Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99B70242243B11F0B5192DD9DAE4EC9C.roa
File: 99B70242243B11F0B5192DD9DAE4EC9C.roa (raw, json)
Hash identifier: dlPa5oao215Y/3+qDkMmxKS1+7gYDvl1f17NQ65sdDg=
Subject key identifier: 74:8F:D5:EB:7F:49:DC:97:D7:E4:3B:B2:A2:3D:C1:12:CC:B5:FF:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F68
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99B70242243B11F0B5192DD9DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:18:05 +0000
ROA not before: Mon 28 Apr 2025 14:18:00 +0000
ROA not after: Fri 27 Mar 2026 14:18:00 +0000
asID: 984
IP address blocks: 45.201.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85864 (0x14f68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 14:18:00 2025 GMT
Not After : Mar 27 14:18:00 2026 GMT
Subject: CN=680f8e1d-f64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:87:7e:8c:b1:0a:cd:eb:b2:4d:19:4a:2d:
83:34:6b:e5:cb:3a:61:41:71:03:8b:e4:44:c3:9f:
87:33:88:87:99:df:cb:dc:f1:e8:f2:af:c7:73:cc:
ed:45:35:4a:ea:45:21:5b:b1:00:00:00:e6:8a:50:
4e:94:6d:76:26:12:8c:1b:c4:b8:5e:15:c4:13:78:
58:c9:fd:98:ff:2f:f0:34:ac:8c:66:ef:55:b6:f7:
fa:f8:3f:2f:67:d1:9e:19:9a:5f:7b:9e:62:ea:7a:
a8:3f:9c:71:8e:ef:69:d3:f4:93:b5:45:57:84:f4:
4c:96:c1:98:5d:ed:52:11:78:96:7c:9e:e0:5a:2b:
54:c5:72:86:b4:23:46:bd:14:e0:ec:c0:74:08:71:
f5:6e:c8:63:f9:77:14:ca:7a:a0:b5:e1:b7:be:ed:
57:78:58:7d:df:2c:a7:24:40:e7:26:f5:7b:b5:ab:
a9:13:40:6b:39:66:a6:de:ff:aa:52:69:b5:0c:b2:
05:80:d6:90:44:57:91:4a:54:a5:a3:ce:3a:0c:d5:
08:65:c7:f2:21:54:81:40:d8:db:10:c1:ea:ae:71:
4a:73:bb:c4:82:6a:cb:e3:50:22:ad:a6:8d:ff:31:
83:57:6c:96:ad:e1:75:d8:7f:5d:22:15:ae:dd:7d:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8F:D5:EB:7F:49:DC:97:D7:E4:3B:B2:A2:3D:C1:12:CC:B5:FF:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99B70242243B11F0B5192DD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c0:09:33:f5:9e:2e:94:95:62:62:10:b7:44:f9:8e:7a:d6:
23:37:34:35:36:ed:e5:c3:75:cd:44:ed:02:6c:4b:e5:dc:7d:
ce:23:45:40:74:2a:10:a7:2b:d7:66:31:20:5f:9d:04:4a:8d:
e7:40:2a:ab:af:fd:65:42:ce:06:d7:38:0d:82:3d:7c:ab:e1:
da:23:eb:f8:f8:08:93:21:0b:f5:cc:b8:98:a5:f7:f5:68:a7:
39:17:a5:43:b7:c1:1f:b1:f3:b7:62:bf:a1:1e:24:a6:b7:f4:
fb:ce:3a:8a:02:7c:1b:7d:69:80:9e:75:87:be:05:2b:be:4f:
16:7e:5c:1e:2c:b0:a0:8e:bf:85:54:24:42:2b:ca:57:99:4a:
c6:3e:b6:d2:15:93:60:d1:87:08:b5:1a:59:73:76:00:fa:5a:
33:6e:20:96:d5:c4:aa:e6:34:f5:af:81:b7:62:94:a2:c6:80:
e4:60:95:40:f1:1c:ab:b6:93:d4:11:55:a5:9f:da:78:8c:9d:
b3:de:61:91:e5:c4:31:37:a6:00:0c:14:cc:1b:09:42:42:4f:
4e:b5:48:19:2a:f7:4b:96:2b:c1:0f:1e:c0:14:f4:3d:d5:8c:
af:f5:cc:6a:71:89:53:60:27:28:b3:73:77:e3:b7:2d:f0:5e:
4b:f8:b3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:46:55 2025 by rpki-client