Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5105FC82243C11F0B96BB9DDDAE4EC9C.roa
File: 5105FC82243C11F0B96BB9DDDAE4EC9C.roa (raw, json)
Hash identifier: 9dvxPe8MXzAdNDfrfOCaaxiCVBfbxCVRbkHrh7OrhF8=
Subject key identifier: 7B:F1:15:F9:63:E1:69:3C:2F:97:0C:3A:D8:D2:3F:84:A7:96:5F:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5105FC82243C11F0B96BB9DDDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:23:13 +0000
ROA not before: Mon 28 Apr 2025 14:23:08 +0000
ROA not after: Fri 23 May 2025 14:23:08 +0000
asID: 131471
IP address blocks: 45.195.130.0/24 maxlen: 24
45.195.131.0/24 maxlen: 24
45.195.194.0/24 maxlen: 24
45.195.195.0/24 maxlen: 24
45.195.210.0/24 maxlen: 24
45.195.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85868 (0x14f6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 14:23:08 2025 GMT
Not After : May 23 14:23:08 2025 GMT
Subject: CN=680f8f51-e804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:a1:51:82:bf:26:f8:2e:7c:66:05:81:83:
6a:e5:d1:48:e3:f0:4f:4d:b1:57:5b:5d:95:55:f8:
65:bf:bd:4b:13:ee:94:ca:22:e3:4f:6b:e6:fa:6f:
8f:b0:4f:7b:70:94:d6:db:d7:b8:b1:9a:bd:dd:dd:
a8:42:e3:07:55:72:24:6a:b9:4f:d3:d9:9a:8f:b8:
fc:7b:47:da:82:6e:de:26:60:ff:9c:c8:26:4f:e0:
6c:6a:40:2f:66:af:75:45:63:91:59:dd:c6:41:80:
c7:02:04:8f:94:01:a8:2c:e8:3b:a0:88:51:1b:ec:
20:c2:f4:a7:df:43:65:f2:3e:7d:83:3e:33:fb:39:
71:87:da:8f:3d:47:d1:02:96:44:f0:aa:96:34:f0:
2e:9d:09:fc:15:3f:d0:55:03:38:74:18:fb:ee:04:
a6:4a:21:cd:c7:fd:e6:1a:5d:b5:40:b4:d8:3a:30:
6a:93:97:f5:ab:fe:05:af:f5:69:15:93:fb:86:6a:
72:52:fb:7a:45:f1:ff:98:c6:6a:29:30:c8:05:b5:
cc:c7:8b:03:02:fc:92:a8:ca:08:5d:07:36:aa:2b:
ad:18:8b:44:e8:42:b4:bd:cf:3f:d4:26:e9:f0:4f:
2a:14:ea:8e:0a:4b:05:fc:c9:96:d0:9a:4e:93:01:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F1:15:F9:63:E1:69:3C:2F:97:0C:3A:D8:D2:3F:84:A7:96:5F:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5105FC82243C11F0B96BB9DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.130.0/23
45.195.194.0/23
45.195.210.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:d6:c7:67:a5:38:7e:11:08:56:40:03:51:5a:da:ee:5a:0b:
55:e4:b4:15:d3:99:cb:a0:34:66:56:b3:41:ab:32:a8:39:e8:
bc:67:2e:b6:69:04:42:1a:5c:51:5c:b9:9b:48:f7:03:cd:c0:
14:0a:83:53:e4:ce:50:47:a4:fe:46:a5:3a:36:2b:81:a0:24:
8b:96:11:51:c8:6f:5f:3b:a4:24:69:a2:b5:83:f6:66:25:61:
32:7d:78:21:b6:f6:77:4f:50:a5:d2:4a:76:f7:fc:fe:2d:09:
45:40:24:32:b8:b7:b5:83:b6:8b:cc:fd:7a:ce:27:a4:7c:e1:
97:de:dd:37:1f:76:7b:57:5a:43:b6:d3:0f:68:fc:28:fa:81:
1c:48:a0:07:bf:e9:1e:bc:72:c5:1e:be:b9:be:4b:e2:51:2f:
21:7c:04:8d:d8:74:e7:60:10:c3:a1:10:a1:73:e0:8c:3c:b5:
88:e7:f3:9d:98:58:0a:e3:02:8e:ad:13:db:63:cb:e7:2c:8b:
4e:36:cb:35:79:5f:c4:f9:a5:f0:74:3e:a7:9b:2c:93:fe:b2:
4f:df:18:9c:9d:58:cd:d9:fa:73:bd:a8:56:6c:61:7f:cd:ec:
18:12:0b:7e:83:2e:00:ec:74:6f:22:48:4c:54:48:09:e1:e6:
57:14:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:43:36 2025 by rpki-client