Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F880E1DCF66211EFBC3BBC83762E951A.roa
File: F880E1DCF66211EFBC3BBC83762E951A.roa (raw, json)
Hash identifier: C7o2VgS640bcSBBUPJz3An17w0HEr5cAC2QflXcjZJM=
Subject key identifier: 7F:A9:8E:6E:55:C2:31:D4:F2:96:C3:8C:EC:C8:01:69:34:C7:07:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F880E1DCF66211EFBC3BBC83762E951A.roa
Signing time: Sat 01 Mar 2025 06:04:01 +0000
ROA not before: Sat 01 Mar 2025 06:03:57 +0000
ROA not after: Sat 19 Feb 2028 06:03:57 +0000
asID: 17561
IP address blocks: 45.196.3.0/24 maxlen: 24
45.197.32.0/24 maxlen: 24
45.197.33.0/24 maxlen: 24
45.197.34.0/24 maxlen: 24
45.197.35.0/24 maxlen: 24
45.197.36.0/24 maxlen: 24
45.197.37.0/24 maxlen: 24
45.197.38.0/24 maxlen: 24
45.197.39.0/24 maxlen: 24
45.197.40.0/24 maxlen: 24
45.197.41.0/24 maxlen: 24
45.197.42.0/24 maxlen: 24
45.197.43.0/24 maxlen: 24
45.197.44.0/24 maxlen: 24
45.197.45.0/24 maxlen: 24
45.197.46.0/24 maxlen: 24
45.197.53.0/24 maxlen: 24
45.197.55.0/24 maxlen: 24
45.197.61.0/24 maxlen: 24
45.202.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81806 (0x13f8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 06:03:57 2025 GMT
Not After : Feb 19 06:03:57 2028 GMT
Subject: CN=67c2a351-151c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:3a:a6:2c:56:3f:9e:fd:7c:0d:b6:56:34:
52:4c:03:75:31:1e:2e:8b:50:64:3e:99:60:f9:a0:
42:c3:fc:6d:67:af:6a:2e:c2:6a:52:8b:16:d7:26:
b6:36:8c:ac:a5:db:9b:43:5c:dc:5e:5c:04:70:2b:
ec:6e:51:08:3c:0d:76:fe:39:20:8a:89:39:5f:7d:
7e:1e:b6:5a:c6:05:a9:c4:e0:aa:29:e1:69:4b:41:
f4:72:7a:8f:ef:18:3c:f1:e3:49:a1:d8:bd:99:78:
e5:55:ab:f0:28:6f:86:3e:cb:b1:d5:e2:dd:9e:ba:
62:96:24:b0:7c:d1:02:9e:70:3c:36:e6:a0:ae:7e:
81:75:75:44:b7:d6:37:ab:a7:6e:c5:4a:77:5c:0b:
c5:de:3f:6f:72:28:23:ff:13:c7:8a:85:48:bc:6b:
43:13:d3:a6:d0:0b:c6:1d:cd:f2:fc:fb:13:7d:29:
62:61:e3:a0:bc:55:12:12:c4:08:ea:64:8d:0c:77:
31:39:e0:d5:e2:53:8e:d7:40:bb:13:cd:e0:99:b7:
ae:18:58:53:c3:e7:50:a1:12:cf:41:97:7d:9d:2a:
80:e7:40:b7:e7:bd:48:ec:13:c2:a4:fd:4f:00:f9:
0d:50:e1:13:57:95:e9:4b:6b:2c:a7:d8:1f:ba:a3:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:8E:6E:55:C2:31:D4:F2:96:C3:8C:EC:C8:01:69:34:C7:07:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F880E1DCF66211EFBC3BBC83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.3.0/24
45.197.32.0-45.197.46.255
45.197.53.0/24
45.197.55.0/24
45.197.61.0/24
45.202.192.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ae:62:51:ca:ea:17:9b:6f:c1:ba:f3:e1:e7:81:fb:e6:7e:
01:a3:95:20:32:da:a9:92:b6:73:96:5c:45:ee:55:fe:25:76:
bf:ff:d3:99:eb:38:a1:86:2b:24:f0:e3:80:12:03:e1:50:11:
be:fe:ba:78:67:59:16:30:4c:96:96:b8:5a:4f:e3:bd:d5:61:
35:c3:38:8c:7f:3d:bc:f4:49:5b:24:4a:92:d0:a0:0d:cf:6e:
36:f8:c1:ae:12:88:4b:17:e3:6b:fb:30:82:20:26:35:5d:30:
dd:1a:33:b8:5a:bf:6d:f7:f6:96:2b:95:15:b2:09:22:44:32:
23:32:16:6b:ca:5a:29:1c:60:f4:3e:8e:25:06:a4:cc:38:64:
c6:66:e1:fb:da:df:7f:e4:1d:57:e3:00:02:28:a6:82:e3:5e:
b7:20:5b:ee:0e:1f:b1:60:d3:89:da:48:6c:1a:ac:5f:af:1c:
48:a1:6f:2b:99:e4:f7:5a:20:ec:21:fb:8a:76:9a:23:be:d3:
23:33:b0:34:34:54:1e:57:6e:ab:50:e4:4e:5d:03:54:b8:49:
be:2e:80:ee:06:9f:d5:41:41:61:27:ce:6b:74:d6:ae:c9:d6:
66:2d:cb:82:9c:54:c6:ca:99:38:ac:7f:2b:0b:61:f6:68:fc:
86:4c:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:04 2025 by rpki-client