Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0063AB94114511F0A5B2779B762E951A.roa
File: 0063AB94114511F0A5B2779B762E951A.roa (raw, json)
Hash identifier: un7LIBK2qsZqfajA4luolyWvDozJV7226alAVRrbFXY=
Subject key identifier: 3E:52:AC:55:DD:07:31:AA:43:C1:C8:F3:34:98:5B:D2:F2:03:D7:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A1D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0063AB94114511F0A5B2779B762E951A.roa
Signing time: Fri 04 Apr 2025 11:07:30 +0000
ROA not before: Fri 04 Apr 2025 11:07:27 +0000
ROA not after: Sat 10 May 2025 11:07:27 +0000
asID: 395793
IP address blocks: 45.192.244.0/24 maxlen: 24
45.195.133.0/24 maxlen: 24
45.201.28.0/24 maxlen: 24
45.201.29.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
45.204.147.0/24 maxlen: 24
45.204.148.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84509 (0x14a1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 4 11:07:27 2025 GMT
Not After : May 10 11:07:27 2025 GMT
Subject: CN=67efbd72-e6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:a4:0b:38:81:9c:19:28:29:42:12:98:46:
83:6b:47:b6:9a:90:ec:b6:9e:08:29:e3:a5:1a:e9:
a7:7b:d7:66:4c:16:ef:9b:42:19:e2:cd:f0:31:3c:
a2:b8:9d:15:47:ac:2e:4b:4e:59:04:c1:1a:94:be:
e7:01:6d:c2:a1:f7:e5:d2:a7:35:cb:f7:f8:d2:d9:
cc:c9:05:5b:28:4c:75:70:ef:71:29:85:87:f5:fd:
8b:89:df:19:6f:c4:98:36:cb:5c:17:15:8a:9a:5e:
a8:ff:6a:13:0e:e1:03:16:39:d4:87:dd:ff:2e:f6:
d7:68:de:ae:bc:f4:b6:8b:db:1c:49:e1:ad:74:39:
d8:72:1b:f4:8b:b1:cb:f8:e8:d3:e0:51:80:11:c2:
84:95:dd:eb:0e:d2:1c:a5:32:51:c1:a6:28:52:50:
0c:28:d6:fe:c6:7d:6c:3f:ba:ba:89:59:11:17:44:
bf:58:4c:b2:75:4a:db:60:b0:20:47:df:89:0b:66:
df:31:7e:a0:1a:e4:8c:0b:a0:11:cb:72:d2:ca:6c:
63:f7:41:51:5d:ae:38:78:92:cd:d3:ba:e1:79:9e:
66:14:7c:08:54:44:e6:74:78:d1:a4:3e:25:ea:d4:
cc:b1:52:13:4f:7d:53:a9:71:e0:52:93:41:3b:20:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:52:AC:55:DD:07:31:AA:43:C1:C8:F3:34:98:5B:D2:F2:03:D7:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0063AB94114511F0A5B2779B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.244.0/24
45.195.133.0/24
45.201.28.0-45.201.32.255
45.204.147.0-45.204.149.255
Signature Algorithm: sha256WithRSAEncryption
9b:ee:20:89:81:ea:e9:c9:55:57:4a:89:78:a7:55:f1:47:46:
9a:f1:c2:12:04:12:80:a2:d3:72:a2:6d:21:b7:fb:7a:09:a6:
9b:b8:d7:ad:df:f9:8e:5f:13:31:74:4e:1f:cd:7f:f8:31:07:
28:f5:0f:08:9f:31:b6:d0:88:46:fe:0e:b6:de:4e:08:16:24:
6c:66:56:81:10:77:a3:9d:51:57:ea:3e:b6:3c:c9:73:9b:18:
0c:c6:43:d6:40:d1:40:09:59:6b:5b:6d:e4:3b:e0:78:35:56:
4b:a9:2b:b9:75:05:db:fd:60:6a:62:d2:97:46:8a:b9:90:8b:
f5:61:d4:ba:23:74:7c:0b:b2:7c:db:ee:68:dc:fa:41:f9:0a:
86:0d:57:5f:9f:d2:e0:57:77:df:51:df:91:96:e5:e0:44:b8:
43:79:16:09:8f:4c:c3:11:2d:a9:73:20:c7:fa:3d:0f:b8:5d:
93:26:c2:bf:fc:ed:db:2d:1d:d0:d4:88:6a:7e:34:58:9b:55:
46:f9:6b:c0:d6:2e:f2:19:bf:86:64:86:2c:88:ec:a9:68:2d:
a4:ee:2c:9d:11:d2:7f:ec:e2:da:1f:fa:67:9d:62:77:7c:b9:
56:f8:9b:93:c0:c5:2b:b8:d9:50:14:df:90:ad:11:7f:0b:ad:
fb:a0:1f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:25 2025 by rpki-client