Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFE0FFF80CDC11F09287B55A762E951A.roa
File: FFE0FFF80CDC11F09287B55A762E951A.roa (raw, json)
Hash identifier: c2X7JSvMgp1+EYZCGe1YYtiLf6Hn4NdO71fTUaTv6YA=
Subject key identifier: 70:72:7C:44:4F:79:68:1F:2B:43:67:A9:3D:1F:FC:FA:40:53:D5:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014921
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFE0FFF80CDC11F09287B55A762E951A.roa
Signing time: Sat 29 Mar 2025 20:32:57 +0000
ROA not before: Sat 29 Mar 2025 20:32:53 +0000
ROA not after: Wed 23 Jul 2025 20:32:53 +0000
asID: 140925
IP address blocks: 45.195.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84257 (0x14921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 20:32:53 2025 GMT
Not After : Jul 23 20:32:53 2025 GMT
Subject: CN=67e858f9-d118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:23:7f:9e:c5:ed:e8:68:ee:11:2e:7b:fb:8a:
65:53:d4:99:8c:fc:13:37:ab:ef:c2:6d:ca:bb:98:
a5:9f:88:d3:96:a1:6b:da:8c:f7:04:6f:66:2a:d5:
51:fb:11:96:b1:6e:96:0f:d9:f9:f0:7e:60:81:07:
15:a2:fa:59:c1:c5:35:70:bc:a1:4b:8b:6e:00:d3:
47:29:89:8b:d0:d7:17:b5:ac:ea:7f:0e:2c:d6:f4:
ea:22:8c:1f:69:3d:da:a0:8b:7c:6a:41:70:4d:35:
a3:f1:08:f5:4e:0f:73:3e:24:05:dc:7e:da:76:fc:
a7:a8:fb:ca:73:80:6b:13:15:18:70:12:eb:c0:08:
05:69:fa:29:b9:db:1f:3c:cd:1d:d2:ca:cc:55:0c:
f6:c5:75:5d:d2:62:9d:a1:be:cf:78:e1:e3:bf:ae:
20:1a:86:2b:a8:fe:95:5b:13:e0:85:db:0d:35:91:
b1:33:30:28:74:bf:92:71:78:28:0a:88:7b:ed:dd:
ca:29:41:07:c4:45:c1:0b:06:6d:38:83:19:83:52:
d7:ce:39:23:d7:74:87:a5:ee:40:5a:0e:22:c2:0c:
e8:1f:a8:c3:7e:3c:03:5e:02:19:1c:c1:a9:e8:19:
12:46:08:21:f2:c2:9f:43:28:f9:fa:40:9b:99:17:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:7C:44:4F:79:68:1F:2B:43:67:A9:3D:1F:FC:FA:40:53:D5:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFE0FFF80CDC11F09287B55A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:2a:29:40:48:fb:bd:cd:aa:dd:e7:97:18:8d:50:00:79:c1:
69:0a:9d:e3:46:ae:8c:80:ed:e4:88:0a:a9:f2:9d:37:a8:da:
6b:00:e4:f1:13:8c:8c:ff:f8:8e:33:c1:70:64:1a:46:d7:01:
6d:88:f2:50:04:6f:b0:a3:b8:97:ad:9f:df:65:e1:b4:27:53:
08:28:cb:44:96:e4:dd:4e:32:4b:ab:e9:ad:85:a7:59:1e:58:
94:64:95:c6:64:c3:4c:f1:a0:a4:5f:a1:e7:c1:02:b0:a4:f1:
9c:3d:48:94:f0:d8:28:fd:84:44:fe:8a:44:eb:fb:ca:cb:87:
9f:73:45:cc:c2:b8:76:66:82:22:b3:81:1c:81:2a:4f:8b:02:
60:3c:d0:40:d6:85:ca:33:5a:e9:df:83:93:ea:73:d7:de:67:
aa:fd:b6:27:cf:ea:4b:59:40:5d:a6:1f:a8:69:65:54:00:c0:
e0:9e:45:cd:3f:87:06:63:2a:de:ae:3c:dc:8f:7b:85:16:27:
d2:3c:23:23:84:63:90:33:22:6e:3c:5a:28:aa:67:58:f7:d2:
df:ac:cb:34:c0:d3:84:49:59:0b:eb:74:e3:c6:68:a9:82:6b:
12:b3:cb:c9:a0:80:c4:ff:f5:a2:47:b1:f8:59:91:37:49:fb:
aa:4b:46:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:10 2025 by rpki-client