Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A33E9C402CE111F0BE8D55BCDAE4EC9C.roa
File: A33E9C402CE111F0BE8D55BCDAE4EC9C.roa (raw, json)
Hash identifier: YeMGWhW4T6w1BsuYl7gjZRCefolM98kf5h7HapwXRuQ=
Subject key identifier: FE:83:44:66:52:28:C1:B8:C8:67:7C:37:7F:43:7F:2A:A7:FD:F3:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01532D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A33E9C402CE111F0BE8D55BCDAE4EC9C.roa
Signing time: Fri 09 May 2025 14:26:47 +0000
ROA not before: Fri 09 May 2025 14:26:41 +0000
ROA not after: Mon 16 Jun 2025 14:26:41 +0000
asID: 202736
IP address blocks: 45.192.113.0/24 maxlen: 24
45.192.114.0/24 maxlen: 24
45.192.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86829 (0x1532d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 14:26:41 2025 GMT
Not After : Jun 16 14:26:41 2025 GMT
Subject: CN=681e10a7-1509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:12:02:df:f2:67:04:dc:1d:95:ec:84:4e:86:
df:3c:9d:df:bb:5f:6b:d0:ae:34:09:3c:f3:35:fa:
cf:6a:c8:f6:ed:0d:f5:a5:f1:b6:4d:53:2a:b3:04:
0e:c3:47:cb:9e:75:d4:b7:01:60:79:85:6e:c8:bd:
25:d3:9f:f7:fc:a6:da:c8:f7:51:39:c5:a1:fb:df:
ee:55:f9:92:48:30:12:27:60:4c:aa:e8:36:fa:2d:
ea:32:3c:62:70:0e:dc:b3:17:9d:b4:86:97:f8:95:
10:91:3f:94:9b:e0:5f:40:a3:d4:30:8e:57:d8:e9:
dd:f8:92:0e:c2:79:d7:c7:bf:a5:6e:aa:9d:be:81:
8e:7b:6f:5a:ab:b7:19:5e:42:e3:30:91:fb:d1:1f:
b8:de:b8:02:fd:ae:6b:b7:c5:d1:c1:68:5e:be:b5:
a3:18:b6:a6:f1:28:4b:34:d4:7c:fc:e7:e6:db:f3:
54:50:b2:b6:cc:7b:9e:f6:97:55:85:9e:94:3b:93:
6b:64:46:95:e7:b1:03:33:1e:42:08:b8:8d:83:1c:
e7:4b:37:44:f9:a1:43:d4:49:a5:49:29:9e:b5:32:
7c:76:72:54:19:19:49:68:77:58:49:04:77:d2:a1:
f1:bc:0c:cd:fd:71:31:b6:7f:50:de:85:98:6c:49:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:83:44:66:52:28:C1:B8:C8:67:7C:37:7F:43:7F:2A:A7:FD:F3:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A33E9C402CE111F0BE8D55BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.113.0-45.192.114.255
45.192.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:8f:5f:55:b6:d6:d1:dd:11:4c:e5:fe:ae:87:02:1a:77:84:
03:d3:19:45:24:61:6f:1d:59:7c:62:24:4e:bb:29:a9:2d:c7:
64:85:07:74:bc:c7:15:14:cd:5c:23:0c:d6:f5:65:84:2d:8d:
26:60:a8:c5:72:28:93:33:6d:58:87:09:0b:4c:d1:25:ad:2a:
66:6f:d3:98:38:fd:c0:2f:6d:3d:36:ec:79:82:e5:01:f9:a1:
46:35:e5:79:81:80:dc:3a:69:f2:fc:46:fd:4a:5f:94:c4:8d:
d5:67:97:14:e2:46:aa:0b:fe:cc:6c:d4:d4:87:7c:ee:eb:4d:
7d:49:5a:67:49:85:f5:4a:8b:f7:e5:f8:51:0c:db:d4:8e:aa:
a8:30:29:12:a2:63:08:fb:16:da:c2:91:00:fa:b1:89:eb:9f:
bf:bf:07:55:8b:15:44:35:36:f6:2e:0d:c0:39:5a:57:6f:40:
3c:2a:41:78:80:89:dd:3b:e6:48:83:44:b8:e4:40:37:8c:7e:
da:29:54:47:00:7a:0f:1a:2e:82:54:a1:a5:21:f1:9d:3c:cf:
ff:19:fb:3a:d9:7d:f5:42:24:b0:d3:34:f9:d7:b4:27:8d:9d:
bc:5a:63:31:96:af:ff:c0:64:13:e7:23:7b:8c:5a:c2:a3:b5:
03:83:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:30:58 2025 by rpki-client