Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF62320AE55311EFB9C8C6A4762E951A.roa
File: FF62320AE55311EFB9C8C6A4762E951A.roa (raw, json)
Hash identifier: 8NWl3b0glTwTsjiRk2CEtNw9Uel+2/7Jx6Mb1f8nSes=
Subject key identifier: 28:99:DE:2C:F1:05:2F:F2:49:98:B8:F7:AF:D9:0F:54:2D:A2:27:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF62320AE55311EFB9C8C6A4762E951A.roa
Signing time: Fri 07 Feb 2025 13:04:00 +0000
ROA not before: Fri 07 Feb 2025 13:03:57 +0000
ROA not after: Wed 21 Jan 2026 13:03:57 +0000
asID: 984
IP address blocks: 45.192.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73112 (0x11d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 13:03:57 2025 GMT
Not After : Jan 21 13:03:57 2026 GMT
Subject: CN=67a604c0-3d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:ce:55:be:5d:f7:bb:a8:e8:70:49:93:ab:
a3:f3:d7:97:dc:db:55:ea:5f:7a:a0:a2:7b:b8:78:
80:0d:60:1e:68:f8:4c:24:8b:02:b7:5f:c5:cf:c0:
78:80:02:5b:70:b0:ab:b5:d2:3a:5b:9a:d4:7e:82:
c7:b7:64:c5:60:74:57:41:22:92:cb:21:f3:52:11:
69:a1:25:39:18:f1:ce:6d:16:ae:be:d0:f1:5a:00:
6d:94:bf:e2:76:31:f5:2b:0f:10:d1:6f:f2:49:05:
b7:9c:4e:8f:fc:a7:f7:e5:48:40:d4:13:21:3a:1b:
b7:b3:94:d8:c6:af:38:95:5f:88:14:ad:ae:44:5a:
7d:b9:78:87:f2:87:25:94:5f:fd:9a:6f:27:c3:10:
5b:e4:cc:6b:8e:c6:8d:f8:7a:65:5e:af:43:04:5e:
d9:7a:7b:fd:53:bc:77:96:96:33:78:6a:6f:f7:73:
a2:7a:6e:1c:46:a3:23:3e:7d:d4:63:78:62:98:ab:
09:67:82:f2:4f:53:e9:e3:80:4f:58:09:35:63:7f:
5b:8a:cf:10:a8:c1:3a:43:c1:f1:71:7b:5f:fc:8d:
96:25:d9:9e:00:3c:84:51:fc:4d:b9:bc:21:f3:06:
9a:90:9a:f1:18:75:d0:0c:c1:c1:43:1f:ac:d1:ed:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:DE:2C:F1:05:2F:F2:49:98:B8:F7:AF:D9:0F:54:2D:A2:27:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF62320AE55311EFB9C8C6A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.28.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:fd:7c:18:e7:e1:c7:7b:4c:50:db:0f:db:c5:90:ec:11:bb:
3f:1f:7b:b3:f1:a4:5b:15:e4:9d:39:62:6a:b4:f9:31:e7:22:
ea:b1:5d:3e:7e:f3:50:c1:9c:2e:d3:df:fd:2d:a6:c8:4c:61:
af:2d:e6:b4:73:1c:a2:f8:42:e7:44:2e:93:86:41:c3:40:3e:
5e:42:f0:a3:af:88:a6:f9:ed:24:22:4f:b4:e0:de:5e:dc:3e:
fd:f8:18:23:c5:19:88:c4:29:e4:14:9f:58:61:17:5a:cf:91:
2e:ab:9e:f3:78:97:e9:54:4d:2c:5d:79:63:5e:82:d6:6a:0e:
4e:2e:bb:e0:ff:af:61:a7:d3:6b:eb:02:89:28:c7:84:fd:15:
d2:1f:65:58:9e:be:a4:81:ba:4a:c7:bf:0f:43:67:ca:ec:b4:
86:25:3d:e6:95:c5:e4:3f:0f:3b:7b:32:0e:e7:15:87:5f:7f:
7a:55:7b:3e:61:29:82:71:78:c7:26:54:ac:4c:62:28:c3:2d:
54:2d:80:48:ec:37:94:69:78:85:0f:47:5b:93:0a:c5:c7:77:
1c:62:46:be:aa:30:02:e3:f1:18:bb:b0:a4:e0:1c:8a:16:ec:
ae:dc:f4:20:b6:47:6f:6c:a2:76:f6:87:17:6b:ca:07:8e:b0:
30:c4:1e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:32 2025 by rpki-client