Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44E485F2058011F0B6AD5359762E951A.roa
File: 44E485F2058011F0B6AD5359762E951A.roa (raw, json)
Hash identifier: H6gExCpWiCGZCD6MXp0YKMhHO/HNC1zYrNVWmIvMRIs=
Subject key identifier: 52:04:FD:38:90:3C:CC:AD:DF:D9:63:D3:38:50:FA:06:BD:57:5E:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01473C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44E485F2058011F0B6AD5359762E951A.roa
Signing time: Thu 20 Mar 2025 11:41:32 +0000
ROA not before: Thu 20 Mar 2025 11:41:28 +0000
ROA not after: Sat 26 Apr 2025 11:41:28 +0000
asID: 395793
IP address blocks: 45.196.64.0/22 maxlen: 24
45.196.68.0/24 maxlen: 24
45.201.36.0/22 maxlen: 24
45.201.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83772 (0x1473c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 11:41:28 2025 GMT
Not After : Apr 26 11:41:28 2025 GMT
Subject: CN=67dbfeec-082c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:b9:78:d4:09:ed:ec:94:96:7f:34:1e:77:
8e:73:84:ef:fd:ea:d1:f0:62:af:ed:92:df:0f:87:
db:7d:a9:16:9e:21:b0:c8:65:a0:49:bd:ac:99:a4:
0f:4f:25:62:af:85:01:2f:22:b4:21:76:93:05:1a:
f0:b3:e4:23:5c:ff:60:19:6c:aa:f9:2d:14:5f:f3:
04:50:b7:84:90:2b:78:6e:e8:d0:d9:c0:06:8a:3c:
1a:fe:40:97:74:c8:97:75:48:e0:2e:51:6c:20:f0:
e2:e7:57:6e:8a:c0:0c:5b:08:4b:5b:ac:e5:7e:e7:
d5:7b:73:0a:c4:46:c5:11:79:74:e8:df:db:c8:cc:
8c:98:b2:70:da:24:88:4d:b2:9d:83:c0:c0:5c:9c:
a2:83:62:a0:4b:10:2e:4a:50:cf:4f:8e:48:55:c3:
7d:c5:fe:78:f3:60:f8:1f:eb:19:28:64:1a:94:8b:
1e:e6:19:28:ce:93:5d:fc:93:1e:e9:a1:db:39:59:
6e:fe:45:e3:79:6b:25:13:fb:cb:a5:c9:53:de:6d:
b8:a8:12:eb:6a:44:2c:ec:ec:f7:ed:ff:a6:b9:32:
99:9c:54:98:6f:50:5a:ae:4b:3a:9f:7d:fb:33:9e:
ae:4f:1a:32:4a:04:e2:3d:39:7a:1e:53:a9:37:21:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:04:FD:38:90:3C:CC:AD:DF:D9:63:D3:38:50:FA:06:BD:57:5E:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44E485F2058011F0B6AD5359762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.64.0-45.196.68.255
45.201.36.0-45.201.40.255
Signature Algorithm: sha256WithRSAEncryption
1f:49:97:8e:84:b7:3f:b2:e0:2e:a1:b3:f5:65:14:53:bd:64:
c4:2b:f4:f7:74:2f:2b:66:af:33:2e:05:a5:04:b9:03:a0:fa:
1d:8a:db:b9:c2:9b:76:9e:bb:00:6c:06:02:68:28:a5:c6:51:
8a:9f:f6:d0:89:14:4c:4d:ad:fe:12:4c:76:4c:1e:cb:7c:63:
a5:1f:64:90:62:02:98:53:1c:fc:d1:3e:bf:b2:68:bc:6b:c3:
67:35:c3:ab:c5:46:d3:57:a7:71:f1:18:2a:af:63:85:d7:91:
61:00:10:57:b3:26:4e:de:fe:ec:e9:c9:95:1a:6e:34:5d:28:
6b:6e:13:8f:23:cf:5e:b0:db:1c:ab:3d:52:4f:66:ed:00:4c:
50:e4:76:4c:da:e3:f6:dc:c3:70:3c:e7:0a:ee:f6:0b:64:8d:
d3:bc:cc:55:99:ea:43:a0:d9:c5:a0:5c:f1:4c:11:d6:99:30:
2a:60:ae:ad:25:11:1c:c4:b6:3d:69:8a:ed:00:dd:fa:b4:28:
45:03:a9:4f:df:8d:ef:88:23:58:db:17:95:19:91:59:4c:96:
34:2a:42:68:08:4b:76:4e:8a:5c:9f:67:bb:dd:5b:2b:d0:1e:
3d:04:3d:ee:8c:22:db:b6:ec:0d:5e:35:3c:c3:27:44:8f:ee:
6f:a4:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:53 2025 by rpki-client