Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7474E1C242B11F0A0CBEDEDDAE4EC9C.roa
File: B7474E1C242B11F0A0CBEDEDDAE4EC9C.roa (raw, json)
Hash identifier: 1dO+2+9b0NrqUEQ+g3SPB2zwcfKKAFQ5MKd3JOsPwRI=
Subject key identifier: 5A:08:39:96:D6:EF:C8:FC:36:37:3C:CE:03:04:4F:FC:B9:63:FF:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7474E1C242B11F0A0CBEDEDDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:24:23 +0000
ROA not before: Mon 28 Apr 2025 12:24:18 +0000
ROA not after: Tue 21 Mar 2028 12:24:18 +0000
asID: 17561
IP address blocks: 45.200.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85800 (0x14f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 12:24:18 2025 GMT
Not After : Mar 21 12:24:18 2028 GMT
Subject: CN=680f7377-41bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7c:fe:03:c5:86:fe:e8:b5:fb:9c:da:18:29:
01:14:1e:e3:7d:e5:2f:10:6f:05:4f:11:ea:47:2c:
6f:2e:16:ef:07:9d:34:66:20:32:34:3e:26:dc:9f:
7f:83:64:7b:7e:88:22:79:3e:bf:ab:f6:99:48:51:
d3:d5:65:a9:6e:70:6a:61:76:d1:c2:ba:bc:1d:25:
29:91:b4:f0:fb:22:75:f7:42:df:53:1e:ed:2c:84:
90:a6:57:c1:0d:3e:9f:00:11:9d:e0:da:14:77:25:
39:3c:5e:bb:67:5b:ed:a7:9e:81:1b:0e:af:45:d5:
b3:8e:bd:c1:d9:12:76:76:8c:2c:7a:8d:b5:e0:04:
70:70:cf:17:b0:c0:7e:5c:d1:8b:f2:ad:72:5f:6d:
24:20:bd:be:35:80:2b:84:8b:34:99:bc:c5:7e:03:
e0:66:73:27:df:24:de:1c:45:2e:b1:1a:d9:60:91:
c0:ed:ba:ad:24:6e:ba:17:5a:c8:c7:cd:a7:25:7a:
99:4a:48:d5:59:82:93:82:89:79:df:8e:e3:5e:ad:
d9:10:17:bd:9c:d1:54:57:7d:fe:30:45:0b:39:ff:
e5:66:98:b9:c8:43:57:24:e8:be:b1:3e:ba:7f:3e:
5f:53:6f:54:43:5b:02:c8:39:9e:f9:5d:21:f5:72:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:39:96:D6:EF:C8:FC:36:37:3C:CE:03:04:4F:FC:B9:63:FF:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7474E1C242B11F0A0CBEDEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.143.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a1:18:fe:4d:cd:6f:d3:11:0c:40:30:66:89:52:f3:7d:2a:
52:1c:e0:bf:bd:f3:43:6a:95:b9:4f:26:ac:3b:f0:14:1f:c4:
98:cf:63:b8:2e:f8:ed:7f:8e:fb:16:50:ec:78:b2:c3:0b:c5:
b0:9e:56:d4:8e:3f:53:a5:21:59:d4:34:ac:5e:2a:58:a2:6e:
2f:5f:c5:10:c4:91:56:2b:33:5c:bb:c8:02:c1:9d:73:6a:92:
c0:11:1c:37:67:6e:7a:85:c8:e0:16:a1:9b:f6:47:eb:95:fb:
8c:37:db:dc:0b:3d:42:a0:74:91:47:74:be:10:fc:15:97:ee:
dd:4f:0d:e2:1c:7f:85:a6:fe:e5:6d:00:25:09:7c:54:70:3c:
ca:b3:f2:78:c7:00:70:d7:db:ed:dc:c7:c1:85:68:de:56:82:
06:94:2c:7d:f9:d3:16:6d:8b:33:f9:93:60:b4:ae:52:21:47:
ab:1f:d9:93:2c:5a:ae:e4:28:da:c3:c4:be:13:cb:8a:cd:18:
a7:58:d7:b7:3e:eb:6d:16:db:03:6d:b6:7f:5d:11:d0:b8:92:
a6:b8:72:91:46:24:ce:6e:27:dc:12:ef:77:43:75:1c:b8:69:
86:58:df:55:76:f3:0b:1b:5e:00:13:0e:ed:65:92:00:9c:68:
38:5c:68:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:19:56 2025 by rpki-client