Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E5D1128F8C311EF9F0461A8762E951A.roa
File: 3E5D1128F8C311EF9F0461A8762E951A.roa (raw, json)
Hash identifier: Kd4fcAP37HZjxbAPk+thI/Qna6KcVrB7P5+UlWutQM4=
Subject key identifier: 4A:A7:48:97:26:52:41:C7:F2:80:A7:77:11:E2:6F:84:A8:82:AC:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01429B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E5D1128F8C311EF9F0461A8762E951A.roa
Signing time: Tue 04 Mar 2025 06:38:12 +0000
ROA not before: Tue 04 Mar 2025 06:38:08 +0000
ROA not after: Sun 11 May 2025 06:38:08 +0000
asID: 9009
IP address blocks: 45.192.132.0/22 maxlen: 24
45.192.136.0/22 maxlen: 24
45.192.143.0/24 maxlen: 24
45.192.144.0/24 maxlen: 24
45.192.145.0/24 maxlen: 24
45.192.146.0/24 maxlen: 24
45.192.147.0/24 maxlen: 24
45.192.148.0/22 maxlen: 24
45.192.152.0/22 maxlen: 24
45.192.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82587 (0x1429b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 06:38:08 2025 GMT
Not After : May 11 06:38:08 2025 GMT
Subject: CN=67c69fd4-d2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:fe:67:1b:d5:90:ea:fb:22:4c:ac:5d:4d:
2a:f3:53:84:81:95:98:4e:25:14:67:23:c2:ec:bd:
fa:12:c4:23:d4:f6:c8:e8:10:0f:c2:77:03:f7:9b:
c1:ea:46:f3:f7:f3:1c:de:d9:ac:62:fc:b5:2f:ec:
fb:dd:96:de:8d:62:f0:66:c4:a4:00:8d:d5:98:a4:
d2:0e:e4:f4:19:a3:e8:b3:e5:e5:47:6a:95:69:ef:
3a:ac:ff:ac:41:d5:7f:da:c7:57:37:f7:03:4f:c3:
6a:91:22:3c:bc:d4:75:52:d1:86:7e:c8:71:c8:f9:
78:e6:44:c2:ff:b0:d2:40:47:e3:d3:5e:a7:b9:e0:
68:d5:cf:a0:cf:e8:4e:8e:60:62:d3:5f:bd:8f:70:
c3:e7:d6:af:af:97:40:17:70:c4:aa:f2:79:d5:67:
03:e6:a1:f7:81:85:b7:86:9a:76:08:38:ba:bd:25:
d3:ba:56:d0:66:ef:37:3c:73:da:f3:a4:5c:63:27:
9c:23:67:0a:c1:e7:3c:1b:1d:a7:99:2b:5f:18:ae:
bb:cf:41:53:0d:0d:64:9e:0d:dd:6c:f4:1a:4c:07:
67:46:2f:70:38:ae:b4:70:09:7e:8c:b5:38:8a:09:
4c:50:0e:75:ae:18:6a:cc:e4:35:49:9c:b1:d8:5f:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:48:97:26:52:41:C7:F2:80:A7:77:11:E2:6F:84:A8:82:AC:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E5D1128F8C311EF9F0461A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.132.0-45.192.139.255
45.192.143.0-45.192.159.255
Signature Algorithm: sha256WithRSAEncryption
42:17:64:ee:7f:b5:b1:46:e2:ba:1d:97:52:f6:51:46:2c:25:
b2:8d:77:c0:e8:2c:28:36:3a:ba:2e:f5:54:0b:70:46:2a:18:
92:8b:13:c2:35:e6:e2:a2:d1:7c:60:f3:98:3c:66:56:2d:3c:
78:4b:ca:43:45:9f:bf:69:b3:03:bf:ec:a9:5b:11:99:5b:58:
02:f0:c0:65:fc:1e:b9:c7:a6:82:d3:31:86:84:9a:72:9d:cf:
a9:28:2d:ec:e5:6d:a4:5f:c2:7e:ae:d4:d6:a6:22:d4:62:a0:
24:3c:1f:aa:29:d4:f0:2e:2a:c2:61:60:16:86:9a:c7:60:e7:
5c:e4:c1:09:e8:cc:f6:8d:f0:53:55:f7:c4:5a:bb:de:64:8a:
70:8c:d6:ed:67:b1:a4:a8:5b:a6:19:ee:fb:48:3e:fe:39:63:
95:be:be:a8:56:bf:fa:b4:53:ce:c8:b0:7d:36:69:a9:56:ce:
71:24:68:36:c1:f3:77:fc:d5:77:11:e9:01:82:98:a2:96:b6:
45:8b:07:5f:c5:aa:1d:cb:a9:d4:a3:10:7a:7f:f6:89:1f:ea:
9d:e0:25:14:55:9e:2d:d4:88:57:3e:a3:9d:a2:71:eb:bf:45:
0a:c8:af:c7:e4:6b:99:f9:d1:a2:33:15:a5:b7:e9:d7:1d:9f:
b1:b3:30:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:33 2025 by rpki-client