Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/120452E02A5411F0B1AFAAACDAE4EC9C.roa
File: 120452E02A5411F0B1AFAAACDAE4EC9C.roa (raw, json)
Hash identifier: E203Pu84lBAaY07MKn66Mc1tGze4wPVQdEjN89V4xNU=
Subject key identifier: EF:85:77:FB:02:DA:88:56:3D:AE:5C:39:E0:78:17:85:94:1F:A5:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015237
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/120452E02A5411F0B1AFAAACDAE4EC9C.roa
Signing time: Tue 06 May 2025 08:28:22 +0000
ROA not before: Tue 06 May 2025 08:28:18 +0000
ROA not after: Sat 06 Jun 2026 08:28:18 +0000
asID: 984
IP address blocks: 45.196.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86583 (0x15237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 08:28:18 2025 GMT
Not After : Jun 6 08:28:18 2026 GMT
Subject: CN=6819c826-f833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:d4:be:c9:69:4b:f0:7b:ca:b2:4d:a7:bd:
32:0c:d8:fc:81:d7:55:27:3d:b0:a5:f3:b6:92:ca:
07:d9:cf:ce:a1:1e:7c:24:6d:4b:af:f9:93:74:72:
63:98:06:58:06:c1:70:11:ee:c9:2e:29:b4:0f:ae:
6b:da:ac:16:a0:b6:3b:1f:a4:fd:0b:f3:d8:48:ab:
80:7c:cb:e4:f7:bb:c4:d6:18:6f:f0:1b:10:38:e4:
a0:ea:4c:55:90:a8:ca:9d:60:29:20:e4:2e:fb:36:
9a:c9:ab:f9:18:00:35:6e:be:9f:36:1f:36:ec:3c:
bd:5a:0f:41:cc:c9:2a:de:91:b6:e2:a6:43:94:70:
55:27:73:ce:5f:96:5c:ee:69:cb:09:7f:fc:8c:5f:
b4:69:88:83:02:97:38:ba:45:89:7a:60:e6:d2:8a:
68:88:b9:2f:3b:b8:48:a7:eb:5f:00:58:ee:97:25:
ed:e8:8e:e7:e6:cd:81:83:bc:25:fa:3e:1e:63:f8:
97:40:36:8e:98:36:28:0f:88:fc:2c:1d:0c:30:7a:
03:b3:63:16:46:f7:a5:0c:53:12:81:63:e2:8e:02:
4b:7d:70:e2:e3:15:2e:cb:ea:18:24:e4:68:ed:64:
d7:d9:d3:08:82:e9:c8:31:5f:02:d7:85:34:07:46:
f4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:85:77:FB:02:DA:88:56:3D:AE:5C:39:E0:78:17:85:94:1F:A5:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/120452E02A5411F0B1AFAAACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.113.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:eb:d8:09:b6:98:ae:50:83:9c:7c:6d:75:9c:c4:2d:ec:23:
b6:2a:4c:d1:ad:ae:88:b2:b8:c6:05:03:5e:82:49:d7:31:f0:
aa:2c:da:cd:d9:36:ef:d1:b5:a1:1e:85:ed:f5:ea:d1:95:b9:
d4:89:56:0a:a2:92:63:2b:76:20:a0:68:58:d2:4e:2b:6b:92:
86:b6:44:5d:2d:d1:76:be:52:23:4b:63:34:26:45:e3:9b:8c:
e3:86:26:9e:56:86:3e:db:c9:0f:52:23:b8:b7:d9:75:e7:9a:
14:42:48:f8:46:bd:26:a7:31:59:23:ed:ec:ca:92:ce:a9:ae:
77:5e:7f:75:aa:e7:d5:0b:c3:db:5c:16:50:80:41:8b:b1:9e:
b8:5f:2e:bd:8b:b7:af:22:3e:ad:db:1c:07:10:09:94:2e:f5:
8a:44:cd:94:90:00:04:93:a6:4f:4a:bc:fd:00:77:2f:7e:55:
5d:9c:df:ba:bc:f6:8d:70:d5:54:75:6d:34:bf:12:21:76:a2:
61:6b:c5:18:65:b0:14:f8:69:1e:f4:bc:ae:ac:e3:8c:61:85:
3b:ec:50:46:f6:04:2d:44:17:04:64:fe:0d:a1:26:5f:9f:4f:
a8:8d:5a:a7:b8:fa:00:f0:9c:87:70:27:1e:50:21:19:a4:bd:
3e:d1:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:00:27 2025 by rpki-client