May 2025 11:37:06 +0000
asID: 214808
IP address blocks: 45.192.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84436 (0x149d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 11:37:06 2025 GMT
Not After : May 10 11:37:06 2025 GMT
Subject: CN=67ee72e7-9665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:ae:63:2a:39:db:5a:80:37:62:1a:b0:1f:
f6:00:64:8d:bc:f2:a3:a1:e4:9f:a1:bc:2a:21:6d:
fd:79:3e:9b:1f:b5:9e:25:d1:a5:99:86:ce:84:73:
53:25:7b:13:78:49:cc:50:56:10:e4:ba:b8:f5:3f:
ca:e4:bd:7c:33:36:b8:a3:cb:6b:e3:a6:59:ed:38:
38:58:5d:83:92:c4:fd:c2:b9:42:1a:dc:64:41:53:
92:f2:b7:8c:5a:46:f5:dd:aa:d7:33:7c:d7:54:ca:
cd:d6:c5:5f:3b:ee:9b:9c:12:cb:bd:c3:21:27:0e:
13:09:06:ea:86:07:74:94:08:88:b8:24:86:69:1d:
9a:7e:1d:8b:7c:99:7f:22:3f:89:d1:5f:d9:a8:e6:
69:6c:64:d6:f3:cc:2e:ab:41:b1:79:39:03:be:19:
6f:28:0f:0e:81:83:dd:78:b9:c7:d9:4f:e7:09:fd:
3d:4f:74:d0:f3:20:02:ea:bd:95:61:8e:0a:c7:25:
48:39:3b:83:a8:6f:d1:cd:25:1a:2e:20:71:ec:a0:
6b:64:cc:ee:78:4b:d2:22:6f:68:58:bf:d9:ba:c3:
63:53:8f:a3:d0:be:75:2d:b2:dc:21:e1:68:9e:15:
3a:63:1e:b2:25:ba:a1:d9:bb:c9:70:69:91:08:bc:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:10:B1:69:9D:F7:B6:36:0C:DA:AA:02:80:1C:54:D5:82:3B:55:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB054786107F11F0BAA0BC71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.242.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:25:eb:3e:b0:1b:25:2f:13:d9:f7:9b:61:f1:3e:4d:7f:3f:
75:76:f6:ea:c1:71:de:2e:6a:34:96:cc:7c:aa:05:32:87:d8:
53:4e:82:36:28:c5:1d:e3:10:e0:2c:d7:27:75:50:59:0c:a8:
49:be:3a:0d:ab:54:2a:7b:f4:ff:bf:4f:56:33:b0:a5:3b:c8:
da:2e:b7:13:f8:7a:47:db:59:26:f8:c6:7b:2d:eb:8c:e3:77:
14:2b:b8:ed:4f:50:ae:13:65:39:e0:af:77:e1:da:d9:ce:5e:
6d:b1:2b:8b:0f:33:14:ad:1d:c7:48:ec:34:f2:ba:a8:4f:ea:
e3:7e:ac:87:a4:65:73:fc:08:47:62:39:99:19:f4:89:3e:36:
b7:5a:f5:de:c2:25:5d:2f:c7:06:d0:3f:88:bd:01:1c:df:5d:
8b:48:42:73:0b:15:2b:5e:4b:2a:fc:19:9e:02:d0:2b:c7:d3:
c6:97:af:27:76:1c:ca:08:b5:a6:19:1d:53:95:22:86:5c:d4:
24:ac:6a:ef:6f:67:ee:53:4b:82:33:03:3c:a2:89:11:2a:f8:
96:5a:33:c0:89:97:a8:32:19:3c:10:46:fa:32:c8:ca:75:c0:
25:16:5c:3c:32:80:11:09:51:40:6b:3b:5d:4b:6d:a2:bd:71:
ad:e3:5c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:34 2025 by rpki-client