Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBB6F326F48411EF8D3490A6762E951A.roa
File: FBB6F326F48411EF8D3490A6762E951A.roa (raw, json)
Hash identifier: 72gZdCzP/sOd4ctezUL94bT5Pr4kNlhvkyCf+NaYrJc=
Subject key identifier: 89:36:9E:08:90:7B:58:40:A3:B7:E2:50:1D:85:60:D0:2A:93:6A:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0137B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBB6F326F48411EF8D3490A6762E951A.roa
Signing time: Wed 26 Feb 2025 21:02:27 +0000
ROA not before: Wed 26 Feb 2025 21:02:23 +0000
ROA not after: Sat 19 Feb 2028 21:02:23 +0000
asID: 17561
IP address blocks: 45.201.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79796 (0x137b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 21:02:23 2025 GMT
Not After : Feb 19 21:02:23 2028 GMT
Subject: CN=67bf8163-baca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:b9:15:2c:ab:53:e3:43:57:da:96:91:b4:
20:81:64:16:c9:df:67:9f:eb:7d:5f:b0:01:71:f7:
f8:54:35:71:c4:d3:bd:4d:83:b9:06:65:03:e8:46:
40:a7:dc:62:9d:52:b8:67:28:5d:6f:a0:07:4b:c3:
6d:54:9f:6a:2a:78:a3:cd:5f:a0:b8:a4:51:07:79:
76:a6:02:d5:a8:0f:6c:73:96:31:c7:9a:58:0c:52:
5f:cd:4f:71:6a:1c:1a:83:96:bf:f6:11:e0:0a:c7:
b8:89:b0:bf:e3:d4:08:ad:af:72:09:2b:fe:4d:ce:
82:e6:55:1f:52:6e:1b:2b:48:61:2b:48:1b:a0:74:
76:c1:08:89:fb:b1:e7:24:d3:96:cb:15:27:13:4d:
ec:04:d9:f2:1d:11:18:83:53:d5:36:95:67:a2:16:
8f:f7:1e:e2:8a:77:f6:c0:1b:71:03:c7:33:01:9e:
54:4e:02:f3:7c:67:ef:e9:60:b0:87:fb:ed:54:45:
3d:d4:f4:1a:8f:c5:12:ea:89:eb:3f:90:1c:77:db:
90:23:64:83:70:46:ea:e1:56:41:39:f4:28:2f:18:
8c:3b:79:26:bc:e0:b1:ec:e4:d4:e2:a9:cc:32:28:
57:6c:5c:ee:e5:8d:0c:e0:3e:f3:31:9a:75:d6:09:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:36:9E:08:90:7B:58:40:A3:B7:E2:50:1D:85:60:D0:2A:93:6A:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBB6F326F48411EF8D3490A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.239.0/24
Signature Algorithm: sha256WithRSAEncryption
08:78:f6:bf:7d:26:69:cf:e4:b1:bc:c7:45:ff:27:2e:b3:55:
8c:a0:fc:02:81:33:f2:ec:f4:f2:6d:ff:6c:61:80:e8:dd:c1:
72:4c:7d:2f:ae:e2:7a:e5:d3:9e:d1:47:87:65:3e:62:f2:7c:
8a:de:cc:63:2d:61:83:47:a6:6d:7c:4b:ad:7b:6b:62:c4:47:
e4:1e:35:b0:f0:7b:ed:49:77:e8:0b:35:9e:40:8b:24:ff:0e:
cb:30:7c:fd:e1:bf:25:69:64:0b:2e:b3:56:28:6b:42:b1:41:
ff:fc:a3:40:c7:84:73:72:5b:df:5a:5d:7f:95:36:ee:d0:44:
dc:63:48:60:cc:06:4a:b1:be:b2:14:77:83:ec:be:05:b9:04:
9b:58:61:0f:be:28:1f:fe:32:53:67:3c:28:4e:70:94:c5:e6:
53:a2:62:b5:da:18:dd:7b:dc:d9:d8:98:ab:b7:f6:04:80:97:
b7:6f:db:8a:c7:d6:f7:15:bb:46:8e:9d:92:6f:d9:db:2f:79:
36:7a:51:2b:68:ed:68:c6:ca:57:a2:04:22:eb:31:09:09:19:
ce:7f:0f:63:71:2e:7b:97:d3:53:d5:17:71:81:b4:e2:62:7f:
ff:f8:df:f3:a9:2b:46:8b:c9:e7:dc:90:31:2e:18:1d:fe:cb:
28:6a:16:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:06 2025 by rpki-client