Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C742FB16F57511EFA9685399762E951A.roa
File: C742FB16F57511EFA9685399762E951A.roa (raw, json)
Hash identifier: INylVrD3CwrdVzaOxW+ZWTi7wnUd8T+khEGtvd32NHY=
Subject key identifier: 50:DC:6F:E5:9C:22:55:A2:95:58:C6:09:C9:91:C6:67:F3:E2:4E:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013BBA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C742FB16F57511EFA9685399762E951A.roa
Signing time: Fri 28 Feb 2025 01:46:07 +0000
ROA not before: Fri 28 Feb 2025 01:46:02 +0000
ROA not after: Sat 19 Feb 2028 01:46:02 +0000
asID: 17561
IP address blocks: 45.204.177.0/24 maxlen: 24
45.204.224.0/24 maxlen: 24
45.204.225.0/24 maxlen: 24
45.204.226.0/24 maxlen: 24
45.204.227.0/24 maxlen: 24
45.204.228.0/24 maxlen: 24
45.204.229.0/24 maxlen: 24
45.204.230.0/24 maxlen: 24
45.204.231.0/24 maxlen: 24
45.204.232.0/24 maxlen: 24
45.204.233.0/24 maxlen: 24
45.204.234.0/24 maxlen: 24
45.204.241.0/24 maxlen: 24
45.204.242.0/24 maxlen: 24
45.204.243.0/24 maxlen: 24
45.204.244.0/24 maxlen: 24
45.204.245.0/24 maxlen: 24
45.204.246.0/24 maxlen: 24
45.204.247.0/24 maxlen: 24
45.204.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80826 (0x13bba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 01:46:02 2025 GMT
Not After : Feb 19 01:46:02 2028 GMT
Subject: CN=67c1155f-4910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:fd:4c:1f:3d:30:ba:9d:0b:22:a1:18:c9:
c2:4f:e4:d0:bb:5b:79:1e:1e:11:e4:50:39:65:6e:
c1:20:12:14:11:dd:d7:ff:d3:cf:ab:a7:9a:be:0c:
0e:fa:6a:ec:d7:23:49:54:3f:c5:61:c5:31:fd:ed:
d5:29:f9:e5:b2:da:18:dc:7e:90:70:aa:e2:dc:3f:
7e:81:f0:73:8e:c9:87:03:69:a0:a1:ae:d2:dc:7a:
ac:30:9a:d8:4d:8a:21:d6:f8:c8:e2:e4:a9:5f:fa:
bb:06:ae:cc:43:6c:b2:ba:e9:27:e2:28:32:8e:13:
0b:46:fb:87:40:41:b1:9f:09:c0:3f:e7:a9:b6:f0:
25:02:66:4f:b2:44:07:44:f4:2c:87:8b:bd:a2:ec:
68:d2:80:79:9c:db:2c:24:a9:13:87:3e:2d:d1:00:
c4:2c:e8:25:ae:01:6d:26:9f:3f:a2:c4:e6:37:82:
76:41:c2:9b:81:1d:7d:9a:30:7d:38:59:a1:96:92:
3a:f7:41:ac:d5:2d:32:07:4c:a6:16:a8:ed:86:0a:
fe:e5:a6:5c:c5:b2:5a:84:58:99:3c:a1:27:7b:cf:
ff:1f:06:48:f6:8c:a5:d7:e6:4f:f3:6e:ad:bc:60:
50:fc:9b:78:da:74:cf:48:86:b6:83:2f:61:fd:d8:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DC:6F:E5:9C:22:55:A2:95:58:C6:09:C9:91:C6:67:F3:E2:4E:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C742FB16F57511EFA9685399762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.177.0/24
45.204.224.0-45.204.234.255
45.204.241.0-45.204.247.255
45.204.249.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a4:a6:76:80:b8:73:7f:97:be:11:cb:d1:57:ce:30:ce:cc:
2e:f2:d2:89:36:ed:27:4c:b5:43:af:20:59:9c:67:e5:29:48:
a0:ee:38:8d:09:1c:a5:60:43:bc:98:af:ac:7e:56:ba:fd:6e:
2b:86:9d:b9:38:08:6c:b9:aa:25:d0:6f:51:36:98:e8:62:5d:
d5:72:39:23:4c:62:a9:39:33:d8:32:31:fd:bc:74:9c:43:1a:
b2:4c:d5:ce:93:ba:24:76:52:aa:74:97:31:f1:f6:4c:fb:bc:
85:c9:62:d4:79:b0:b8:55:39:dd:8a:7e:34:27:35:dd:0f:c3:
f7:f5:18:9e:0c:a4:09:a7:1b:92:84:49:9a:8d:ea:55:e8:09:
e0:e5:cf:99:71:87:4d:b9:90:06:c8:c6:26:06:42:b6:cd:35:
f2:72:6a:96:57:22:28:7b:76:c4:da:1c:a0:0e:8a:6a:19:05:
c1:89:9a:9b:19:6c:fd:22:70:ae:c1:f4:45:b6:f0:8f:2e:3d:
4a:63:06:9a:df:d4:9e:f5:5f:05:f5:11:2e:0f:1c:53:78:ee:
04:62:52:11:06:6e:3f:39:7a:6d:11:e7:fb:b7:bb:30:0f:1e:
05:f5:63:ae:bb:1d:3f:c8:b1:7f:97:63:4a:e8:18:9a:a2:5e:
01:e7:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:47 2025 by rpki-client