Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AFF6BE4113411F099C809B7762E951A.roa
File: 5AFF6BE4113411F099C809B7762E951A.roa (raw, json)
Hash identifier: TGDTyVBx/MjWZCEhGnD8xDhNpA/LaWdIXdKyVFM7y9U=
Subject key identifier: 7F:91:75:0B:59:9D:4E:49:C7:94:51:CE:46:91:91:57:A4:33:ED:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AFF6BE4113411F099C809B7762E951A.roa
Signing time: Fri 04 Apr 2025 09:08:21 +0000
ROA not before: Fri 04 Apr 2025 09:08:16 +0000
ROA not after: Thu 01 May 2025 09:08:16 +0000
asID: 205125
IP address blocks: 45.196.106.0/24 maxlen: 24
45.196.107.0/24 maxlen: 24
45.202.192.0/24 maxlen: 24
45.202.193.0/24 maxlen: 24
45.202.198.0/24 maxlen: 24
45.202.200.0/24 maxlen: 24
45.202.201.0/24 maxlen: 24
45.202.202.0/24 maxlen: 24
45.202.205.0/24 maxlen: 24
45.202.206.0/24 maxlen: 24
45.202.207.0/24 maxlen: 24
45.202.208.0/24 maxlen: 24
45.202.213.0/24 maxlen: 24
45.204.65.0/24 maxlen: 24
45.204.69.0/24 maxlen: 24
45.204.73.0/24 maxlen: 24
45.204.75.0/24 maxlen: 24
45.207.2.0/24 maxlen: 24
45.207.3.0/24 maxlen: 24
45.207.6.0/24 maxlen: 24
45.207.148.0/24 maxlen: 24
45.207.149.0/24 maxlen: 24
45.207.150.0/24 maxlen: 24
45.207.151.0/24 maxlen: 24
45.207.160.0/24 maxlen: 24
45.207.161.0/24 maxlen: 24
45.207.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84481 (0x14a01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 4 09:08:16 2025 GMT
Not After : May 1 09:08:16 2025 GMT
Subject: CN=67efa185-3c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:de:c7:66:fd:f7:bc:0d:75:61:87:2f:49:
bd:40:aa:65:60:85:7f:ad:87:b2:20:61:ef:23:78:
64:39:4e:3e:36:d0:79:a5:ff:a6:94:43:2d:65:bd:
e5:36:f7:dc:47:98:40:da:a1:a2:9f:ab:40:0c:f2:
49:7b:74:43:7a:d5:e6:53:63:f8:ed:ec:6f:e9:85:
59:66:70:f2:6f:de:d2:21:96:aa:13:b4:c9:aa:68:
c2:49:86:bd:e6:0a:24:51:f0:45:94:4a:99:e7:78:
d4:2e:96:03:ca:cf:41:a4:88:73:13:f6:4d:4d:7a:
e3:21:23:e9:87:3a:16:da:07:b8:a5:df:37:eb:46:
61:be:9a:43:74:04:31:05:b6:4b:15:d1:2f:68:b7:
f1:2e:82:dd:f2:43:1c:15:f1:a5:61:bd:9e:99:60:
ef:5c:d5:db:56:06:18:b7:ed:fb:1e:0f:59:23:5b:
6f:a2:96:1a:42:41:30:dd:d7:c5:7f:7a:fd:8b:94:
ac:34:09:ce:c2:7c:dd:72:12:a0:cc:01:f2:ac:93:
99:19:7c:71:62:03:09:8a:43:c7:14:fa:47:71:c9:
32:97:c3:0b:c8:97:03:cb:7f:45:08:c3:3e:10:a8:
6b:87:64:b4:52:89:94:05:fc:92:7c:c5:4b:80:a3:
60:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:91:75:0B:59:9D:4E:49:C7:94:51:CE:46:91:91:57:A4:33:ED:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AFF6BE4113411F099C809B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.106.0/23
45.202.192.0/23
45.202.198.0/24
45.202.200.0-45.202.202.255
45.202.205.0-45.202.208.255
45.202.213.0/24
45.204.65.0/24
45.204.69.0/24
45.204.73.0/24
45.204.75.0/24
45.207.2.0/23
45.207.6.0/24
45.207.148.0/22
45.207.160.0-45.207.162.255
Signature Algorithm: sha256WithRSAEncryption
ac:05:2e:55:cf:27:17:54:19:ea:14:55:27:21:78:a9:a1:cd:
24:36:5c:bc:8a:b1:d2:df:ea:cd:c5:e3:34:4f:ab:c0:9c:a3:
7b:2e:b4:7d:9f:65:9c:e9:f8:54:98:09:ae:1d:d7:f3:a2:e5:
95:42:46:3d:78:33:0f:7b:2b:66:c2:b7:45:ee:bf:06:8e:1a:
db:c2:f3:c1:75:c4:dd:ad:7b:68:08:e6:1c:a5:df:4d:16:1f:
77:78:c2:7a:33:90:8c:02:91:1a:9a:69:df:23:5d:83:44:5e:
cd:97:b0:a1:94:94:e0:c5:c6:81:80:6b:78:d7:7a:04:2c:9e:
09:72:ee:b5:cc:74:9b:1f:53:02:35:65:0a:2f:cc:01:39:fc:
0a:98:cb:e1:87:0c:69:95:99:6b:76:cf:10:f5:fc:2b:e6:4d:
b3:85:23:97:69:64:25:87:93:89:85:df:a3:92:69:83:00:41:
b4:9f:4a:5c:42:d1:fe:46:56:c9:f6:f7:74:4b:6d:e6:ed:cb:
fd:df:6c:ae:ff:02:d6:a9:4f:76:e4:bd:18:c5:1e:17:9b:db:
88:84:dd:9b:c7:a5:f3:ad:87:fd:4f:90:6a:2a:a7:ad:59:71:
e6:32:35:1a:bc:9c:f3:d8:35:6b:a4:0e:f9:a6:db:2f:9d:5a:
eb:c3:86:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:37 2025 by rpki-client