Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E82719C8244811F0BDB912B1DAE4EC9C.roa
File: E82719C8244811F0BDB912B1DAE4EC9C.roa (raw, json)
Hash identifier: CHptWUaCMsgzlYOoxz9RUGrN/hbymlN73G0fLRBM8GA=
Subject key identifier: 0C:F7:0B:6C:9F:B2:6D:40:E9:76:10:F0:B4:87:C9:09:21:77:4E:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FAD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E82719C8244811F0BDB912B1DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 15:53:20 +0000
ROA not before: Mon 28 Apr 2025 15:53:16 +0000
ROA not after: Tue 28 Apr 2026 15:53:16 +0000
asID: 984
IP address blocks: 45.194.144.0/24 maxlen: 24
45.194.145.0/24 maxlen: 24
45.194.146.0/24 maxlen: 24
45.194.147.0/24 maxlen: 24
45.194.148.0/24 maxlen: 24
45.194.149.0/24 maxlen: 24
45.194.150.0/24 maxlen: 24
45.194.151.0/24 maxlen: 24
45.194.152.0/24 maxlen: 24
45.194.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85933 (0x14fad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 15:53:16 2025 GMT
Not After : Apr 28 15:53:16 2026 GMT
Subject: CN=680fa470-9be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:6c:d7:45:60:7d:25:3f:2a:41:07:6c:de:
e4:15:c8:1d:96:64:7e:95:b0:15:a7:be:c1:3d:d6:
0a:32:a2:e9:cd:4b:1c:ef:76:b7:90:b9:f3:03:8b:
74:b9:76:e0:49:29:a7:00:30:4d:bc:e9:1e:ba:8a:
59:d6:2c:69:d7:95:2c:34:a8:c2:54:13:2f:63:82:
a4:52:9c:7c:83:23:25:4e:cb:d4:29:61:69:6b:d2:
0f:2f:99:25:a6:ea:d4:98:c4:b1:35:16:1f:39:46:
51:04:48:5c:02:aa:0c:d6:07:49:5c:4a:83:b1:29:
c2:df:68:21:99:0b:cd:1d:bc:7a:8e:c9:a9:35:b5:
c6:c2:65:3b:58:4c:aa:42:0a:fa:aa:82:d4:9d:5e:
b2:a5:8e:fc:09:b6:27:20:9b:d2:22:15:9d:6e:93:
9c:16:3b:3d:0d:0e:c5:e9:b1:23:af:32:65:1d:f8:
1f:8a:10:e2:6d:5a:38:d3:03:d3:2c:da:0e:2a:0d:
51:1c:60:24:21:19:7d:aa:06:17:7c:a6:29:a7:77:
f3:c4:d8:a5:1a:43:82:8c:5e:f4:3c:16:0b:86:7d:
68:67:6f:c0:eb:23:f7:51:f0:c9:be:d3:ae:09:65:
c9:bd:50:1c:0b:44:82:43:5e:ad:a0:cf:7f:2c:83:
ed:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F7:0B:6C:9F:B2:6D:40:E9:76:10:F0:B4:87:C9:09:21:77:4E:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E82719C8244811F0BDB912B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.144.0-45.194.153.255
Signature Algorithm: sha256WithRSAEncryption
3e:2f:a3:f3:5e:4e:df:0d:63:ce:53:1e:a6:5a:11:b6:d8:49:
b1:69:00:35:dc:af:75:e4:09:95:01:f2:c6:94:6a:42:30:46:
62:6a:60:80:a1:9b:ff:67:bd:aa:17:43:5e:e5:fd:09:38:3a:
a5:6d:da:c0:01:0b:01:ca:ee:6a:b5:30:6c:00:51:4a:67:f3:
77:46:97:46:7f:f1:86:c7:18:d8:1d:9a:80:04:42:c6:c2:2c:
a4:84:2f:a5:f9:de:d2:69:5b:27:99:9f:1f:14:5c:a8:bc:db:
e1:42:76:9f:c2:0c:cb:da:7d:b1:e2:d2:20:b8:04:15:08:b4:
cb:ad:d5:b1:9a:cf:12:9f:99:b0:64:9e:c3:1b:b9:59:62:09:
29:59:78:14:04:6e:bf:24:98:33:5e:31:87:dc:80:17:77:7e:
2e:2c:3f:3a:4d:ca:03:a2:1c:ac:47:d6:78:b1:a4:9a:2f:37:
1b:ab:d6:d9:b6:d1:78:ce:6c:fc:ed:48:c0:c1:eb:45:2d:2b:
11:40:4d:dd:d0:35:9d:de:e9:9e:6b:b8:4f:33:ea:08:d3:29:
e6:25:c5:07:d5:0c:b5:c3:f9:01:db:51:04:32:ec:c3:a7:91:
7b:61:91:d0:c6:e9:55:df:cf:52:4e:71:b6:4d:99:79:a6:ac:
90:f1:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:42:16 2025 by rpki-client