Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/735D6A60FCD011EFA1558D82762E951A.roa
File: 735D6A60FCD011EFA1558D82762E951A.roa (raw, json)
Hash identifier: 1ro9IoZ0tnnS/8Xp/jOnbUgrKeAe/+V9iU1eRaXC3Uk=
Subject key identifier: 4E:91:0B:3C:FA:43:74:B6:71:81:36:3A:22:DD:F3:6F:AD:9A:C7:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014451
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/735D6A60FCD011EFA1558D82762E951A.roa
Signing time: Sun 09 Mar 2025 10:22:49 +0000
ROA not before: Sun 09 Mar 2025 10:22:45 +0000
ROA not after: Tue 15 Apr 2025 10:22:45 +0000
asID: 400046
IP address blocks: 45.195.64.0/24 maxlen: 24
45.195.65.0/24 maxlen: 24
45.195.66.0/24 maxlen: 24
45.195.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83025 (0x14451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 9 10:22:45 2025 GMT
Not After : Apr 15 10:22:45 2025 GMT
Subject: CN=67cd6bf9-17b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:ee:78:a3:32:9c:6e:32:73:41:2c:21:d1:
40:53:a9:ae:0e:6f:d7:c7:ec:c3:e8:46:24:36:d1:
37:6e:1d:f2:05:79:06:70:bb:1d:1f:f4:27:d5:80:
9d:95:14:81:d5:15:f6:a3:da:97:04:1d:5c:a9:87:
d7:d8:d3:86:f4:91:9a:c3:a1:16:81:2a:bf:c7:b5:
73:e2:3f:e8:6a:ca:56:ee:aa:d8:31:6c:7b:24:2d:
3a:45:5d:64:85:8d:65:e9:be:ab:0c:0a:ac:c8:da:
41:27:f8:ca:48:67:98:fd:04:9a:46:d9:4d:1b:b7:
8e:36:35:87:d4:f4:f5:cd:df:20:16:84:48:eb:32:
84:4c:02:08:7b:7a:6a:91:f9:b0:05:80:75:d5:9d:
a2:eb:fa:6b:86:fa:08:09:b6:16:1f:97:30:63:32:
b7:82:02:8f:a6:1c:f9:0b:75:41:82:d3:c2:3e:05:
0e:72:c8:c0:f2:d8:de:65:5b:c5:5e:e6:83:84:59:
51:04:bd:3c:4f:b0:66:35:3d:43:6f:f9:54:59:8d:
65:ae:ce:62:99:64:f2:59:65:90:14:7a:67:b7:50:
32:be:cb:fc:88:9a:fb:eb:33:8e:fd:a1:7a:0e:87:
60:23:21:0d:d6:df:6e:4c:80:2b:43:64:93:af:e6:
0a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:0B:3C:FA:43:74:B6:71:81:36:3A:22:DD:F3:6F:AD:9A:C7:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/735D6A60FCD011EFA1558D82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:c4:93:c8:91:ef:7e:6a:8f:a5:c3:81:f6:31:cd:77:99:ba:
b8:c3:1d:07:18:4b:8e:b5:41:9f:11:c7:d4:0e:c6:a4:92:2f:
6a:59:58:e7:44:3f:74:1f:d9:0c:c0:e2:3e:44:67:5b:fa:3f:
06:60:c7:5b:74:43:13:3d:84:08:03:0a:f7:8a:55:ea:50:a5:
06:50:35:07:69:84:2f:ec:ff:75:fa:42:89:03:00:ed:d6:31:
d4:4b:6b:cc:21:51:92:37:5c:43:94:69:dd:39:61:e6:19:96:
12:ff:6d:d2:c8:17:06:fb:04:bf:d1:98:ac:d2:9b:21:d6:50:
45:79:cd:ca:76:35:87:8f:e5:b2:fe:51:2a:ee:a7:2e:41:f9:
9b:d1:64:c2:f9:19:ee:c9:bd:73:cd:9f:06:27:b1:ac:91:7e:
83:90:94:dd:3b:73:3c:7f:68:bc:f0:35:b3:2e:20:64:b5:95:
08:04:02:62:c9:95:ce:36:77:21:b2:82:fb:07:15:e5:58:20:
45:c9:e6:67:99:6f:14:78:a5:62:9f:42:54:bd:9b:80:14:f8:
10:dd:e5:90:7e:d7:e1:a3:d3:9e:68:de:b3:37:e1:37:51:49:
c3:b0:c6:d9:99:00:92:93:5c:19:40:45:c8:55:cc:be:83:5d:
aa:5a:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:20 2025 by rpki-client