Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56DCCAA804C211F09B716356762E951A.roa
File: 56DCCAA804C211F09B716356762E951A.roa (raw, json)
Hash identifier: 3TkMxI51rWfKEC3SB5x2RIuvbFFyjoZexdzZh1UGZaQ=
Subject key identifier: 41:AE:34:5B:20:00:92:58:8A:B4:F4:3C:D3:34:FC:99:30:24:23:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01470B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56DCCAA804C211F09B716356762E951A.roa
Signing time: Wed 19 Mar 2025 13:01:58 +0000
ROA not before: Wed 19 Mar 2025 13:01:53 +0000
ROA not after: Sun 27 Apr 2025 13:01:53 +0000
asID: 6079
IP address blocks: 45.197.208.0/20 maxlen: 24
45.198.185.0/24 maxlen: 24
45.198.186.0/23 maxlen: 24
45.198.188.0/22 maxlen: 24
45.198.192.0/24 maxlen: 24
45.203.139.0/24 maxlen: 24
45.203.196.0/23 maxlen: 24
45.203.198.0/24 maxlen: 24
45.203.210.0/24 maxlen: 24
45.203.221.0/24 maxlen: 24
45.203.222.0/23 maxlen: 24
45.203.240.0/22 maxlen: 24
45.203.244.0/24 maxlen: 24
45.203.252.0/22 maxlen: 24
45.205.85.0/24 maxlen: 24
45.205.110.0/23 maxlen: 24
45.205.132.0/24 maxlen: 24
45.205.151.0/24 maxlen: 24
45.205.154.0/24 maxlen: 24
45.205.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83723 (0x1470b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 19 13:01:53 2025 GMT
Not After : Apr 27 13:01:53 2025 GMT
Subject: CN=67dac045-70ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:9e:e1:17:87:3c:3d:69:c4:23:d9:cf:eb:
7c:32:fc:b6:89:6e:14:c0:19:1a:51:30:6a:a1:7e:
79:9a:ed:84:42:92:5b:fd:92:a0:35:a0:e0:b2:f5:
55:9e:02:36:3a:cb:6b:f9:81:9d:1d:31:74:fd:07:
63:75:3e:87:7c:93:16:ed:db:fb:7e:02:b6:1e:99:
8b:59:1e:de:6a:06:2b:1c:9a:a8:5d:c3:01:73:30:
f5:6c:76:16:7e:26:c9:19:ad:e0:e7:5a:a1:41:3e:
14:73:d3:d9:44:f5:91:c8:f2:12:b6:5f:94:26:9b:
2f:22:34:e6:b6:bf:ab:cb:45:47:bb:14:6a:9d:01:
4b:05:93:de:67:5f:26:73:f5:15:4a:4e:27:c1:6a:
52:e6:d0:07:d4:98:de:2b:78:ce:4d:2f:d5:f9:e5:
e3:46:d8:14:f3:89:dc:5b:52:f3:e3:e0:54:49:41:
e9:3e:6d:2b:57:78:98:c4:4c:1b:0e:04:10:c1:da:
92:c4:8d:7b:88:a5:01:66:51:d8:2b:17:f3:24:77:
59:5f:f2:fd:09:c7:10:e0:de:0c:41:5f:ea:7c:88:
a5:47:9b:cd:fa:16:48:7d:5b:d4:01:79:d9:a9:89:
c9:a9:91:03:21:79:5f:a9:d7:ee:28:55:37:aa:d8:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AE:34:5B:20:00:92:58:8A:B4:F4:3C:D3:34:FC:99:30:24:23:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56DCCAA804C211F09B716356762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.208.0/20
45.198.185.0-45.198.192.255
45.203.139.0/24
45.203.196.0-45.203.198.255
45.203.210.0/24
45.203.221.0-45.203.223.255
45.203.240.0-45.203.244.255
45.203.252.0/22
45.205.85.0/24
45.205.110.0/23
45.205.132.0/24
45.205.151.0/24
45.205.154.0/24
45.205.172.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:a9:72:20:11:18:3c:62:4d:49:37:db:43:db:a3:72:63:8e:
56:e0:d8:a2:56:17:3f:d5:76:6a:3b:ff:32:90:bc:be:95:e1:
f9:cb:28:01:cb:3e:8a:6c:89:d1:26:ec:c6:f9:e3:0f:0d:ad:
1d:97:62:95:68:2d:4a:cf:90:b0:b6:e9:9a:5b:60:16:9a:65:
a5:66:1b:11:58:5d:65:9d:af:0b:ef:10:1c:98:19:97:1c:b0:
8b:1d:2c:5e:bf:20:46:ba:7b:6d:43:4c:19:a6:61:81:c7:03:
10:6e:6e:bd:cf:21:06:df:4e:82:ce:36:30:b7:0e:57:69:84:
9b:6f:1f:c8:30:3a:83:16:9f:5b:04:ab:45:b6:9d:bd:29:c8:
15:ad:2b:01:c9:dc:7c:c5:89:0c:de:93:43:a9:4a:cf:4c:62:
b6:3f:27:23:07:a7:b5:7d:0e:48:6e:b1:b5:b0:18:e4:9d:a4:
50:1d:41:36:fe:f4:50:78:0b:fb:d5:2a:bd:2c:65:6f:92:7b:
13:f9:1f:f5:b6:1f:ef:cc:55:b9:6a:e0:71:73:ed:81:61:aa:
05:bd:30:ae:db:57:5e:75:f1:15:43:ea:af:01:9e:e7:9e:83:
f9:be:3a:e1:0a:34:ac:57:0b:b9:70:de:a1:67:88:9c:7b:30:
ce:83:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:23 2025 by rpki-client