Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8079D14A13BC11F0A548A67F762E951A.roa
File: 8079D14A13BC11F0A548A67F762E951A.roa (raw, json)
Hash identifier: a5R7MprUWHR+i1le9qVmVSAElbLo3UpOjvujdQI2gDw=
Subject key identifier: BF:81:5B:BB:5C:70:0C:43:CF:88:B6:AC:D0:0F:6A:6D:84:3A:35:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8079D14A13BC11F0A548A67F762E951A.roa
Signing time: Mon 07 Apr 2025 14:27:58 +0000
ROA not before: Mon 07 Apr 2025 14:27:54 +0000
ROA not after: Sun 08 Jun 2025 14:27:54 +0000
asID: 215691
IP address blocks: 45.198.54.0/24 maxlen: 24
45.198.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84598 (0x14a76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 14:27:54 2025 GMT
Not After : Jun 8 14:27:54 2025 GMT
Subject: CN=67f3e0ee-00c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:96:37:f7:2c:e7:37:2a:7d:8d:86:6e:7f:
78:b9:38:d3:d6:55:c2:17:37:72:e1:4a:1f:fa:c2:
da:15:d7:aa:4d:e0:41:02:37:d5:71:27:be:65:fe:
27:4a:65:73:8d:f6:a4:ac:7d:37:64:73:59:cd:26:
7c:e7:a8:b2:82:f9:69:ec:55:41:8c:d8:be:e7:3a:
69:a9:cb:29:d4:dd:04:28:d4:36:47:54:ea:22:98:
44:5b:01:72:6e:00:48:b3:79:f0:57:c8:37:7f:81:
9f:82:cb:bd:e8:3e:1f:73:cc:1e:fc:d3:e5:d1:d0:
03:9e:de:6d:e3:89:09:c2:0d:8a:4a:b2:9b:ce:a8:
00:60:f6:d6:93:bd:ba:d4:b0:33:04:ad:2e:a0:8e:
a0:72:36:af:da:c9:99:c5:68:c5:80:85:9b:04:a9:
c2:53:82:9c:ed:d7:c3:51:86:9c:38:3f:c5:d8:fe:
a3:75:c5:b9:39:59:2e:a4:0c:a9:c2:2f:38:1b:f7:
f6:64:95:6f:ef:d6:42:96:d8:25:f6:ca:71:91:ad:
0d:31:5a:d0:0c:73:96:7e:09:09:58:c4:87:7c:f5:
bc:c6:cd:c0:ad:6a:8a:45:b9:63:ed:bf:45:e8:a4:
ab:56:52:8a:e4:0b:83:f7:09:ea:fc:50:59:ad:47:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:81:5B:BB:5C:70:0C:43:CF:88:B6:AC:D0:0F:6A:6D:84:3A:35:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8079D14A13BC11F0A548A67F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.54.0/23
Signature Algorithm: sha256WithRSAEncryption
71:8f:7f:f0:9f:ef:1e:69:28:bb:e9:fb:52:6c:04:d3:f0:91:
6c:ae:19:da:22:c2:f1:c0:1d:c5:86:66:e9:71:ac:d7:61:84:
d5:09:f2:67:75:e2:b1:ad:31:74:23:f8:1d:41:ec:24:fd:10:
7b:39:cf:80:d8:74:bb:13:d1:05:39:8c:cd:72:df:cd:2f:30:
b8:1b:2a:44:50:a3:7c:8d:82:1f:2f:6f:56:3d:88:a7:97:ee:
f7:49:2e:c0:32:2e:5d:2c:3f:8a:77:f6:42:95:1a:1d:84:66:
a3:48:06:8a:9b:3a:9c:37:5c:b2:a8:33:00:7d:9a:17:a0:1b:
c1:6a:41:42:80:02:37:25:a3:da:e7:fc:83:ec:3c:d9:26:d4:
3a:31:31:2d:17:6e:cb:14:5c:df:cd:3c:6d:12:ac:c7:88:da:
38:33:0a:fa:50:05:96:59:6c:20:f4:b6:b3:d0:d1:68:a8:15:
2f:e6:36:65:8d:9b:4f:e6:06:5d:fa:8a:37:54:59:8c:fb:38:
2f:f1:f9:e4:0d:5f:bc:b1:f7:ac:99:4b:5e:24:85:95:d5:be:
c9:ed:f5:a5:73:1b:5c:69:28:b4:64:95:1c:66:09:ea:4c:bd:
c7:16:e8:fb:b0:25:82:fa:85:ca:bb:b7:e0:d4:62:5e:67:ad:
44:3d:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:28:35 2025 by rpki-client