Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D56E84200CD211F095A0419F762E951A.roa
File: D56E84200CD211F095A0419F762E951A.roa (raw, json)
Hash identifier: jyvIrhp5E4R+KXjqPg8IQNajVVWojyF8X+1HufVyeuo=
Subject key identifier: 2F:91:9B:D7:1E:E0:06:F5:3C:C3:17:7E:45:4E:89:07:6F:B0:9D:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D56E84200CD211F095A0419F762E951A.roa
Signing time: Sat 29 Mar 2025 19:20:11 +0000
ROA not before: Sat 29 Mar 2025 19:20:07 +0000
ROA not after: Sun 04 May 2025 19:20:07 +0000
asID: 395793
IP address blocks: 45.192.165.0/24 maxlen: 24
45.192.166.0/24 maxlen: 24
45.192.227.0/24 maxlen: 24
45.192.228.0/22 maxlen: 24
45.192.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84222 (0x148fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 19:20:07 2025 GMT
Not After : May 4 19:20:07 2025 GMT
Subject: CN=67e847eb-b145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:ad:3a:7d:15:1e:ae:c9:93:9f:93:46:c7:
0a:f2:1e:eb:f9:60:6f:56:89:0c:2b:f2:c2:4a:75:
39:d4:3a:96:53:2e:3a:55:0e:9c:57:8b:f9:f9:0f:
18:82:c8:8e:c2:bd:52:47:52:98:3c:e5:57:d7:b9:
1c:17:ba:b3:56:0f:11:78:ae:b4:fe:30:db:2a:95:
20:28:40:f4:6d:2f:42:8e:e9:7f:38:84:0f:a6:1c:
ca:6e:8d:8b:5c:fe:aa:e5:b0:44:77:9e:35:a6:39:
29:01:7b:3b:27:01:e6:8f:ea:47:2e:0f:2e:a3:e0:
27:13:ae:ec:80:87:81:80:61:d3:35:9e:45:53:13:
c7:06:9f:ed:09:7e:83:01:61:41:ef:26:35:eb:20:
cd:26:d1:7d:c7:61:2a:50:e6:9a:0a:f4:65:f1:f9:
3c:0c:d6:6c:72:16:91:b2:a5:af:76:87:21:97:5b:
82:1b:1d:86:6e:3a:9e:5d:4a:03:eb:1e:05:00:79:
a2:30:10:d4:ec:99:aa:5c:60:19:e8:53:75:d2:da:
50:25:88:20:27:3b:d3:e1:7d:d9:76:4a:73:d4:cd:
94:43:f2:bf:56:92:d5:8f:3e:20:2d:7a:32:2d:3e:
0a:31:7e:7a:20:c9:ea:57:63:20:6f:8b:74:83:07:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:91:9B:D7:1E:E0:06:F5:3C:C3:17:7E:45:4E:89:07:6F:B0:9D:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D56E84200CD211F095A0419F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.165.0-45.192.166.255
45.192.227.0-45.192.235.255
Signature Algorithm: sha256WithRSAEncryption
2a:1c:d9:01:28:f5:9e:55:e5:ed:02:37:fb:9f:22:15:dc:d6:
8e:8d:d6:d7:a3:1e:a4:24:64:f4:56:47:2e:c3:ce:9f:37:09:
31:b7:a9:b7:35:a7:d7:d6:83:5d:a9:54:91:73:6a:45:6f:f8:
2e:ca:40:a5:f9:35:b3:3f:8c:ea:35:c9:8e:c7:bd:93:26:35:
94:b7:8c:01:f2:13:41:69:ba:f0:c4:0c:b3:c8:0a:2b:e6:50:
67:d5:04:7b:a8:58:02:cc:6f:0f:a0:96:29:f5:ee:d4:f1:a8:
e6:7e:a3:17:4a:24:90:8d:2e:25:e7:aa:d2:e3:f7:be:c4:ed:
98:03:ba:1a:a9:d4:cd:cd:47:81:72:2e:18:1c:e6:0c:b5:d2:
35:c4:e7:05:4f:51:24:8f:d5:58:0b:9f:ea:e5:49:8d:25:12:
77:cb:86:89:d6:d7:da:56:5d:42:09:47:5b:0c:cc:1c:8c:4f:
4c:4e:4d:ca:15:6b:c7:af:89:94:17:ed:60:aa:31:76:1d:1f:
7a:76:27:ad:58:c6:94:ec:bf:44:a7:d7:e5:28:9a:8d:55:c3:
03:26:3a:c0:de:a0:45:67:03:df:a7:3f:13:0d:f7:0b:20:96:
20:58:49:b5:87:6b:ff:cd:9f:09:55:38:53:96:20:09:96:cb:
47:c3:0a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:03 2025 by rpki-client