Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D92D269428CE11F085EA0A80DAE4EC9C.roa
File: D92D269428CE11F085EA0A80DAE4EC9C.roa (raw, json)
Hash identifier: tIEtAcnqdZBG60d3IWll35x1KuSoeBOYLtfKQ5lQIr4=
Subject key identifier: 2E:40:1E:C3:B9:CB:DB:89:29:C4:4F:3F:6C:21:92:F5:59:89:FF:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0151E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D92D269428CE11F085EA0A80DAE4EC9C.roa
Signing time: Sun 04 May 2025 10:02:12 +0000
ROA not before: Sun 04 May 2025 10:02:08 +0000
ROA not after: Tue 08 Jul 2025 10:02:08 +0000
asID: 395793
IP address blocks: 45.192.244.0/24 maxlen: 24
45.195.133.0/24 maxlen: 24
45.201.28.0/24 maxlen: 24
45.201.29.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
45.204.147.0/24 maxlen: 24
45.204.148.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86498 (0x151e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 4 10:02:08 2025 GMT
Not After : Jul 8 10:02:08 2025 GMT
Subject: CN=68173b24-9f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:c7:8b:e6:a1:f6:d3:8f:84:c5:d5:13:e5:
7c:0b:00:26:36:fc:f7:78:b1:4d:ed:36:3a:2f:c1:
6f:a3:e5:3c:52:ca:87:fb:48:da:14:11:cb:16:5f:
df:46:56:59:77:42:f7:bd:7d:84:ef:c9:6c:29:e7:
27:1e:bc:5a:89:24:9e:2c:c1:ef:36:01:25:32:d2:
81:80:50:dd:68:3c:5e:5f:97:9d:e0:fc:c2:24:e0:
30:31:3c:38:31:9d:56:ee:8d:f8:be:4e:49:70:9e:
30:45:b0:dc:92:e3:4a:7e:4b:19:3f:bc:bf:2a:fd:
6c:8b:af:66:56:de:62:ec:3a:7d:b2:88:21:54:c9:
ac:76:ff:cd:b6:08:0b:2e:85:dc:22:76:1c:c8:d5:
84:b9:bf:01:b8:56:ce:6a:e6:78:72:9f:00:aa:72:
1f:26:41:d4:a6:a4:db:73:6b:ba:30:32:e6:24:5c:
6e:14:12:9b:96:72:b9:60:41:3f:b6:b2:56:c7:97:
c6:ea:c4:f2:37:47:d7:e9:fe:d9:63:ff:73:95:26:
ce:2b:53:34:13:c2:de:99:21:39:43:b5:f1:6b:ba:
79:85:e1:16:13:1e:0f:90:58:85:e0:fd:3b:65:0f:
7a:2e:5a:a7:5c:7a:4a:b3:ba:0b:94:2a:e2:55:79:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:40:1E:C3:B9:CB:DB:89:29:C4:4F:3F:6C:21:92:F5:59:89:FF:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D92D269428CE11F085EA0A80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.244.0/24
45.195.133.0/24
45.201.28.0-45.201.32.255
45.204.147.0-45.204.151.255
Signature Algorithm: sha256WithRSAEncryption
af:bb:ae:24:dd:f5:44:a1:e7:39:3d:0f:a3:bd:af:4e:1d:66:
73:86:7a:3b:15:8f:94:e1:54:ca:e7:57:0d:81:91:68:0a:af:
84:65:ab:b1:24:42:39:d7:18:5b:24:91:96:3f:65:ef:11:33:
84:f9:65:e3:c3:55:e9:bd:8b:5f:57:7f:c7:bf:3e:3f:49:fb:
44:53:8c:26:27:5a:97:60:9b:70:bc:3e:1c:59:64:c1:3b:8d:
16:13:c3:68:9f:93:7c:56:59:f4:78:6d:7e:26:8c:b0:f9:80:
b1:6b:ff:35:9b:54:b6:cf:b2:6e:89:fb:83:84:23:94:4a:45:
37:7f:fa:9c:d8:f9:e0:06:03:de:1f:dc:08:d5:a2:39:cc:00:
43:38:91:89:b0:21:ba:35:01:00:d0:12:8f:bc:da:22:59:43:
47:80:02:43:44:84:76:dc:7f:e6:0d:2e:30:01:4f:16:8b:35:
a1:5a:e7:a5:d0:87:12:c7:e8:81:7a:38:6d:28:b4:52:e7:61:
a3:e4:f5:d1:5c:e4:de:b5:c6:30:03:82:31:b4:99:32:18:83:
bd:ce:a8:52:27:a7:65:7a:b2:d6:52:0d:63:7f:0c:fb:4e:bc:
43:b3:75:1a:44:7f:32:d3:09:d1:85:d1:3c:f4:6b:3b:c0:85:
4c:e6:8f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:31:50 2025 by rpki-client