Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBEC250E0CD111F0ADE19B96762E951A.roa
File: FBEC250E0CD111F0ADE19B96762E951A.roa (raw, json)
Hash identifier: r91s4a59WjMVezVXobj+USczLFhyiY57nc3RqY0SIqU=
Subject key identifier: 14:51:82:48:89:7A:7F:F6:67:1B:BC:09:95:49:AE:6D:3F:7B:F8:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBEC250E0CD111F0ADE19B96762E951A.roa
Signing time: Sat 29 Mar 2025 19:14:06 +0000
ROA not before: Sat 29 Mar 2025 19:14:02 +0000
ROA not after: Thu 08 May 2025 19:14:02 +0000
asID: 7018
IP address blocks: 45.202.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84218 (0x148fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 19:14:02 2025 GMT
Not After : May 8 19:14:02 2025 GMT
Subject: CN=67e8467e-781a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:81:1b:90:70:3f:24:9f:a4:31:c1:00:e2:
3e:18:9c:54:f1:8a:4f:23:c5:41:63:54:05:91:f7:
06:a7:2a:c2:00:b3:bb:af:ee:72:b5:5b:f3:99:2a:
7e:cf:3d:0f:0b:3d:df:03:0f:5b:55:9c:e0:fe:11:
bb:b7:fb:fc:de:3e:b5:19:83:c2:44:3e:87:35:06:
fc:7a:3c:7e:49:eb:eb:49:18:10:69:fe:c9:66:2b:
6c:a9:7e:30:9d:41:ec:46:c1:e9:9d:1e:f6:62:2e:
7c:b9:cf:d0:8b:76:3b:e2:c1:69:f3:3c:eb:2f:95:
14:e1:ff:ee:9d:67:f3:69:6c:77:7d:a3:eb:ef:c6:
c6:44:e2:aa:15:d0:85:f4:f5:30:73:2f:30:60:45:
f0:ec:3d:5e:12:79:5f:19:f9:00:58:8e:f0:18:94:
26:e5:dc:7e:2d:cd:42:da:ed:fc:45:e9:55:27:1d:
18:39:08:54:2a:35:f1:d8:eb:88:59:88:c5:3a:3d:
03:a8:3e:db:b8:80:ab:95:36:9c:6c:06:08:92:3b:
7c:4a:22:5c:a2:b6:fe:8d:09:56:a3:df:b9:52:5a:
3e:c4:2a:ca:0b:c5:d1:ee:6f:c1:bd:1a:7b:a7:1b:
7f:ed:27:6c:df:16:33:69:07:25:ce:fe:68:53:6f:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:51:82:48:89:7A:7F:F6:67:1B:BC:09:95:49:AE:6D:3F:7B:F8:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBEC250E0CD111F0ADE19B96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:6d:a8:ce:14:dc:c1:70:e6:d9:57:57:c6:9d:d5:9c:64:e2:
61:57:6c:cb:9d:64:26:29:46:30:f0:bf:c0:db:d0:59:9f:be:
0b:72:9f:03:53:61:bb:e2:bd:7a:91:9a:96:e2:c6:69:34:c2:
be:8e:7f:65:08:09:e2:a7:ba:21:ba:07:a3:16:f8:cb:7d:a0:
f2:ea:ff:f7:08:5e:0e:eb:cb:6e:80:d6:76:16:79:93:aa:d7:
3f:4f:1f:e3:b3:77:73:a5:8f:2b:54:ed:2b:6a:cd:d9:2a:86:
56:fc:0e:44:95:22:ef:72:c5:06:60:c5:19:13:ec:28:07:a5:
63:6a:04:db:2e:59:53:56:3a:7f:26:87:89:91:94:38:fe:1f:
2d:27:d0:17:7c:32:2c:c4:19:1a:53:42:21:11:e0:23:70:85:
8a:ac:3a:1b:06:b5:93:6d:f5:cf:e6:27:c2:f4:7b:d9:59:7d:
3a:fa:81:56:c7:53:ab:ae:95:f2:1e:47:0e:d0:59:8c:c3:9e:
e2:f8:3f:1f:2d:78:c5:a9:4d:fd:1f:ad:99:bc:e0:dd:6e:d2:
55:f6:83:83:63:4e:4b:07:e6:b9:ac:84:89:55:8a:5e:63:81:
3a:66:2b:96:4f:1c:1c:2a:0d:a0:6a:d4:f8:b0:71:7e:5d:99:
d2:0a:7f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:48 2025 by rpki-client