Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/847D11D2211611F083E5FDCEDAE4EC9C.roa
File: 847D11D2211611F083E5FDCEDAE4EC9C.roa (raw, json)
Hash identifier: lEhXEoSW/UOoJJONoQ6t4MLUsD6E/nsLxw15570wSxk=
Subject key identifier: BE:AD:2F:84:D8:5C:8D:15:D9:E6:13:14:CD:A6:7A:88:31:27:E6:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/847D11D2211611F083E5FDCEDAE4EC9C.roa
Signing time: Thu 24 Apr 2025 14:15:05 +0000
ROA not before: Thu 24 Apr 2025 14:15:00 +0000
ROA not after: Tue 12 Aug 2025 14:15:00 +0000
asID: 133199
IP address blocks: 45.207.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85646 (0x14e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 14:15:00 2025 GMT
Not After : Aug 12 14:15:00 2025 GMT
Subject: CN=680a4769-bc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:57:a0:86:79:65:e9:60:d2:f8:61:aa:92:
84:78:35:ec:74:b7:5c:11:90:30:f2:1f:e1:22:71:
30:5c:87:d6:c3:90:ee:67:bf:21:60:b7:2d:6f:30:
10:a2:54:85:ad:5b:72:f2:b4:ef:be:df:08:98:a3:
78:7c:22:8b:15:b8:6f:ca:ce:d9:d8:c3:6a:06:44:
a0:74:7a:8f:3f:dc:c2:40:ba:33:0c:e5:7f:45:0c:
60:29:40:e4:6b:0f:3a:45:26:2e:e3:5f:dd:17:2a:
9a:f0:c3:15:45:8f:8a:a6:f9:99:d3:d1:c7:fd:f1:
e1:2e:f5:8d:d1:07:05:4c:8c:9b:4b:68:ff:a9:cc:
58:ed:cb:34:6e:69:2d:b2:cd:6e:ed:15:d0:f6:ef:
65:7b:ef:fe:46:8b:8c:bb:74:a8:35:cd:43:ad:88:
8f:fe:29:24:8a:93:e3:c6:84:0b:6a:2e:5d:48:b0:
bd:00:e8:5f:78:32:72:78:7c:bc:1d:3a:02:b5:fd:
c8:a7:aa:02:ac:d9:8d:f7:a9:72:c7:79:0b:25:3d:
ff:de:f1:15:1e:71:2c:17:e0:e6:a8:1e:0b:b9:71:
00:4a:01:bb:b4:7f:db:61:68:cd:47:05:26:44:fe:
c9:8f:0d:dc:0b:c3:6c:b9:85:76:d0:6c:83:48:a3:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AD:2F:84:D8:5C:8D:15:D9:E6:13:14:CD:A6:7A:88:31:27:E6:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/847D11D2211611F083E5FDCEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.45.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2e:fd:b2:7c:6f:54:50:cb:d7:11:01:75:c4:4b:6f:0b:c3:
68:d2:6b:29:7b:e3:1c:59:7d:68:ad:70:ed:a4:77:34:14:40:
d6:20:9f:bb:d4:76:2d:93:28:ca:9e:29:b5:1b:c1:ca:58:3d:
86:d5:2a:18:da:fd:c2:92:bb:c6:18:b1:1b:6f:08:9c:04:1a:
1d:38:d0:fa:84:d6:a3:9f:ab:e1:ee:ea:24:c2:45:58:c8:bf:
9a:c6:85:cb:8c:cb:48:85:ab:1e:08:04:cc:9c:81:ba:5c:71:
05:40:9e:4d:93:f7:20:28:5e:8f:4e:c9:39:b6:6a:b3:8c:6c:
65:23:e0:5f:35:9d:bd:d2:9b:67:44:fc:ae:ed:e8:eb:95:00:
47:16:6a:ed:f6:df:c2:91:f6:9b:05:54:2b:65:c7:50:3b:76:
8f:69:d5:00:3f:aa:0c:3b:01:1b:de:cf:68:20:7f:70:9e:33:
e1:2a:e7:3c:d2:b0:5e:3e:79:b4:30:53:5f:5a:8b:d2:0d:e0:
78:ca:f8:11:cc:d1:ae:e8:60:b1:4d:97:ae:a4:72:47:9b:d1:
f3:f7:ba:34:92:f4:90:ca:d8:0b:e5:6c:76:07:1f:27:52:c1:
a0:04:fc:d3:7a:3b:74:41:d3:ad:8a:26:f8:3e:86:35:10:b0:
ca:0b:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:19:45 2025 by rpki-client