Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/297B7596FA6311EF8B0B52A1762E951A.roa
File: 297B7596FA6311EF8B0B52A1762E951A.roa (raw, json)
Hash identifier: lSpf6KT7W5s71FHtccx7L/VkCCHj/Rg6QlOHcj9qQZA=
Subject key identifier: FA:D5:3A:60:22:E2:8A:39:2B:2B:57:A4:A5:1F:DE:E1:91:3F:2F:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01435D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/297B7596FA6311EF8B0B52A1762E951A.roa
Signing time: Thu 06 Mar 2025 08:15:28 +0000
ROA not before: Thu 06 Mar 2025 08:15:24 +0000
ROA not after: Sat 12 Apr 2025 08:15:24 +0000
asID: 2914
IP address blocks: 45.192.1.0/24 maxlen: 24
45.192.2.0/24 maxlen: 24
45.192.3.0/24 maxlen: 24
45.192.4.0/24 maxlen: 24
45.192.5.0/24 maxlen: 24
45.192.6.0/24 maxlen: 24
45.192.7.0/24 maxlen: 24
45.192.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82781 (0x1435d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 6 08:15:24 2025 GMT
Not After : Apr 12 08:15:24 2025 GMT
Subject: CN=67c959a0-cb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:94:3d:fe:8f:df:b9:5e:2f:29:e0:ea:5b:
4f:9b:18:c6:38:c6:2b:12:d2:d8:57:8d:cc:ce:78:
05:d0:ed:8e:a6:05:bd:94:3c:d0:2a:f0:5f:22:aa:
6f:69:87:1f:3d:2b:82:3f:1d:82:04:e9:1c:eb:45:
5c:bb:8c:b4:8b:b8:55:d3:85:0f:1b:62:86:93:a7:
f8:9e:78:5c:ab:f0:0f:3c:67:ea:c8:07:97:9c:83:
87:86:c2:25:8c:7c:09:7f:6b:57:76:ac:93:a6:49:
35:ff:36:62:31:cc:6a:4b:ee:a6:01:98:dd:d2:5a:
6c:26:4a:10:f1:10:43:0b:4e:9c:e5:3a:33:75:2f:
70:f3:1e:2e:0f:00:c8:a0:ae:ec:c2:4b:45:da:b1:
3d:ef:07:0c:d4:3d:e5:7b:8d:42:eb:14:85:54:3f:
56:c7:6e:ff:be:90:31:2a:9c:40:49:eb:a8:0b:44:
8d:02:b4:35:a9:42:e6:10:75:88:e0:79:c3:ae:34:
37:15:13:27:d4:2e:77:df:3b:30:76:b7:1b:ee:fd:
59:15:7e:e5:8c:95:5a:05:fb:48:ce:82:8e:e1:4a:
84:68:b8:25:b4:0b:c9:fb:59:c3:cb:ea:af:40:f5:
52:c3:fd:6f:f4:aa:24:35:52:21:4b:f2:e4:25:8a:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:3A:60:22:E2:8A:39:2B:2B:57:A4:A5:1F:DE:E1:91:3F:2F:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/297B7596FA6311EF8B0B52A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.1.0-45.192.8.255
Signature Algorithm: sha256WithRSAEncryption
56:be:3c:0e:2e:f9:51:c7:c5:44:b7:ff:dd:e7:13:25:5a:25:
ba:ff:1d:85:ab:54:b2:c5:5a:da:e5:3a:27:8d:95:45:25:3f:
a8:39:fa:c1:72:2b:5f:86:80:a5:c6:d9:42:d0:40:00:d4:0d:
18:3c:fc:9c:82:2f:ad:de:d9:8d:87:31:c7:6e:7b:cb:dc:3c:
e1:a6:b2:9f:eb:7b:6a:3a:de:dd:f7:6c:16:e0:19:4a:45:83:
9c:d3:27:13:71:00:a2:d2:c3:42:0c:54:a0:16:66:20:56:51:
0d:bf:a8:20:fa:f4:91:b4:db:0f:20:7d:ab:70:ca:e1:05:85:
cd:f0:5d:b7:19:4f:f5:4e:db:14:e8:7f:a5:64:15:ed:c0:8b:
34:e3:74:47:0e:2f:ac:88:3c:f2:87:9f:70:a5:33:c0:c6:c0:
db:64:c6:00:d4:fa:f6:3a:c6:ac:d7:22:7b:7a:0e:19:71:47:
f9:ee:56:72:c0:42:9a:07:fa:a1:96:8f:96:49:5e:a8:46:1e:
de:e8:6a:cd:5c:69:ac:98:4b:d1:89:63:39:19:d1:b2:06:d5:
bb:71:94:63:5b:9b:98:f4:49:16:a3:25:c6:d4:f0:42:3c:66:
40:2e:b3:51:40:6c:45:eb:29:a7:d7:88:7d:3a:3f:b4:3a:ad:
72:a1:0c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:36 2025 by rpki-client