Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D1852ECFF1A11EFA4C8FDAD762E951A.roa
File: 4D1852ECFF1A11EFA4C8FDAD762E951A.roa (raw, json)
Hash identifier: 19Djzuk38iCD/nr7gqMBsfG08Dw9VNN4e1EjTuO7qmM=
Subject key identifier: A6:21:9F:04:6B:F7:56:78:BA:51:AF:6C:89:71:5F:05:EB:6D:D5:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01450D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D1852ECFF1A11EFA4C8FDAD762E951A.roa
Signing time: Wed 12 Mar 2025 08:16:30 +0000
ROA not before: Wed 12 Mar 2025 08:16:25 +0000
ROA not after: Sat 12 Apr 2025 08:16:25 +0000
asID: 39600
IP address blocks: 45.195.212.0/24 maxlen: 24
45.195.213.0/24 maxlen: 24
45.195.214.0/24 maxlen: 24
45.195.215.0/24 maxlen: 24
45.197.8.0/24 maxlen: 24
45.197.9.0/24 maxlen: 24
45.197.10.0/24 maxlen: 24
45.197.11.0/24 maxlen: 24
45.197.28.0/24 maxlen: 24
45.197.29.0/24 maxlen: 24
45.197.30.0/24 maxlen: 24
45.197.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83213 (0x1450d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 08:16:25 2025 GMT
Not After : Apr 12 08:16:25 2025 GMT
Subject: CN=67d142de-7aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:3f:92:ed:e9:a3:29:63:84:b9:78:69:be:
98:43:1b:fd:56:09:bf:f6:67:42:c7:ac:42:53:45:
68:d3:fe:4d:17:60:6a:92:ba:3d:6c:7b:fd:59:44:
86:78:a0:71:ba:4d:d6:64:63:e9:b4:66:79:6a:ae:
06:72:01:6f:71:70:1b:9d:fb:9c:cc:92:1a:04:f4:
dd:27:1b:e7:b4:4b:af:63:23:76:75:0c:1c:8c:94:
fb:78:d1:39:18:73:7b:c9:76:23:da:15:b3:e7:96:
3d:fa:cf:61:2d:ac:9f:e9:de:59:3f:ee:b1:5d:b7:
46:47:93:b3:e3:69:bc:ba:70:bc:ae:d1:a9:c4:23:
25:1a:37:f1:61:fd:bf:2f:30:db:c1:46:94:6e:fa:
f0:a0:fe:ea:40:40:77:58:f5:7b:35:00:6e:46:23:
9b:d9:c7:da:f3:9b:ee:4b:ae:a1:c3:eb:70:2e:24:
b8:5b:3c:cf:fe:b3:c0:71:9f:ea:17:d2:05:cc:86:
73:4c:1b:a6:e1:6b:ac:b4:3c:e6:1e:19:32:eb:d6:
70:69:e3:3a:58:58:8b:f4:1b:cd:3e:1e:25:4b:a8:
96:ed:eb:17:fc:78:7d:6a:13:00:ec:ef:54:52:33:
34:bf:a7:2b:3e:4b:a9:b5:eb:9c:70:93:cc:c6:8c:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:21:9F:04:6B:F7:56:78:BA:51:AF:6C:89:71:5F:05:EB:6D:D5:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D1852ECFF1A11EFA4C8FDAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.212.0/22
45.197.8.0/22
45.197.28.0/22
Signature Algorithm: sha256WithRSAEncryption
15:05:1f:a6:5c:76:91:c1:c6:19:4d:33:a3:5b:83:f2:6b:9c:
20:40:c7:73:90:7a:2f:f0:be:0b:d0:58:bc:c6:32:e1:5e:95:
68:d7:04:12:99:a2:22:2e:21:0f:3d:fa:47:2b:f9:10:c6:de:
97:6f:53:cc:7c:63:7c:fe:4e:a1:4b:da:29:e3:0b:ec:7a:0e:
b7:7e:e7:99:da:87:d7:9d:ae:45:f7:13:67:4f:f3:e5:c9:9e:
3b:b0:be:62:60:60:e3:6a:fc:a9:2b:c0:6a:0c:84:22:70:b1:
f6:18:d5:fa:65:ce:5d:d4:50:a5:c2:84:85:a3:aa:db:a8:8c:
cb:6d:ff:74:f8:8b:7d:16:d0:1a:43:c8:ad:35:85:42:0d:a1:
dd:5f:1f:af:e9:d8:6a:dc:1e:a1:1e:62:f3:9f:df:f8:26:67:
2e:b3:69:43:aa:21:26:d0:b2:b8:97:0e:b4:15:45:98:64:4b:
9b:d2:07:03:18:f3:67:81:96:b6:94:97:30:da:0f:4d:2d:67:
77:10:61:5b:92:ad:f0:16:91:3b:31:6b:d1:7a:da:15:30:db:
5d:93:b9:40:ad:67:e9:31:c8:4e:ce:bc:1a:40:c0:15:ac:7c:
f3:ef:19:87:4c:0c:7f:04:12:31:02:21:74:7f:7b:d5:30:03:
81:20:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:36 2025 by rpki-client