Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3170283C15E811F0874587B96DB8BCC6.roa
File: 3170283C15E811F0874587B96DB8BCC6.roa (raw, json)
Hash identifier: WMojviluLkgpLb1PLNJhcBv4xeav/fIvrcqL48gSM4g=
Subject key identifier: 9A:99:E2:47:8E:6F:DB:04:37:BB:0A:52:9B:2F:59:4F:44:E2:D4:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3170283C15E811F0874587B96DB8BCC6.roa
Signing time: Thu 10 Apr 2025 08:45:45 +0000
ROA not before: Thu 10 Apr 2025 08:45:42 +0000
ROA not after: Wed 25 Jun 2025 08:45:42 +0000
asID: 135097
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84825 (0x14b59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 08:45:42 2025 GMT
Not After : Jun 25 08:45:42 2025 GMT
Subject: CN=67f78539-afb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:0d:eb:e6:16:3f:54:9f:6f:b0:2c:59:8b:
cb:ba:01:13:9b:f2:5f:b2:6e:10:0e:bf:bb:52:43:
59:13:5a:f4:c3:a8:67:fc:f4:c2:c0:02:2b:28:62:
22:ad:25:76:c5:3c:ce:bf:27:2f:25:0e:97:86:bd:
df:54:08:20:f9:6d:3b:f8:72:e2:ac:7b:34:99:e8:
ee:aa:df:60:c4:85:3e:7f:0f:3b:0f:63:fa:b3:66:
f9:71:87:3f:e2:07:94:0f:2f:34:48:55:9d:28:05:
91:91:78:ec:b7:7d:14:27:96:db:33:8b:12:2a:65:
d9:c0:d0:24:d0:b7:e2:0d:25:41:7c:cf:92:4a:5f:
13:00:36:1d:1b:e3:c7:41:35:66:36:c4:0c:47:10:
02:97:a0:ab:9b:16:5b:4f:aa:17:cb:fa:43:24:15:
8a:d5:17:a1:f9:d9:6b:05:25:20:a0:89:83:3d:e8:
95:91:d8:0a:b3:fe:0c:0c:ae:61:38:fc:cc:6a:c7:
ff:36:54:d5:6f:d5:8d:f2:ae:4c:83:94:f3:55:ee:
b9:34:5d:9a:ce:40:fb:83:15:96:a2:d9:cb:4a:d9:
15:fc:7b:85:3f:36:0e:b4:28:59:6c:58:22:70:09:
8d:8c:95:93:5f:b6:84:cd:8f:1e:4a:5a:6d:e7:36:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:99:E2:47:8E:6F:DB:04:37:BB:0A:52:9B:2F:59:4F:44:E2:D4:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3170283C15E811F0874587B96DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6b:2e:28:39:28:ff:45:29:df:be:5e:b5:7d:d8:ee:5f:de:16:
b7:6b:fb:57:68:be:cb:50:75:a6:aa:a7:c9:e4:e1:ec:80:7a:
6a:c1:b7:13:00:2d:56:40:ea:19:9f:2f:4b:43:71:8f:5d:7f:
50:a1:a7:ca:67:36:eb:0a:1d:71:59:7f:a3:0e:b3:7f:c1:86:
8d:f7:72:2e:cc:fe:fe:91:50:21:3b:91:b1:f3:f5:6a:e6:a2:
53:91:65:a6:b7:ea:f3:8c:96:d4:48:20:1f:83:7d:c0:74:b6:
cf:2b:db:3d:0a:e1:48:8e:dc:98:82:40:ef:12:2d:8a:82:8a:
71:5e:4d:45:65:4f:36:2f:8e:e6:39:05:b4:13:d3:25:fd:76:
09:c8:5c:1a:1e:37:fb:6f:03:01:16:45:68:0f:35:68:58:32:
ef:ec:32:d6:e0:d6:f4:f8:ff:ab:0d:22:bf:41:b5:b9:ae:fc:
0e:81:16:41:3d:a0:a9:47:43:1c:5d:48:c0:21:19:a4:63:07:
d7:1e:f9:9f:73:93:60:38:05:8b:cf:7c:a2:a0:cf:c5:9d:2c:
f8:ce:ea:04:ff:55:7f:46:f7:f4:43:99:50:31:0a:ea:61:02:
8d:fd:7f:31:19:88:96:60:51:f7:6f:65:fd:d9:9e:39:b3:7c:
90:d7:45:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:34:45 2025 by rpki-client