Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18AEBAE2242B11F0A3AEA4E9DAE4EC9C.roa
File: 18AEBAE2242B11F0A3AEA4E9DAE4EC9C.roa (raw, json)
Hash identifier: 8lLJ9lY6pQfK8cqP97Ezc0wA/J1OfX7cxd1OEplLZdQ=
Subject key identifier: 34:AF:AB:F3:57:1B:6B:B5:D4:85:33:BD:CD:8E:EF:1E:61:FF:B9:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18AEBAE2242B11F0A3AEA4E9DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:19:57 +0000
ROA not before: Mon 28 Apr 2025 12:19:52 +0000
ROA not after: Sat 21 Mar 2026 12:19:52 +0000
asID: 984
IP address blocks: 45.200.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85796 (0x14f24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 12:19:52 2025 GMT
Not After : Mar 21 12:19:52 2026 GMT
Subject: CN=680f726d-f0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:26:cc:00:cf:09:9a:f5:41:6a:33:fc:49:
46:04:cb:d9:6b:87:f4:c0:64:15:9e:0e:5f:fc:ff:
61:3c:20:d8:d0:fb:c8:30:10:7d:a3:72:a1:ac:5e:
b0:00:95:80:21:70:41:b7:4f:be:b9:43:b6:0c:89:
95:5e:a3:3b:ff:4c:a8:7a:5f:75:36:e8:49:f1:89:
3d:48:2b:8a:c6:a0:6e:53:8b:28:3e:78:02:76:e3:
e9:9f:50:9b:f8:cf:ec:7d:1d:e3:9b:d4:e7:c3:08:
22:33:8b:bb:4b:60:3d:70:f0:a6:6e:04:6d:d1:44:
63:a4:de:42:41:ca:ca:48:de:0d:28:c5:88:99:c8:
cd:64:c4:d8:81:04:0d:00:09:f8:2b:33:40:a8:b7:
50:f8:8d:5b:a2:02:5c:d2:56:43:11:2d:a4:6c:f9:
d4:cd:74:52:f2:18:2a:4e:ce:8d:81:ab:d3:8a:e2:
61:d3:69:dd:86:11:69:35:61:73:ca:76:a1:51:5a:
4d:81:9c:47:83:6b:7d:d1:a0:a4:0c:37:54:19:63:
b9:ce:10:ed:73:69:ba:54:9b:7d:cc:2c:79:22:1a:
54:20:ea:91:61:11:bf:13:6e:04:4a:33:70:e2:e6:
e9:94:35:7d:a5:c4:9f:4b:18:4b:6c:06:00:cb:bb:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AF:AB:F3:57:1B:6B:B5:D4:85:33:BD:CD:8E:EF:1E:61:FF:B9:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18AEBAE2242B11F0A3AEA4E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.141.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d8:7a:10:5e:e7:c2:b1:ab:e6:ab:fa:60:11:5e:c8:62:0c:
eb:fa:53:1b:3a:68:bf:cd:ec:68:50:6f:c7:a5:86:8e:49:8c:
08:1c:90:22:2e:62:34:a9:c8:ca:77:7d:c2:7e:33:2a:34:4d:
0f:64:a1:47:96:86:2c:4b:80:d0:08:c2:93:0a:d3:99:ec:89:
a0:56:18:ec:87:d6:29:e4:d6:8e:9b:2e:95:ac:58:6c:ca:43:
ce:e5:7e:81:a9:7b:a9:8e:98:c5:05:ca:f0:c6:de:99:92:89:
77:53:a3:d0:e2:fc:9a:5a:2f:47:85:60:90:7e:5e:af:1d:1c:
82:46:5d:b5:52:1e:19:77:46:15:61:99:bb:fb:37:69:16:fc:
99:6a:df:c3:53:75:76:d4:71:34:1c:3e:26:2d:09:b4:14:e8:
b9:3e:72:59:d0:43:ee:47:74:fb:15:3e:64:a0:24:a9:76:ac:
dd:6f:19:6f:7b:fa:96:47:40:39:0b:62:d7:89:fa:a3:31:1f:
cf:4d:ea:8a:7b:a7:c0:ff:a0:d8:1c:f3:6e:18:9f:3c:6e:c3:
29:3b:c3:d2:aa:69:10:48:82:77:d0:8e:09:02:9f:ba:bc:23:
01:04:63:b3:e2:63:61:49:23:ea:8a:f8:ef:dc:d9:d0:57:c2:
36:c2:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:56:16 2025 by rpki-client