Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/541A885221B211F0936E48E6DAE4EC9C.roa
File: 541A885221B211F0936E48E6DAE4EC9C.roa (raw, json)
Hash identifier: qd9Ey0KFXj3ZiI8RMAhFz5uWtNCQ+a/HUjxtIX1W+Jg=
Subject key identifier: B7:18:D7:A8:F6:6A:A6:5C:6D:2A:B0:5C:D9:D1:0C:0C:51:36:E5:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014EAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/541A885221B211F0936E48E6DAE4EC9C.roa
Signing time: Fri 25 Apr 2025 08:50:25 +0000
ROA not before: Fri 25 Apr 2025 08:50:20 +0000
ROA not after: Sat 17 May 2025 08:50:20 +0000
asID: 395793
IP address blocks: 45.196.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85678 (0x14eae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 08:50:20 2025 GMT
Not After : May 17 08:50:20 2025 GMT
Subject: CN=680b4cd1-676b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:3f:86:c0:4c:ff:b4:0e:11:f4:08:9b:db:
6a:3c:f1:ed:eb:76:68:9f:c5:ab:a7:c5:17:ac:9d:
a5:58:e5:8f:05:b3:e4:fd:62:bd:98:ca:2e:9c:b6:
27:02:ca:11:92:5a:5e:d6:a5:b5:16:46:1e:8c:09:
4c:d8:32:67:bf:6b:28:a2:b5:ea:62:e5:6c:07:de:
85:09:81:02:7a:af:b1:6f:4c:93:a2:fd:b1:56:36:
0c:4c:3b:97:75:2f:d8:d2:18:62:b4:76:4a:d9:28:
03:27:31:4f:b3:87:39:48:cd:10:c9:ad:e9:a4:37:
29:ae:65:6c:7a:3c:5b:34:a2:d5:7d:b4:68:dc:aa:
8e:8a:6c:aa:5e:af:02:db:de:f9:9d:dd:d9:db:10:
e8:9e:a5:69:98:45:a3:95:9c:99:c7:60:49:fe:e9:
3f:9f:8c:98:5d:e5:70:6c:cf:cb:fe:31:46:a0:59:
03:3d:b8:ad:0d:84:55:33:a9:f6:23:6e:0c:bf:4e:
87:a4:02:cf:99:7a:d9:23:f6:8c:20:c9:15:ee:0b:
07:3a:ec:da:e8:46:dc:78:b5:3e:0c:6e:1d:81:d0:
5b:69:48:d1:13:46:e7:c5:5f:cf:1b:ee:47:b9:6c:
72:c2:7a:11:86:5a:50:0d:28:f2:ae:00:3b:bc:2f:
25:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:18:D7:A8:F6:6A:A6:5C:6D:2A:B0:5C:D9:D1:0C:0C:51:36:E5:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/541A885221B211F0936E48E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.226.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3f:7a:f5:3a:7c:bc:d9:94:64:06:87:9d:b7:40:86:5c:d8:
d2:06:39:da:9c:72:a6:71:2c:ba:00:0e:cc:67:45:ab:41:82:
35:85:06:89:84:fe:96:7d:11:2f:cc:1e:f1:31:a1:48:d3:fd:
24:12:ab:23:58:df:44:14:6d:f2:8b:30:76:2c:cb:80:f9:46:
06:9e:c6:71:1b:64:86:99:a2:23:d7:56:0a:8a:20:cf:39:ee:
9c:d9:5a:c7:ff:29:4c:c6:f9:85:02:eb:4d:26:77:4e:3c:d9:
ca:70:de:64:12:1b:a6:e8:11:67:d1:b2:08:97:df:67:2b:96:
4b:65:f0:73:9e:ba:9a:e5:c2:e9:1d:aa:15:e7:59:00:08:41:
87:0c:10:a1:ed:49:10:47:6d:65:e2:5d:88:96:97:21:51:c0:
9e:a7:5a:9a:bb:f7:f5:bf:b6:7a:80:99:d8:c4:c2:38:83:7e:
d8:18:15:2c:b2:9d:6a:fa:93:54:82:0e:8c:d0:fa:af:8b:b5:
2d:67:ce:ce:78:1e:d2:72:fc:33:72:f1:51:75:d1:50:da:14:
be:28:22:d8:17:18:d0:70:33:49:fd:72:70:57:8b:25:1f:92:
b2:53:d1:69:1d:44:d9:b8:47:37:2d:31:ea:1c:e4:cd:50:51:
8e:50:28:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:10:13 2025 by rpki-client