Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A63349DA108C11F0854762BB762E951A.roa
File: A63349DA108C11F0854762BB762E951A.roa (raw, json)
Hash identifier: XM1+LnLLRc3cWQEUfHPwIdflH5ApAzA91kEkpL0H9Os=
Subject key identifier: FB:D8:E2:7F:3C:82:6C:B5:01:C3:94:0B:D6:AE:50:4E:88:9B:B8:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A63349DA108C11F0854762BB762E951A.roa
Signing time: Thu 03 Apr 2025 13:07:52 +0000
ROA not before: Thu 03 Apr 2025 13:07:48 +0000
ROA not after: Fri 18 Apr 2025 13:07:48 +0000
asID: 39600
IP address blocks: 45.196.140.0/24 maxlen: 24
45.196.141.0/24 maxlen: 24
45.196.142.0/24 maxlen: 24
45.196.143.0/24 maxlen: 24
45.203.56.0/24 maxlen: 24
45.203.57.0/24 maxlen: 24
45.203.58.0/24 maxlen: 24
45.203.60.0/24 maxlen: 24
45.203.61.0/24 maxlen: 24
45.203.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84473 (0x149f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 13:07:48 2025 GMT
Not After : Apr 18 13:07:48 2025 GMT
Subject: CN=67ee8828-34bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:d7:02:36:7d:15:80:e9:8f:14:9b:89:d7:
d0:c0:4f:68:e0:e5:c1:3a:b4:84:f4:90:ee:c9:f1:
46:06:0e:c9:e2:da:0a:de:5c:dc:25:22:a4:aa:4d:
78:8c:92:12:05:f6:f3:cd:e5:50:98:da:5b:d5:6c:
7a:ee:2b:e1:d9:8e:0f:98:ce:5d:ed:43:73:28:5d:
f7:2f:41:93:6b:2e:96:db:28:3c:43:d9:00:0c:c5:
7e:c4:ce:d4:71:9d:3f:0a:47:24:62:33:48:26:44:
68:7a:a4:96:d8:5c:d4:ee:c4:45:38:1b:9a:18:82:
6f:bf:66:0b:1d:e4:8d:38:92:4c:32:a7:14:01:b6:
f0:65:83:d1:8d:30:98:2f:a2:91:7b:2e:8f:ed:23:
8f:81:86:d1:50:93:80:80:f1:11:f0:bb:76:65:26:
39:93:c7:a5:25:d8:d1:9a:10:30:c0:5a:2b:2e:6c:
6d:ad:69:e7:ab:1d:7b:52:bc:b7:b4:4e:56:de:2c:
22:dd:6f:04:61:c3:0f:1c:4a:06:f1:31:28:69:7d:
02:99:3e:1a:b0:09:b8:de:68:20:c9:35:34:90:cc:
d7:38:7e:70:49:8d:dd:66:3b:73:e4:93:7b:32:7e:
8e:b4:60:23:ea:a4:7e:bb:c4:8c:68:76:a6:b8:79:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D8:E2:7F:3C:82:6C:B5:01:C3:94:0B:D6:AE:50:4E:88:9B:B8:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A63349DA108C11F0854762BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.140.0/22
45.203.56.0-45.203.58.255
45.203.60.0-45.203.62.255
Signature Algorithm: sha256WithRSAEncryption
9f:93:20:11:3a:e3:f9:56:87:e1:5d:9f:93:22:d2:26:a5:80:
64:f3:31:7e:2e:de:2d:47:23:69:89:98:a7:e4:39:66:3b:84:
16:51:48:5a:98:59:8e:d4:ca:50:ec:ad:5c:30:aa:93:ba:8a:
59:44:3c:65:bc:95:9c:e2:9e:ca:3b:3e:ca:b2:f5:21:fb:5d:
1b:aa:40:62:40:09:38:89:f5:37:fd:9e:5e:8f:c3:17:81:11:
9f:ff:0c:c8:37:b9:22:33:e9:78:a6:19:76:d7:3e:37:e8:53:
c4:69:4c:33:36:82:0d:99:f4:d5:38:23:88:85:64:99:47:97:
eb:6b:e3:0b:26:9c:d2:5a:d4:3d:d5:6b:31:fd:4c:e5:07:4e:
7b:69:c9:cc:c8:b3:01:de:cb:3d:a7:cd:2e:72:f8:b9:f6:81:
61:30:c5:bc:0c:19:3e:c1:5e:58:9c:31:41:75:e6:16:b2:cf:
17:21:00:c8:23:31:79:a1:6a:0d:bf:32:25:2a:7c:cf:0b:fc:
68:c1:46:bd:de:1b:9f:a6:9e:06:55:64:0e:ee:eb:dc:19:d1:
25:e3:0c:64:a3:ea:83:21:50:a3:8e:39:13:db:2c:cb:ce:01:
43:0f:a1:33:73:a8:42:d9:ad:7a:b0:33:8b:7b:01:0c:fc:28:
0c:2e:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:00 2025 by rpki-client