Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B3F155A267411F0A6F99CBEDAE4EC9C.roa
File: 5B3F155A267411F0A6F99CBEDAE4EC9C.roa (raw, json)
Hash identifier: cn0YpqqpLylJ6W/GRwHEGjWfhVDRhzDaCSF3FPZpKIE=
Subject key identifier: C1:61:5F:78:2E:C8:23:CF:B4:32:26:7E:E8:E0:3E:A0:AF:90:77:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01513A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B3F155A267411F0A6F99CBEDAE4EC9C.roa
Signing time: Thu 01 May 2025 10:09:24 +0000
ROA not before: Thu 01 May 2025 10:09:19 +0000
ROA not after: Wed 26 Apr 2028 10:09:19 +0000
asID: 17561
IP address blocks: 45.203.48.0/24 maxlen: 24
45.203.49.0/24 maxlen: 24
45.203.50.0/24 maxlen: 24
45.203.51.0/24 maxlen: 24
45.203.52.0/24 maxlen: 24
45.203.53.0/24 maxlen: 24
45.203.54.0/24 maxlen: 24
45.203.55.0/24 maxlen: 24
45.203.58.0/24 maxlen: 24
45.203.60.0/24 maxlen: 24
45.203.61.0/24 maxlen: 24
45.203.62.0/24 maxlen: 24
45.203.63.0/24 maxlen: 24
45.204.24.0/24 maxlen: 24
45.204.26.0/24 maxlen: 24
45.204.28.0/24 maxlen: 24
45.204.30.0/24 maxlen: 24
45.204.72.0/24 maxlen: 24
45.204.74.0/24 maxlen: 24
45.204.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86330 (0x1513a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 10:09:19 2025 GMT
Not After : Apr 26 10:09:19 2028 GMT
Subject: CN=68134854-329e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:54:c4:f3:07:f8:bb:f6:38:a4:6f:96:52:
d8:fc:be:77:c3:8a:14:82:b5:ba:fd:16:ba:2d:39:
f8:37:a6:d2:09:af:aa:96:c2:2a:8f:da:02:ee:2f:
5b:6a:e0:ed:61:0c:4b:b4:8b:1c:82:5b:d5:95:34:
2e:6e:40:e1:0c:73:df:91:ab:77:2e:5a:a1:0a:1e:
e3:06:7b:b1:60:8f:3d:77:7a:1c:36:26:94:1d:79:
21:f4:24:5d:69:08:fd:61:cb:49:75:1f:78:36:96:
13:e4:bf:83:5d:e1:53:5c:18:1a:f7:c1:89:68:78:
a8:37:b1:c4:93:68:46:c7:27:47:75:32:1a:0b:bf:
ba:e8:cc:d7:43:82:f2:6f:ae:6f:ae:eb:1b:2a:22:
86:b8:bb:fb:41:bc:cc:37:79:87:d0:c1:7a:8f:8a:
fb:b5:d3:cb:fc:a1:b4:20:cc:50:3c:82:af:7d:4e:
65:cf:3c:ec:ab:0f:47:36:d4:14:06:b8:64:35:13:
08:56:b4:62:7e:43:5f:b3:3d:a1:58:48:1d:83:c1:
3b:11:2a:72:bf:c2:ea:ac:d7:c2:24:3c:27:45:37:
dd:b9:1b:a7:4b:5c:98:d6:0d:56:b1:67:32:bd:f2:
79:c3:4d:5e:fa:ab:98:5c:85:27:cc:8a:d3:9a:bb:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:5F:78:2E:C8:23:CF:B4:32:26:7E:E8:E0:3E:A0:AF:90:77:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B3F155A267411F0A6F99CBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.48.0/21
45.203.58.0/24
45.203.60.0/22
45.204.24.0/24
45.204.26.0/24
45.204.28.0/24
45.204.30.0/24
45.204.72.0/24
45.204.74.0/24
45.204.76.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:36:4d:b1:9a:f7:d2:f8:1a:5b:bb:ae:77:74:f2:15:64:c6:
45:21:7d:5f:dd:ed:e3:e7:55:b0:fd:b7:2c:43:4a:a6:94:eb:
07:ed:ad:aa:6b:6b:ab:18:a5:c2:90:bf:e1:72:59:2d:3b:a5:
ee:69:c8:71:82:8b:f4:b7:b9:92:51:20:35:45:4d:97:1b:c1:
eb:30:3d:bd:9d:72:bb:fd:df:28:46:7a:ff:d8:67:c5:86:f8:
2d:bc:33:47:38:4f:f1:f3:eb:d7:a1:bd:51:9b:da:2f:cf:c2:
4a:e1:36:57:76:19:d6:a9:14:92:fb:6a:58:8d:f2:ea:2d:a3:
10:31:23:63:a2:e5:72:9f:1c:18:d4:c9:f8:54:96:03:14:16:
db:31:9f:2d:1b:ef:e5:e6:21:27:cf:3e:55:0c:a4:d6:ae:18:
a6:72:c3:45:17:99:42:64:2e:e1:98:42:d1:c9:e8:19:c4:bb:
32:51:4a:25:a3:8b:b2:8b:df:b3:f0:05:b5:90:8d:80:61:40:
f1:ac:6c:47:d4:80:01:4d:b3:53:cc:d3:ac:cd:82:54:37:df:
3d:89:e8:6c:51:3e:f9:12:39:ce:9c:19:7a:5c:f7:29:15:b2:
d4:54:47:d4:ea:d0:53:2d:f0:50:eb:ba:5e:1c:1c:0d:25:9f:
eb:b0:6a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:54:33 2025 by rpki-client