Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CEBEE3C1E8211F08F08DB94DAE4EC9C.roa
File: 4CEBEE3C1E8211F08F08DB94DAE4EC9C.roa (raw, json)
Hash identifier: bpe/bZGCk/u2I4rdCXqRV3IDcf0QVAcnoWDBfV4z/y8=
Subject key identifier: 44:00:33:1C:FE:AB:39:E4:9E:48:A8:EF:A4:1F:8A:3F:EF:86:15:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CEBEE3C1E8211F08F08DB94DAE4EC9C.roa
Signing time: Mon 21 Apr 2025 07:29:04 +0000
ROA not before: Mon 21 Apr 2025 07:28:59 +0000
ROA not after: Sun 25 May 2025 07:28:59 +0000
asID: 214967
IP address blocks: 45.197.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85440 (0x14dc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 21 07:28:59 2025 GMT
Not After : May 25 07:28:59 2025 GMT
Subject: CN=6805f3c0-68b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:2c:4f:08:fc:2d:2e:42:06:76:aa:07:c4:
db:d7:3b:aa:0a:a0:53:d5:8e:76:bf:38:2f:66:5c:
62:a1:85:26:29:d1:bd:78:73:9f:70:0c:87:d6:07:
61:9f:41:1f:30:12:2b:e4:e5:6c:7b:d8:2a:b8:af:
bb:cb:23:78:3e:4d:ad:45:73:ce:5b:ca:9c:1d:92:
e0:ff:6e:5a:e2:4d:61:25:25:e4:3f:39:81:87:3d:
f0:dc:31:d2:72:ff:4d:96:4a:c8:bb:f5:a2:26:05:
d5:59:5d:0b:00:fe:bc:b7:0a:3d:d6:6b:c2:7e:7d:
4e:06:9e:9d:4c:a3:f2:ea:2b:5a:ab:b7:c8:a2:7a:
73:73:de:8a:dd:4e:f4:e3:33:ac:2f:9d:a3:d0:5b:
71:8d:ee:b9:32:b6:0b:d1:3a:a3:31:e9:fb:9c:fd:
ed:fe:30:00:66:6b:be:e0:b6:ad:39:7e:fc:55:0d:
80:cd:8d:ad:36:ba:82:3d:04:73:bb:b9:54:56:bf:
84:54:52:00:8c:f1:36:4e:c9:82:f2:91:5d:d5:78:
0e:6f:5f:f8:90:05:a7:7b:75:2a:2a:47:69:81:89:
d0:d0:73:65:b9:15:20:06:75:20:19:49:82:64:f8:
75:6c:d1:b9:aa:e4:48:b7:ca:f3:9e:9d:63:66:c9:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:00:33:1C:FE:AB:39:E4:9E:48:A8:EF:A4:1F:8A:3F:EF:86:15:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CEBEE3C1E8211F08F08DB94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.25.0/24
Signature Algorithm: sha256WithRSAEncryption
73:60:f8:27:be:0a:e4:ea:1a:48:75:d9:7d:37:f9:b3:aa:10:
df:2e:8a:82:5d:c2:fc:cc:aa:62:72:62:8e:ea:20:19:ab:3e:
0b:00:9d:93:82:24:19:c5:75:44:68:f0:de:fb:08:19:d2:eb:
59:d5:43:52:bd:ea:68:48:10:58:2d:e2:0f:91:da:7a:a1:ed:
bc:b5:94:6a:60:02:fc:02:05:97:92:85:9f:83:3f:12:29:57:
47:7c:ce:08:8a:ca:62:87:7e:81:a2:18:36:3e:d9:ae:48:da:
37:09:9d:8d:d6:3b:fc:3e:7a:38:ec:5e:db:06:08:85:e8:40:
ba:54:25:d3:f5:f7:0b:fa:04:a4:2f:6b:90:f1:41:da:66:99:
4a:ce:72:88:82:29:b6:23:f7:e1:7b:1f:6d:92:af:97:97:ed:
44:0a:f7:a7:04:79:7e:44:55:2b:f7:2f:a8:86:b1:ba:5e:a2:
84:23:e0:81:7e:26:04:d2:2c:bb:8c:2f:92:6f:16:0f:4e:ed:
f0:da:d7:f0:ce:b2:aa:52:39:ce:df:99:1b:b5:47:63:28:35:
87:94:f6:5b:ea:ae:ec:e6:9f:f8:21:a7:e3:36:a8:3c:19:00:
61:de:85:d6:a6:5d:1c:41:9b:91:d0:ce:55:ae:0f:18:2b:ae:
ce:52:70:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:32:40 2025 by rpki-client