Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2F217AA273111F0AA6A7CB5DAE4EC9C.roa
File: E2F217AA273111F0AA6A7CB5DAE4EC9C.roa (raw, json)
Hash identifier: 5oxNi7trL8zHggCCbKtsvEBBat1OTGcLB5q8NfSa/p8=
Subject key identifier: D3:CA:41:1E:D4:6F:B4:5A:EE:D2:4A:9D:B8:06:5B:57:71:67:51:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01515A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2F217AA273111F0AA6A7CB5DAE4EC9C.roa
Signing time: Fri 02 May 2025 08:46:07 +0000
ROA not before: Fri 02 May 2025 08:46:02 +0000
ROA not after: Wed 12 Apr 2028 08:46:02 +0000
asID: 17561
IP address blocks: 45.196.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86362 (0x1515a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 08:46:02 2025 GMT
Not After : Apr 12 08:46:02 2028 GMT
Subject: CN=6814864f-c66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:51:62:b0:94:d8:8f:9d:08:af:a4:46:41:
25:ae:ef:30:3c:35:23:b9:72:26:9c:b2:4a:c6:cc:
0d:d3:58:6b:eb:49:02:77:97:e9:86:73:6f:2b:d4:
ee:5f:ba:76:06:b0:b8:0e:f9:cd:78:dd:6f:8b:56:
13:4e:9c:c3:1a:75:e0:b2:bc:1c:d0:65:0a:1b:87:
39:f0:ce:21:42:a8:66:2d:fb:c6:9f:5b:d6:1d:6d:
0d:5e:70:b0:e9:70:05:66:46:1e:cb:ae:8c:98:54:
58:c7:e2:b3:7b:94:e9:a0:0f:6f:b3:b1:d4:20:64:
01:78:c0:f2:52:db:46:e8:f2:d9:b8:15:09:4b:96:
ee:49:f9:54:e8:ac:a8:54:8b:c6:48:0d:15:54:8a:
c3:15:d9:b9:19:2f:c3:bb:41:29:46:6b:e6:ff:d7:
73:18:0a:85:18:27:32:a3:16:7e:f8:af:06:d0:50:
2a:7d:d2:dd:69:67:88:e0:2e:88:54:66:3b:20:3f:
6e:90:f5:9f:0b:99:19:e5:2c:74:d5:c7:f7:51:ab:
cc:48:21:46:b6:16:32:21:0a:11:32:aa:01:57:39:
7d:e0:ed:91:2f:bf:8b:a1:4d:c8:e0:a4:f8:40:c3:
f7:fe:56:3e:45:40:72:7f:66:6e:52:9f:55:fb:72:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CA:41:1E:D4:6F:B4:5A:EE:D2:4A:9D:B8:06:5B:57:71:67:51:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2F217AA273111F0AA6A7CB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.158.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d0:ef:0c:92:99:e6:3c:c6:3a:86:c8:88:06:83:8e:27:44:
a0:37:2c:08:94:c2:f7:e2:12:e1:6c:55:f9:0d:68:ee:03:2b:
8f:d6:ef:1a:b6:9f:dd:7e:5a:aa:d3:b4:f5:d1:32:23:6b:de:
d0:aa:c5:2f:80:61:b1:1a:71:ee:ed:d6:e3:4c:48:62:d1:18:
66:2a:8b:b1:33:57:00:b5:fe:42:b6:2f:b6:36:31:e1:e9:b0:
84:9f:ff:ad:21:f4:ae:2d:07:5e:a6:da:15:1a:ab:62:cf:50:
d8:47:63:2c:5d:62:4c:9f:10:85:b6:16:7d:55:a5:2d:f5:37:
77:fc:7c:4e:af:48:6c:d0:09:c1:98:75:e3:47:2a:60:b7:ff:
22:d2:2d:ef:86:2a:35:aa:6a:3d:ba:8a:9b:ee:b7:19:c7:bd:
5a:77:27:00:3d:1b:cc:cd:5f:05:d9:aa:ba:44:f3:aa:1a:ef:
db:2a:f5:1f:39:cf:bc:70:8e:cd:ba:a5:3d:ac:fd:0a:35:1f:
82:f3:5e:e0:9a:c1:47:8e:bb:fc:e6:4c:3b:6d:23:6b:c9:d9:
e7:18:97:de:a5:92:17:06:bd:62:70:01:fb:88:bb:6b:01:cf:
53:14:d0:e4:73:f7:58:26:1d:7e:b5:88:e5:f8:61:1f:05:1b:
9e:2a:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:10:51 2025 by rpki-client