Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC964C9A244A11F0879B96BFDAE4EC9C.roa
File: CC964C9A244A11F0879B96BFDAE4EC9C.roa (raw, json)
Hash identifier: Q+t6xxHF7RpbRgrJ9do0uUV2ILslm9NWzwzf+YIv/qE=
Subject key identifier: 32:8A:1F:6A:1C:D8:FA:AB:BD:5F:99:39:AA:39:FA:DC:D0:7A:FD:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC964C9A244A11F0879B96BFDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 16:06:53 +0000
ROA not before: Mon 28 Apr 2025 16:06:49 +0000
ROA not after: Tue 28 Apr 2026 16:06:49 +0000
asID: 984
IP address blocks: 45.194.164.0/24 maxlen: 24
45.194.165.0/24 maxlen: 24
45.194.166.0/24 maxlen: 24
45.194.167.0/24 maxlen: 24
45.194.168.0/24 maxlen: 24
45.194.169.0/24 maxlen: 24
45.194.170.0/24 maxlen: 24
45.194.171.0/24 maxlen: 24
45.194.172.0/24 maxlen: 24
45.194.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85943 (0x14fb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 16:06:49 2025 GMT
Not After : Apr 28 16:06:49 2026 GMT
Subject: CN=680fa79d-ae19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:91:45:9b:32:7e:95:17:18:4e:48:08:b9:
70:d2:e7:74:36:4a:94:39:ce:2d:24:c5:5c:4e:52:
dd:ae:65:fa:b6:0a:78:b2:3b:28:14:c1:da:aa:d6:
9c:1e:c7:71:10:13:80:27:e5:87:59:33:ac:de:3b:
18:26:1a:cf:79:b2:0f:42:b2:be:1f:76:cd:a6:3a:
6e:f1:8a:0b:92:52:6a:0e:b9:69:5c:e6:e2:dc:a9:
1f:f9:1b:93:73:3b:e3:7d:58:2a:b3:32:49:47:86:
ae:1d:20:d5:df:ae:2f:16:41:bb:bc:01:9f:22:71:
b0:b4:58:5d:2b:e4:22:7f:d0:c5:01:29:ee:6f:b7:
ca:b2:79:8e:42:c4:3c:56:38:ba:e6:c5:88:43:ca:
c5:ed:ca:27:c1:2e:e6:4e:8c:de:4b:cd:54:73:f3:
fa:e9:3c:0d:8b:2e:07:3a:1e:78:f5:dd:1b:e8:d2:
97:a5:98:11:09:87:3c:c1:22:ad:8c:37:38:d1:37:
d7:04:f2:20:9d:dc:8c:18:e8:e0:bb:c6:c2:19:ab:
75:27:bc:d3:df:a5:3b:9d:81:53:96:33:f4:85:22:
71:09:14:b1:d5:1d:11:b8:5a:ae:41:1d:99:a8:df:
b6:8b:bc:97:9f:c2:d2:e6:3f:da:27:8a:bf:54:00:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8A:1F:6A:1C:D8:FA:AB:BD:5F:99:39:AA:39:FA:DC:D0:7A:FD:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC964C9A244A11F0879B96BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.164.0-45.194.173.255
Signature Algorithm: sha256WithRSAEncryption
2c:78:4c:c1:da:83:bf:af:5d:b1:e7:83:19:b2:89:02:0a:60:
d8:8a:15:0e:59:fb:89:93:4a:66:df:38:56:f9:9c:16:dd:2d:
a4:36:f9:62:2e:25:54:3e:53:ad:d9:11:8a:6e:72:b4:e8:fb:
ff:f4:f1:1e:fe:35:b5:3e:a6:16:71:8f:e9:44:0a:7c:f3:80:
55:27:2c:b9:38:ea:62:e0:31:48:a0:00:ea:be:9e:45:a2:0d:
87:12:e5:6a:e6:76:5a:95:de:db:fe:b3:71:78:d9:00:11:33:
09:2c:e6:1f:3f:91:86:78:d5:e0:98:8a:b9:d8:9f:30:cc:f0:
5f:2d:e5:54:95:8c:9f:d8:a7:30:cf:f9:ac:54:f9:a1:18:eb:
be:2a:24:58:5c:80:bd:4b:d7:3f:13:09:fc:b7:fe:1e:53:ca:
f4:98:fa:4e:81:a1:d8:59:01:4e:15:c3:af:4e:90:df:b8:94:
ef:11:a9:be:70:5d:68:fe:8a:a7:25:2c:d4:9e:e8:4b:0a:6d:
b4:19:bb:48:75:d5:a2:ab:b4:41:c5:5c:91:e5:76:e2:3a:97:
8c:7f:b6:30:5f:71:01:c1:1b:2d:25:15:ca:fe:a9:ff:a4:fd:
1f:98:75:ba:b9:06:c4:b5:6c:e2:0d:a7:60:75:2c:a8:4a:b6:
b6:b5:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:49:49 2025 by rpki-client