Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/230F5CA2094C11F0B9D0F687762E951A.roa
File: 230F5CA2094C11F0B9D0F687762E951A.roa (raw, json)
Hash identifier: NcTOnVlQhlphBAGay4tWY1VHDq9kFYpykNdYEMeaO3o=
Subject key identifier: 3C:8F:24:86:56:BF:C8:20:47:F2:B4:FE:E5:A1:D6:9D:FC:96:B6:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/230F5CA2094C11F0B9D0F687762E951A.roa
Signing time: Tue 25 Mar 2025 07:38:26 +0000
ROA not before: Tue 25 Mar 2025 07:38:22 +0000
ROA not after: Tue 13 May 2025 07:38:22 +0000
asID: 63139
IP address blocks: 45.197.95.0/24 maxlen: 24
45.197.96.0/24 maxlen: 24
45.197.97.0/24 maxlen: 24
45.197.98.0/24 maxlen: 24
45.197.99.0/24 maxlen: 24
45.197.100.0/24 maxlen: 24
45.197.101.0/24 maxlen: 24
45.197.102.0/24 maxlen: 24
45.197.103.0/24 maxlen: 24
45.197.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83953 (0x147f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 07:38:22 2025 GMT
Not After : May 13 07:38:22 2025 GMT
Subject: CN=67e25d72-44b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:34:d1:f1:81:28:eb:b2:fd:54:9e:41:76:
8e:9e:0d:d1:82:92:bc:fe:e3:1f:bb:87:4c:e2:27:
c6:d0:6a:46:ab:c9:59:b1:a5:3b:a6:40:9e:3f:f7:
c0:f0:bc:8f:b3:00:0e:a1:b2:9f:87:40:82:be:94:
0c:8b:94:26:61:cd:be:27:1d:5a:10:79:45:d1:b3:
54:d9:d7:f3:5b:8a:bd:5b:c3:01:3f:41:b2:db:cc:
6b:4f:27:b9:3f:a4:b0:bd:1c:dc:20:55:ea:01:fc:
10:9e:c8:29:39:30:4d:08:ae:2b:05:27:29:17:c4:
79:48:ae:5f:78:96:d0:ab:fb:6a:c3:ee:08:93:46:
ca:ec:a7:d6:95:f0:d5:43:f8:ad:aa:20:c0:7d:c7:
e1:4b:15:a3:fa:d9:7c:bf:b7:07:12:d3:c6:1d:30:
58:4e:6a:10:e5:b6:9c:70:49:bb:87:4a:19:08:92:
73:6e:d0:e4:48:22:0e:f4:b3:c3:1d:55:bf:be:c3:
b8:0c:b5:ee:76:16:ea:a6:d1:be:ba:eb:89:d9:d0:
94:6c:4d:b5:1a:23:b8:94:08:86:a9:51:1c:8b:ce:
32:88:9e:aa:fd:a1:6d:2d:55:63:7d:05:8d:e1:3e:
00:c3:18:ef:3b:20:47:93:07:78:26:d8:fb:28:53:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:24:86:56:BF:C8:20:47:F2:B4:FE:E5:A1:D6:9D:FC:96:B6:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/230F5CA2094C11F0B9D0F687762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.95.0-45.197.104.255
Signature Algorithm: sha256WithRSAEncryption
a3:b6:7c:c1:27:4e:f6:d2:52:49:ab:14:70:6d:3e:eb:70:1a:
83:77:9e:4c:b1:9c:b4:4b:ab:ce:01:2d:d1:e4:1d:91:33:98:
83:23:56:9f:48:59:6d:e9:d0:14:01:e8:91:de:65:8c:48:ed:
f6:91:6e:f5:c0:1b:99:2e:4e:c1:c9:14:30:78:52:16:b6:dd:
73:79:30:95:d4:b2:bb:30:96:6c:2d:17:72:bc:52:ce:f9:59:
57:9c:12:4a:f0:a7:7b:0b:d6:fa:c2:20:da:c1:4c:bd:b1:6b:
2d:b6:91:74:5a:4d:e8:4e:b1:f7:fb:51:6f:25:c7:c6:11:f5:
0c:bc:9b:fe:6c:2b:da:b8:6a:95:cc:86:26:f8:9f:ed:0b:41:
8f:02:94:a9:75:3d:fe:33:ff:49:a8:bd:55:0a:5c:ed:94:49:
bc:dc:e5:e5:47:73:8a:53:69:98:23:4f:86:72:a5:98:d8:79:
d0:e2:ce:d4:ac:20:2c:df:9d:8d:ea:a6:4c:90:bd:e7:1f:e4:
b0:c9:46:12:e5:44:a9:a2:45:b2:14:7b:48:47:b1:0c:2c:94:
50:2e:cc:72:9d:8c:24:48:9b:6b:16:10:67:2f:8d:8b:80:52:
f6:fc:8c:49:d6:1c:7d:33:8f:0a:67:61:71:47:41:c2:00:bf:
a6:c1:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:07 2025 by rpki-client