Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8492A4E1CFF11F0AD9C777CDAE4EC9C.roa
File: F8492A4E1CFF11F0AD9C777CDAE4EC9C.roa (raw, json)
Hash identifier: 4lq8Eo8CMsPz6HJpKr6WJFaQgr1Ryni9BCSfLi1RslI=
Subject key identifier: 65:30:30:70:4E:63:59:16:80:33:4F:3A:DA:C0:49:8D:24:48:8E:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8492A4E1CFF11F0AD9C777CDAE4EC9C.roa
Signing time: Sat 19 Apr 2025 09:23:36 +0000
ROA not before: Sat 19 Apr 2025 09:23:31 +0000
ROA not after: Fri 30 May 2025 09:23:31 +0000
asID: 54600
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85388 (0x14d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 09:23:31 2025 GMT
Not After : May 30 09:23:31 2025 GMT
Subject: CN=68036b98-c9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:a4:ac:66:98:58:59:7c:2f:35:d5:c8:2f:
cf:c8:d9:87:ab:44:49:77:a2:93:07:8f:aa:8b:4c:
f5:c5:70:89:b9:6f:ee:38:e6:09:76:65:7a:1a:fb:
cd:ab:0b:1d:20:f6:98:81:c9:88:ea:65:5d:94:69:
89:af:0c:5a:46:33:33:76:6f:12:7c:4d:fe:14:b2:
7d:a9:9a:cd:2a:7a:76:24:51:d5:3c:a2:7b:f2:44:
7c:f4:f3:d7:a6:dd:a1:f7:77:98:16:19:1c:18:5f:
63:f2:3d:31:2d:60:12:13:0e:45:48:c6:91:2e:a7:
0a:9e:03:6a:67:eb:a8:dc:5d:5b:11:69:a2:01:d8:
06:a1:57:f3:d2:fa:b2:c7:ab:c7:4e:d0:c2:ff:39:
41:be:a9:b7:41:8c:7e:f2:7e:58:40:30:56:df:02:
69:8c:62:f2:7c:c4:63:cd:c4:9c:c1:ce:6b:f4:ba:
9d:31:01:51:28:a5:2a:52:88:ba:0e:dd:38:3a:2d:
e6:91:b2:16:6a:d5:41:b2:cc:48:cc:e6:e9:5c:88:
23:a1:78:24:27:72:b6:84:a9:68:30:dc:a8:a9:cd:
18:01:ec:bf:ff:a2:ed:fb:15:76:7f:64:6b:c7:9e:
f0:0f:52:84:0c:76:ba:03:9e:c9:65:72:f0:a7:aa:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:30:30:70:4E:63:59:16:80:33:4F:3A:DA:C0:49:8D:24:48:8E:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8492A4E1CFF11F0AD9C777CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
50:5d:f3:61:62:e5:31:7f:bc:77:1a:be:77:c4:77:b3:b8:9f:
03:11:63:da:1e:58:7d:9e:9d:8e:d0:2d:a8:10:f0:56:d6:a6:
4d:83:f0:25:f1:fd:74:f1:63:f9:09:eb:7c:fc:8f:df:5f:df:
b6:c9:98:8f:b0:18:78:00:db:93:25:15:fe:30:c9:19:45:ec:
04:3c:00:56:96:c0:8f:0b:ab:3e:a8:0d:1a:64:bf:43:03:15:
5d:0e:e0:22:84:56:fe:d2:2c:c6:93:ca:1d:91:8c:77:71:e7:
61:35:ce:dd:38:92:b5:89:c6:ac:90:7a:b1:f9:be:dc:b0:e6:
0f:b0:43:16:71:f6:4d:51:f0:ac:5c:9f:70:1e:3a:2a:72:6d:
e8:65:0e:3b:c5:52:74:8e:e4:d3:2b:0a:fa:f2:47:ba:4c:f3:
00:0a:aa:ab:c1:1b:05:9f:64:e7:bf:3a:14:38:56:db:22:8b:
f2:ac:13:55:46:78:92:c4:de:93:6a:f5:3f:fe:27:81:c4:da:
22:3d:62:8b:11:74:f8:49:f3:5c:8b:07:51:a5:a8:c7:d5:3f:
12:30:73:04:64:ce:b6:44:40:ce:f2:0e:bc:e7:2f:d1:e0:c2:
2b:5e:61:10:4d:9f:2c:79:2b:6b:e4:16:b5:c3:5e:9f:31:37:
a7:9d:ed:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:05 2025 by rpki-client