Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA7FC72C094F11F0B01FB79D762E951A.roa
File: BA7FC72C094F11F0B01FB79D762E951A.roa (raw, json)
Hash identifier: 57Ydn0KikNiF9gSVxYE3wFBG/fdPOqCPfsQHMGBQ9SQ=
Subject key identifier: E8:F1:3C:1D:A4:86:93:7F:DE:E7:BE:39:C3:9D:D6:75:B0:63:B6:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA7FC72C094F11F0B01FB79D762E951A.roa
Signing time: Tue 25 Mar 2025 08:04:08 +0000
ROA not before: Tue 25 Mar 2025 08:04:04 +0000
ROA not after: Tue 13 May 2025 08:04:04 +0000
asID: 138915
IP address blocks: 45.197.74.0/24 maxlen: 24
45.197.75.0/24 maxlen: 24
45.197.106.0/24 maxlen: 24
45.197.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83961 (0x147f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 08:04:04 2025 GMT
Not After : May 13 08:04:04 2025 GMT
Subject: CN=67e26378-4d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:25:5d:fd:46:89:ef:53:48:d4:50:10:88:0c:
75:a1:74:de:d5:4f:76:7e:ac:d7:7f:f5:fc:a7:3a:
17:88:c3:c6:e8:c4:94:36:7d:64:f2:65:3a:10:f4:
b1:99:65:88:11:0b:c8:fb:e9:43:69:34:85:20:f3:
e2:fe:b8:05:69:c7:bf:49:4e:ce:b7:36:64:01:66:
d3:23:23:86:07:34:18:d1:de:59:05:54:ed:26:a0:
85:f9:d2:d4:af:25:69:3a:b8:ac:cf:a7:64:b1:00:
d7:70:25:ea:50:e2:fc:22:0a:00:a7:28:18:80:d8:
f4:4f:56:9d:79:c6:a4:f8:1b:fc:b2:48:87:5b:ea:
93:b0:04:20:80:e4:80:1c:09:75:19:60:2f:eb:6d:
70:23:0a:a1:c1:4d:bf:7b:11:3e:c1:4e:46:d1:38:
e3:0e:ee:75:c7:7b:6e:a2:ee:95:a7:08:59:19:1b:
04:b5:c9:41:ba:2a:94:d3:de:62:2a:20:45:16:9a:
14:55:90:ef:ec:3d:9f:c2:55:f9:8b:30:c4:85:e3:
a8:ee:97:c0:db:7c:ae:2a:ce:73:d1:e6:37:85:7d:
dd:c9:cd:65:9a:9c:ce:8c:8c:ec:7b:c2:21:35:2b:
22:50:32:30:1e:d7:15:12:b0:c1:02:9d:53:0b:9b:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F1:3C:1D:A4:86:93:7F:DE:E7:BE:39:C3:9D:D6:75:B0:63:B6:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA7FC72C094F11F0B01FB79D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.74.0/23
45.197.106.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:21:02:9b:41:42:9d:b1:0a:33:8e:5e:b5:15:88:f3:72:a3:
e3:c9:a4:09:e0:2c:a0:04:74:bc:e9:34:79:17:93:05:f2:51:
d9:ba:e4:ea:24:05:c6:2c:03:ba:f2:ec:ed:b7:ac:e3:59:ba:
0b:f2:f9:2f:18:78:5f:b6:7e:75:f1:a0:9b:5c:8d:91:47:b3:
87:2c:68:fa:24:68:b6:ba:99:2b:c5:4d:12:20:d7:4c:6e:a3:
33:1f:30:bb:6c:92:0b:27:d7:a3:84:b5:44:41:70:52:24:4b:
b2:6a:64:c4:1c:cb:b6:64:9d:ee:78:14:9b:58:9f:32:c0:a1:
24:bd:f3:1d:58:c9:90:88:46:63:82:10:21:61:16:29:39:25:
a4:b5:af:1d:69:a8:f4:34:18:ce:de:a2:59:1c:7d:66:4f:fc:
e9:5c:f3:27:87:a4:fb:50:21:16:93:b9:b1:1a:db:85:b9:2a:
12:7a:c5:09:89:d4:0b:c5:56:d2:82:e2:d6:12:77:d9:d0:9a:
43:d8:91:6e:68:80:08:0b:8f:ca:bf:c1:44:a9:17:5d:05:47:
25:2f:43:e5:84:ad:f7:ea:10:d6:fb:ec:9d:05:9e:04:fe:a4:
36:ac:0a:d7:93:f2:b6:1a:8a:08:20:c8:b3:97:f5:02:0c:74:
e3:62:db:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:06 2025 by rpki-client