Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B66A010243D11F0909397E2DAE4EC9C.roa
File: 3B66A010243D11F0909397E2DAE4EC9C.roa (raw, json)
Hash identifier: XCZEWZcGEXl0rr8lYIFCkDL9iEW51ARB+hN2jCs0gK0=
Subject key identifier: DA:10:B0:74:58:56:3F:4B:56:7A:77:52:46:88:AF:38:4C:38:BC:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B66A010243D11F0909397E2DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:29:46 +0000
ROA not before: Mon 28 Apr 2025 14:29:41 +0000
ROA not after: Fri 23 May 2025 14:29:41 +0000
asID: 138590
IP address blocks: 45.194.14.0/24 maxlen: 24
45.194.15.0/24 maxlen: 24
45.194.25.0/24 maxlen: 24
45.194.26.0/24 maxlen: 24
45.194.80.0/24 maxlen: 24
45.194.81.0/24 maxlen: 24
45.194.88.0/24 maxlen: 24
45.194.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85872 (0x14f70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 14:29:41 2025 GMT
Not After : May 23 14:29:41 2025 GMT
Subject: CN=680f90da-1c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:24:2e:92:3c:e7:f9:63:48:e7:0f:b1:1a:
6d:65:9b:ed:4a:d2:f9:3e:ad:59:6e:5f:41:5e:bb:
f6:ed:a5:aa:c0:82:8d:cd:64:e1:35:ad:78:79:ac:
c8:77:2a:1e:93:64:59:ae:5a:92:fa:44:c1:ec:16:
bc:dc:b2:69:a3:1a:17:9d:17:d3:17:2b:2d:6a:79:
98:4e:08:b2:33:28:e9:00:ef:1b:31:80:9b:18:26:
fe:66:19:87:f4:f5:81:92:03:01:0c:a4:48:cc:79:
05:24:02:19:c3:87:c6:7b:e8:73:cd:d5:7d:9c:2b:
8b:58:b7:38:27:3a:dc:ce:eb:c8:91:de:1f:b4:46:
4a:0a:91:80:94:66:ba:45:81:30:7f:52:b2:36:15:
09:5d:03:ea:93:62:50:6a:f0:ec:6d:f3:ba:79:8d:
5c:53:7f:36:ee:cf:94:f2:ab:8c:4e:b2:b9:cb:35:
24:4a:5d:a9:fb:36:6c:c5:9c:d3:ee:e0:80:48:ee:
98:64:fc:10:78:45:4f:38:24:48:64:13:e0:15:ef:
02:76:2b:5e:6d:d3:95:67:cf:7f:53:e0:d6:ab:21:
ca:52:cc:5a:99:d0:30:16:a6:1e:58:6e:13:30:c6:
91:35:e0:de:db:5a:b5:b3:7f:c6:74:7c:a7:f3:2f:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:10:B0:74:58:56:3F:4B:56:7A:77:52:46:88:AF:38:4C:38:BC:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B66A010243D11F0909397E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.14.0/23
45.194.25.0-45.194.26.255
45.194.80.0/23
45.194.88.0/23
Signature Algorithm: sha256WithRSAEncryption
62:07:bc:98:40:23:c6:b5:3e:c0:de:11:bd:1f:a1:c5:18:53:
03:5a:45:36:0c:65:9f:ea:92:97:24:ac:e1:36:56:2f:f6:67:
a4:4f:15:c6:e4:da:32:d6:60:24:e0:73:1d:42:40:3e:ed:dc:
c3:0d:73:50:d2:02:38:53:0f:00:2f:c0:22:41:5a:4d:08:96:
ac:8b:11:8c:5d:05:2d:7a:0c:ca:63:19:85:1e:aa:68:31:3c:
c9:23:11:5a:3f:a3:f6:d9:b3:05:69:5f:67:c8:b0:a5:18:6f:
e8:c0:3e:11:f6:58:82:3e:74:d6:8b:a9:16:01:19:9c:cb:21:
a9:c0:c0:9c:6c:9b:5a:da:58:94:94:98:89:89:7b:f2:b7:22:
8b:91:8b:3c:c1:e4:7d:16:f9:d2:68:c9:47:e0:c5:e0:86:56:
48:1c:2d:76:28:cc:b7:a8:1b:49:04:43:7d:a9:95:ef:f5:49:
55:73:1c:aa:5a:26:80:0e:56:0b:1f:dc:57:fa:38:41:6e:56:
9e:4e:c6:af:a2:3c:04:94:b3:8d:0d:7d:d4:99:9e:ae:86:2b:
78:bc:df:7e:e4:f6:e8:0a:43:77:46:26:58:f6:92:dc:7d:7c:
94:35:2f:92:c3:ae:af:ab:7a:75:4f:15:ba:41:e1:77:8c:2f:
74:bf:f5:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 11 19:47:59 2025 by rpki-client