Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E8AF246273911F0B8C11DE7DAE4EC9C.roa
File: 9E8AF246273911F0B8C11DE7DAE4EC9C.roa (raw, json)
Hash identifier: tjsUvNdCHfDo7G0tktqjliJlJntdT/vEPcybTUWm3+s=
Subject key identifier: 41:48:A7:9A:4A:27:3F:5D:28:64:5E:FA:5A:2C:AA:37:7D:7F:8A:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01516C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E8AF246273911F0B8C11DE7DAE4EC9C.roa
Signing time: Fri 02 May 2025 09:41:28 +0000
ROA not before: Fri 02 May 2025 09:41:23 +0000
ROA not after: Sun 15 Jun 2025 09:41:23 +0000
asID: 396356
IP address blocks: 45.194.44.0/24 maxlen: 24
45.203.165.0/24 maxlen: 24
45.203.166.0/23 maxlen: 24
45.203.168.0/21 maxlen: 24
45.203.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86380 (0x1516c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 09:41:23 2025 GMT
Not After : Jun 15 09:41:23 2025 GMT
Subject: CN=68149348-1f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:a7:70:3d:59:45:eb:9d:b2:1d:11:a9:bf:
40:48:15:67:98:5c:ec:f7:19:98:61:9f:02:21:5b:
59:9f:e5:f1:37:ea:2f:96:bd:5e:ba:a5:4d:b3:05:
12:89:0b:fe:85:45:a1:71:6a:f9:3a:7b:46:43:36:
32:3c:81:a4:34:7d:54:2f:a8:f4:e1:2d:5a:69:5c:
57:b1:e6:5e:39:c7:02:93:62:94:97:dc:93:12:8e:
da:75:92:6e:f3:dc:5c:0c:b5:74:74:e0:df:a4:87:
68:76:da:8c:1e:5f:4c:da:87:35:e5:a3:ee:1e:9a:
14:87:3f:89:f4:92:81:6e:d3:94:b3:4a:ba:81:cf:
2a:de:ac:08:f9:91:c8:a3:25:97:09:9e:9e:09:2c:
9e:d5:d6:48:45:1f:6b:98:b7:db:9e:42:f4:70:36:
98:1c:43:61:53:11:3b:7c:73:d3:83:97:e4:5f:b0:
73:5b:68:ca:2f:1b:03:4e:91:af:4c:f2:f7:91:cb:
58:05:60:4a:d5:12:ce:26:c0:87:a3:4f:9e:d0:77:
32:21:fa:b7:2c:ad:b4:da:f1:95:39:4d:8e:b8:2c:
ec:54:c1:e9:60:6b:95:ba:fd:9b:51:fd:f5:32:9f:
8b:2b:94:c1:27:a8:f0:d7:6d:a2:36:a4:9c:f2:2a:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:A7:9A:4A:27:3F:5D:28:64:5E:FA:5A:2C:AA:37:7D:7F:8A:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E8AF246273911F0B8C11DE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.44.0/24
45.203.165.0-45.203.191.255
Signature Algorithm: sha256WithRSAEncryption
4d:fb:1d:55:d6:1b:ad:51:61:6b:88:e3:70:c5:e8:02:c6:87:
67:16:a3:da:29:c8:c5:16:6c:bc:8e:fc:ba:83:06:57:48:d6:
cf:e9:b2:4d:d9:1e:40:77:6d:6e:e0:33:e5:6e:a4:ab:ca:23:
ec:2c:4f:87:65:2b:64:b9:2f:ac:2f:ae:ab:20:99:6e:76:25:
b7:a9:04:da:64:27:a2:e6:c7:4b:b7:94:9d:00:7b:e5:c1:72:
52:c2:da:27:14:a4:56:4f:ec:3f:1d:58:fd:66:ef:40:d9:09:
68:37:17:19:0a:70:a2:d6:4c:40:ce:c4:93:ae:b1:d5:95:bd:
27:6b:d4:1a:b9:d3:09:dd:86:c0:03:90:45:05:2c:47:21:a9:
5a:a4:00:51:72:00:b7:31:de:7e:62:83:0b:b9:f6:a6:9b:05:
43:34:e1:78:40:43:39:2a:31:32:da:04:cb:6b:4d:91:e4:9d:
28:1a:85:47:dd:e8:b7:db:08:00:fe:85:ba:70:b2:dc:95:1c:
4e:e4:5f:41:c4:33:6c:f0:04:87:50:1b:ec:d7:77:59:e4:a5:
fa:af:15:44:86:22:3f:cb:75:18:d7:74:89:e2:12:11:b7:d6:
56:92:83:1d:99:f8:de:5b:25:75:38:4b:00:31:ec:d4:71:b7:
45:9c:8a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:32:49 2025 by rpki-client