Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29CC330E114811F0AFEEB6AF762E951A.roa
File: 29CC330E114811F0AFEEB6AF762E951A.roa (raw, json)
Hash identifier: d3GW0TFbYeWtoBqSpfHga2F5EymsdZrBZeyQpClJP5g=
Subject key identifier: 3F:30:4C:F1:E1:91:04:16:C7:26:00:45:A5:C6:58:43:28:E1:CE:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29CC330E114811F0AFEEB6AF762E951A.roa
Signing time: Fri 04 Apr 2025 11:30:08 +0000
ROA not before: Fri 04 Apr 2025 11:30:05 +0000
ROA not after: Thu 08 May 2025 11:30:05 +0000
asID: 205125
IP address blocks: 45.196.106.0/24 maxlen: 24
45.196.107.0/24 maxlen: 24
45.202.192.0/24 maxlen: 24
45.202.198.0/24 maxlen: 24
45.202.200.0/24 maxlen: 24
45.202.201.0/24 maxlen: 24
45.202.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84521 (0x14a29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 4 11:30:05 2025 GMT
Not After : May 8 11:30:05 2025 GMT
Subject: CN=67efc2c0-0088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:47:2a:78:4e:93:11:0c:45:30:43:da:8b:
65:17:6e:ab:f0:54:30:ce:e5:22:06:1c:4e:99:37:
a7:3a:55:ed:52:73:5e:9f:a2:11:d9:b8:20:f0:83:
c4:3c:ed:2a:f4:7e:52:77:a1:26:7d:bf:b4:0d:88:
95:41:07:2e:d9:a9:15:80:8d:c1:e5:ba:79:90:9a:
dd:f4:20:43:bb:3d:fe:8e:a0:31:37:af:2a:22:d3:
a6:90:42:51:d6:eb:e4:9d:4b:c8:d0:22:00:dd:d3:
7c:f8:9f:30:ab:0d:ed:9c:28:4f:18:cc:1a:23:21:
96:87:ab:05:f1:45:a9:1a:d1:4c:0a:ca:c1:db:5e:
18:f4:10:ca:70:56:7d:d4:c5:6d:f7:1b:53:64:59:
9a:c4:ac:f2:89:25:ff:2c:88:c1:60:83:56:ab:87:
24:4f:d9:a0:2e:97:53:b6:b9:07:59:cc:4d:93:1d:
50:a8:c2:fc:88:ff:c2:f2:e8:5e:e5:27:85:a7:66:
7a:19:b5:69:39:f6:94:75:49:ee:bd:c3:53:1e:ed:
8d:92:7a:77:8b:6b:fd:16:62:f2:7e:e7:b5:89:b3:
56:2f:25:e9:77:99:f5:ba:43:5b:b1:40:c1:2b:d1:
fd:a0:04:f8:07:af:2e:ed:83:70:df:98:d6:cf:20:
95:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:30:4C:F1:E1:91:04:16:C7:26:00:45:A5:C6:58:43:28:E1:CE:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29CC330E114811F0AFEEB6AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.106.0/23
45.202.192.0/24
45.202.198.0/24
45.202.200.0-45.202.202.255
Signature Algorithm: sha256WithRSAEncryption
bc:32:90:18:53:db:d2:25:22:d0:09:6a:7a:cf:18:ef:52:fd:
a4:43:be:fd:8c:fb:82:53:5c:99:a3:01:2e:95:95:df:7d:da:
d1:5f:db:5f:20:0a:40:45:18:4f:a0:0f:8f:c4:fb:f9:4c:23:
5d:46:30:8d:37:8c:3e:90:0c:7a:16:44:ce:94:67:b9:ef:e7:
53:be:47:e0:bd:02:9a:92:53:aa:a4:48:3d:c0:e2:bd:63:87:
18:4e:79:9e:b4:ad:f0:7d:fe:58:83:f3:62:91:9b:e6:37:40:
61:77:ee:e6:2e:ec:08:45:56:28:63:88:76:4d:3d:e9:11:ba:
3f:38:ee:7b:0e:08:61:00:fb:d8:b0:b4:9e:68:5e:dd:99:8f:
d6:8a:cc:10:04:b3:95:9d:3a:bb:e5:4b:7a:53:8b:91:7b:d6:
f5:30:fb:06:c4:59:8d:11:09:e6:ef:a1:0f:8d:04:3d:62:f6:
af:5c:82:5f:fc:18:5f:ca:70:a3:13:a7:7c:69:6e:63:9d:77:
0f:ce:5c:1e:8d:b1:04:38:94:85:76:db:e6:be:51:3c:fd:c4:
ef:29:cf:db:48:b2:4a:48:fb:e9:da:1c:3b:55:87:6d:35:bc:
5a:bb:28:08:28:a9:70:bf:ae:45:7c:6c:87:2b:5f:36:60:80:
a3:dc:7c:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:43 2025 by rpki-client