Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9ACBC402F3611F0AE1F03D4DAE4EC9C.roa
File: A9ACBC402F3611F0AE1F03D4DAE4EC9C.roa (raw, json)
Hash identifier: /U1YxUEwlUP/A3GIGijTk/+JFa4kzOOPaaZbiBwC45U=
Subject key identifier: 65:3D:DD:A9:DF:18:35:9B:7E:FE:D7:19:71:9C:38:63:E3:5E:0D:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01537D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9ACBC402F3611F0AE1F03D4DAE4EC9C.roa
Signing time: Mon 12 May 2025 13:40:27 +0000
ROA not before: Mon 12 May 2025 13:40:23 +0000
ROA not after: Thu 19 Jun 2025 13:40:23 +0000
asID: 262186
IP address blocks: 45.192.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86909 (0x1537d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 13:40:23 2025 GMT
Not After : Jun 19 13:40:23 2025 GMT
Subject: CN=6821fa4b-bf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:04:17:14:69:e9:5a:72:df:de:9f:2c:f8:
47:2f:f5:82:95:4b:6d:7a:4b:7b:f7:0a:09:0f:19:
b1:93:0d:6b:f3:fc:a5:bc:66:10:e9:d0:96:85:53:
da:94:b5:a8:2f:54:5c:89:b2:2c:8b:f4:5e:05:1e:
e3:53:e7:f3:7c:71:9f:8a:ca:2d:04:7a:f8:b1:ca:
31:e2:43:57:cd:20:14:06:e9:e2:87:99:f7:6c:81:
67:ac:18:3c:f2:7c:a3:8d:d4:05:06:ad:e8:9d:cd:
2c:7a:27:ef:32:37:97:c0:d1:6b:be:e2:fe:4b:0a:
df:d0:9c:09:57:50:fa:d5:f2:45:76:3e:80:60:3c:
0a:f3:8b:90:dc:7a:b7:0e:b1:04:27:27:7d:dd:fd:
5e:75:fe:1e:ea:01:0c:27:ca:91:d9:f9:20:ab:48:
21:48:a3:d6:7f:fe:60:af:97:49:11:8c:39:91:04:
96:dc:f0:fd:d5:2c:5e:fa:73:a7:b2:90:fc:35:64:
2f:d5:77:c3:1c:c3:3e:46:6d:5c:2c:b0:35:e2:f9:
f4:dd:ff:4b:b4:af:85:ca:11:d0:96:fc:db:b8:f3:
47:49:ca:8b:67:35:32:f1:44:8f:d5:24:c1:9d:27:
46:8a:c1:d6:49:a1:cc:9c:eb:2e:70:c3:38:4f:84:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3D:DD:A9:DF:18:35:9B:7E:FE:D7:19:71:9C:38:63:E3:5E:0D:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9ACBC402F3611F0AE1F03D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e3:76:43:fa:e0:86:01:a9:60:42:0f:fe:91:94:5f:f0:c3:
12:3f:fd:12:83:ab:b1:04:28:8f:c9:93:c4:ce:d9:75:12:9b:
37:3a:bf:86:35:c6:3a:10:5e:c3:1c:11:57:c6:2c:42:1f:7c:
82:54:24:66:1e:98:5b:8e:73:8e:d6:f4:3b:5b:35:3c:8f:be:
c6:4b:a6:2d:f2:ec:7b:60:ba:3c:7b:36:26:67:57:7f:ff:63:
33:46:d2:ba:6a:f1:1e:33:65:75:51:f7:f9:bd:d6:06:86:f5:
8a:17:be:13:76:7e:36:7a:78:b1:39:1f:ea:76:7a:06:0b:ad:
e8:49:88:82:00:76:aa:f2:95:69:8a:53:df:53:69:62:b3:65:
3e:d2:2c:68:75:a4:2c:db:73:31:6f:ed:4f:4e:f6:d2:a2:57:
f3:6d:68:cd:1c:52:8e:b0:16:26:72:51:36:08:d0:47:9a:6b:
e1:11:21:fa:74:b3:5e:8a:12:55:4d:22:f9:00:f7:85:30:9d:
fb:94:b8:f1:53:e2:ff:47:76:30:9e:e2:02:48:b9:f1:02:0a:
01:5e:81:2b:91:4f:93:df:fa:ce:a0:9b:1d:66:17:8c:10:db:
ac:97:40:65:73:ca:4b:e3:58:e0:71:59:12:f9:87:d4:52:22:
bb:f0:75:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:40:40 2025 by rpki-client