Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C0597A0244511F0BF67B298DAE4EC9C.roa
File: 1C0597A0244511F0BF67B298DAE4EC9C.roa (raw, json)
Hash identifier: ZhASVeVDFtZwaTXarl9hk0KTt5fi9W5io1OiNNzTw9g=
Subject key identifier: 6E:B5:FB:77:D8:3B:48:4E:DB:10:D7:BF:97:F0:C1:29:FD:23:85:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C0597A0244511F0BF67B298DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 15:26:09 +0000
ROA not before: Mon 28 Apr 2025 15:26:05 +0000
ROA not after: Sun 26 Apr 2026 15:26:05 +0000
asID: 984
IP address blocks: 45.195.159.0/24 maxlen: 24
45.196.129.0/24 maxlen: 24
45.196.130.0/24 maxlen: 24
45.196.135.0/24 maxlen: 24
45.196.138.0/24 maxlen: 24
45.197.194.0/24 maxlen: 24
45.197.197.0/24 maxlen: 24
45.197.198.0/24 maxlen: 24
45.197.200.0/24 maxlen: 24
45.197.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85917 (0x14f9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 15:26:05 2025 GMT
Not After : Apr 26 15:26:05 2026 GMT
Subject: CN=680f9e11-66ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:54:ff:c1:70:49:1d:a6:04:94:99:5c:f9:
81:55:c6:03:9b:78:70:9b:89:cd:a4:6d:1f:67:60:
0f:df:4f:42:4d:96:34:8d:59:0b:24:fe:1c:14:e9:
86:81:f2:4e:79:c3:7e:06:f7:b0:7e:e5:15:34:2d:
ae:4a:db:18:4e:ad:cb:a4:7c:62:1f:66:8b:1d:57:
e7:05:55:04:c4:07:b8:30:65:e3:13:32:93:63:8d:
d1:08:a1:b3:19:c9:99:c3:cd:d9:f7:df:0c:29:77:
45:ab:a4:08:e9:1f:1c:f1:43:42:56:5d:b2:3e:14:
bd:26:88:31:dd:6d:74:82:f4:99:02:1a:b9:22:04:
12:60:d5:b5:62:cd:30:b8:a5:34:fb:d6:02:b0:ed:
90:f5:ae:21:62:f0:a0:42:1b:5c:57:86:98:1a:8b:
18:b9:19:43:dd:77:43:28:7d:3f:a1:22:be:fc:81:
c4:12:f4:7a:71:78:ad:d3:e8:68:c9:a3:88:48:01:
b1:ed:df:d5:16:96:d1:b6:35:76:9c:a3:77:aa:09:
cf:29:38:5a:96:44:65:41:8c:a9:33:93:b4:5d:d5:
d7:6e:96:89:8e:80:5b:77:54:5d:df:5f:c0:c4:d6:
7e:74:4e:50:bb:0b:14:49:9b:83:04:90:43:f1:0b:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B5:FB:77:D8:3B:48:4E:DB:10:D7:BF:97:F0:C1:29:FD:23:85:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C0597A0244511F0BF67B298DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.159.0/24
45.196.129.0-45.196.130.255
45.196.135.0/24
45.196.138.0/24
45.197.194.0/24
45.197.197.0-45.197.198.255
45.197.200.0/23
Signature Algorithm: sha256WithRSAEncryption
35:2a:5a:f3:1d:68:e7:33:82:62:25:72:09:34:10:f6:97:12:
a4:f1:8a:ec:31:fd:96:4a:35:be:bb:74:86:a5:0f:f6:45:8b:
c2:2d:84:3d:e9:2e:09:9b:ab:75:d9:58:75:14:d0:06:e5:9e:
f4:22:e0:4e:ed:47:a9:09:16:e1:25:2f:77:dd:b4:0c:a4:49:
a4:38:8e:15:3e:7e:c4:8d:82:d2:98:e6:7a:f8:c1:a6:5e:7d:
1e:02:43:be:91:2e:26:8c:c5:27:ce:84:31:eb:d0:10:af:99:
1d:f5:f7:db:9e:8d:56:af:75:cb:aa:0d:27:46:f9:7f:31:a3:
b8:dd:0e:4f:0c:dc:35:43:b2:b3:27:d5:15:62:0c:0d:96:8a:
55:3c:dc:ad:25:72:33:81:0a:a8:23:1e:72:83:7a:b0:5c:52:
97:6c:7f:ed:8a:9d:2a:cc:f7:e2:95:7e:01:11:a5:ee:90:56:
29:e8:e1:d4:70:49:ee:ae:f8:60:6a:dc:9b:89:23:b7:6a:f5:
e0:29:a5:58:34:3e:69:3a:59:b9:07:ac:9a:8a:78:7f:98:d2:
22:01:1a:08:3e:5d:3d:47:87:fe:ae:ef:8e:1b:40:43:f6:4b:
8d:c3:ad:82:08:25:9d:03:fb:13:fe:f1:c2:95:6c:1f:fb:46:
2b:67:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:42:18 2025 by rpki-client