Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE27BBA8267611F09DBCA9CEDAE4EC9C.roa
File: AE27BBA8267611F09DBCA9CEDAE4EC9C.roa (raw, json)
Hash identifier: nGQLnUgL3WL5OYmnGVslWIND+Sj6K+DhDkg7SLZzI6o=
Subject key identifier: 0B:FE:97:C6:48:D1:01:B4:85:D4:C0:55:A4:CD:4D:D5:04:7E:7D:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01513E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE27BBA8267611F09DBCA9CEDAE4EC9C.roa
Signing time: Thu 01 May 2025 10:26:02 +0000
ROA not before: Thu 01 May 2025 10:25:57 +0000
ROA not after: Fri 28 Apr 2028 10:25:57 +0000
asID: 17561
IP address blocks: 45.203.83.0/24 maxlen: 24
45.203.84.0/24 maxlen: 24
45.203.85.0/24 maxlen: 24
45.203.86.0/24 maxlen: 24
45.203.87.0/24 maxlen: 24
45.203.88.0/24 maxlen: 24
45.203.89.0/24 maxlen: 24
45.203.90.0/24 maxlen: 24
45.203.91.0/24 maxlen: 24
45.203.92.0/24 maxlen: 24
45.203.93.0/24 maxlen: 24
45.203.94.0/24 maxlen: 24
45.203.95.0/24 maxlen: 24
45.203.96.0/24 maxlen: 24
45.203.97.0/24 maxlen: 24
45.203.98.0/24 maxlen: 24
45.203.99.0/24 maxlen: 24
45.203.100.0/24 maxlen: 24
45.203.101.0/24 maxlen: 24
45.203.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86334 (0x1513e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 10:25:57 2025 GMT
Not After : Apr 28 10:25:57 2028 GMT
Subject: CN=68134c3a-3b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:2f:a1:3e:64:f8:4f:b6:58:f7:9c:4a:45:
de:f1:a2:be:06:33:80:c6:74:61:a9:f7:ea:cb:22:
c1:90:cf:cf:4a:89:d8:dd:0c:66:35:5f:43:9c:91:
f6:45:11:8d:69:ba:da:d6:f7:4e:5e:21:22:1c:7f:
74:7d:82:8f:99:69:43:3f:93:bc:36:f3:61:06:d2:
70:8e:3c:52:26:6a:b8:54:66:11:cf:8b:b7:f5:a2:
bb:a3:33:7e:75:35:50:cf:6a:84:f3:c1:ee:40:92:
70:ef:da:f3:7d:69:d6:12:da:ef:78:22:83:c2:6a:
0b:6c:aa:cd:27:0b:86:17:31:60:c6:f5:29:63:1b:
04:a0:62:26:62:5a:29:0e:ae:56:d3:8d:32:0e:25:
aa:5f:27:6d:80:8f:9d:d4:b1:a9:4e:10:f0:68:95:
84:22:12:27:84:d6:9c:28:3f:be:68:9b:61:29:6a:
91:45:06:16:a9:65:c5:8d:bf:3e:a3:55:1c:17:cd:
7d:3f:da:31:1d:d3:52:3b:97:aa:7f:e0:ca:fc:be:
54:c7:bc:a1:a8:d5:42:8c:7f:b8:98:9c:15:55:23:
7f:07:84:54:b9:02:d3:12:0a:e1:b8:00:64:07:3e:
c2:a1:8c:18:f7:67:c7:c9:e3:aa:93:58:60:9a:17:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FE:97:C6:48:D1:01:B4:85:D4:C0:55:A4:CD:4D:D5:04:7E:7D:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE27BBA8267611F09DBCA9CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.83.0-45.203.102.255
Signature Algorithm: sha256WithRSAEncryption
2b:a9:ca:7e:8e:71:1c:67:9b:9d:1e:9e:56:99:82:92:0d:0f:
a4:f1:17:65:fb:c0:7e:4a:8b:61:a6:08:2b:e2:78:57:3a:78:
48:85:38:04:a7:0b:44:e4:ab:93:1c:71:5c:87:9a:4c:c8:73:
92:d7:a5:dc:01:24:7e:8e:ae:23:70:67:d7:dc:87:f7:0e:37:
ee:87:4a:ae:9e:a2:2a:88:e9:39:53:76:ff:b3:50:60:82:73:
5f:84:1f:3c:95:25:54:cf:82:3a:bd:f6:44:6c:f9:d8:e7:d7:
76:23:b5:9e:b3:25:fa:28:e1:74:af:33:a8:28:e7:01:e2:05:
3f:d7:65:93:fc:c5:c2:ca:65:78:f9:e5:65:c7:be:29:a1:0d:
54:a1:84:65:8d:1b:dc:55:99:d2:d4:39:3c:ea:0f:50:12:7c:
7b:75:a8:a9:0a:87:6c:ca:c1:29:fd:0b:96:34:55:44:3e:12:
d1:20:44:9a:40:f5:5a:5b:e4:50:33:51:23:6f:12:8d:b3:b0:
ae:7a:59:4d:c2:13:71:33:7b:e3:5b:d0:cc:d7:8d:6e:48:82:
f4:e7:d4:7e:a0:ed:d9:ef:80:30:66:2e:3a:ab:ae:09:e7:ef:
96:9a:cd:2a:54:1d:13:3c:90:b8:c7:98:1a:5d:86:e4:b9:7f:
2f:7d:45:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:05:57 2025 by rpki-client