Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD13ED622A6211F08CE4148EDAE4EC9C.roa
File: CD13ED622A6211F08CE4148EDAE4EC9C.roa (raw, json)
Hash identifier: 4UDag5qg/mqAL2wzGkZg6eQ9UDhlM2c0tU154B8BReE=
Subject key identifier: 75:25:3A:E2:4A:0A:FC:AE:98:8C:C4:32:56:12:16:9A:E0:0E:59:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015255
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD13ED622A6211F08CE4148EDAE4EC9C.roa
Signing time: Tue 06 May 2025 10:13:49 +0000
ROA not before: Tue 06 May 2025 10:13:44 +0000
ROA not after: Thu 12 Jun 2025 10:13:44 +0000
asID: 272854
IP address blocks: 45.195.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86613 (0x15255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 10:13:44 2025 GMT
Not After : Jun 12 10:13:44 2025 GMT
Subject: CN=6819e0dd-a4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:23:db:b9:a5:3b:b7:c2:32:6f:68:d2:f6:
7a:8e:bc:e9:33:a6:8f:40:25:9d:2b:34:81:6d:fe:
62:3f:63:e1:bc:21:c8:b6:51:e2:54:2e:d1:db:7d:
7f:03:45:4c:06:e7:ea:92:bd:38:13:7a:35:99:ce:
21:86:a0:b1:8f:bb:9d:5f:d9:89:f5:cb:c1:b7:ce:
d3:6f:3f:38:b8:3c:01:48:15:f8:09:98:4d:d1:6d:
9f:23:83:57:8e:2b:34:1d:df:3a:73:b9:17:50:6a:
bd:5a:ae:c3:21:31:7a:8d:f0:c1:30:ef:9f:56:7c:
47:dc:02:e6:a7:d6:cf:3a:e6:3e:34:8e:6e:8b:23:
28:c8:0a:c3:7e:dd:df:d9:c6:20:2a:77:81:24:73:
a3:31:41:fe:6a:6d:d2:ad:34:bc:3b:e4:49:58:90:
9e:cc:90:5c:a3:fb:e4:54:c3:d3:f1:c0:dd:83:ba:
81:81:5f:c9:eb:ea:25:d5:44:c5:54:94:d7:f1:fb:
07:4f:2b:0c:31:6e:f0:db:29:0f:92:b0:87:9d:0f:
48:29:8d:de:eb:dd:e2:d5:7b:24:de:85:22:a3:b2:
3f:9d:49:70:72:26:99:ba:54:24:b6:43:af:3d:a3:
0e:71:e0:51:0c:15:7d:04:13:db:2f:37:63:ef:c6:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:25:3A:E2:4A:0A:FC:AE:98:8C:C4:32:56:12:16:9A:E0:0E:59:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD13ED622A6211F08CE4148EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.12.0/23
Signature Algorithm: sha256WithRSAEncryption
34:86:18:0a:d4:88:4e:0e:82:1b:f3:fa:3a:72:e3:ab:b9:df:
2f:33:d7:35:a3:7c:c8:50:c2:4e:81:0d:dd:47:2b:1b:52:bb:
29:0c:75:6e:a4:ba:29:1d:98:0e:b4:88:8e:62:73:39:44:85:
24:a4:ba:19:92:02:57:bf:a8:c5:a3:54:d1:d8:22:24:e7:31:
ff:f5:b5:41:0f:c0:f1:f7:63:85:c0:aa:24:d1:e5:31:9e:80:
05:a9:f4:1e:18:fa:e1:32:a8:01:e7:9c:3c:0c:fb:07:29:df:
fd:ec:f5:ee:c0:89:cd:2f:22:78:62:68:03:a1:94:a6:89:62:
0d:9b:61:f5:ad:02:8e:27:8a:5d:be:0a:52:02:77:2b:a3:89:
b3:53:f0:58:5d:a4:5b:02:96:c1:9c:c4:d1:58:aa:db:7a:d8:
94:8e:46:00:d5:f6:ed:5e:66:ed:10:ed:03:3f:c3:b4:e5:82:
50:19:4e:53:89:c3:ff:81:f4:e5:db:bd:e5:d0:24:88:1a:49:
f1:d4:2a:28:fc:11:44:1b:37:db:1c:e8:01:cd:85:34:4b:7b:
86:6b:93:09:48:b6:07:ed:a4:30:9f:6d:a8:c9:4d:94:bd:cd:
8e:85:cf:b2:7f:e5:3c:c0:fd:c5:71:4e:31:98:61:2b:6c:e8:
64:bb:4d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:05:39 2025 by rpki-client