Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C3132CC114C11F09EC9F846762E951A.roa
File: 1C3132CC114C11F09EC9F846762E951A.roa (raw, json)
Hash identifier: W5P65XKcD/0vvrmfq6TXmPV16i5u0tDII4Tdt4ZOqq8=
Subject key identifier: 06:48:3D:72:9E:8D:0E:85:E6:E9:B8:2E:43:29:34:E9:57:3E:94:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C3132CC114C11F09EC9F846762E951A.roa
Signing time: Fri 04 Apr 2025 11:58:24 +0000
ROA not before: Fri 04 Apr 2025 11:58:19 +0000
ROA not after: Thu 08 May 2025 11:58:19 +0000
asID: 200373
IP address blocks: 45.201.10.0/24 maxlen: 24
45.201.11.0/24 maxlen: 24
45.202.76.0/24 maxlen: 24
45.202.77.0/24 maxlen: 24
45.202.78.0/24 maxlen: 24
45.202.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84529 (0x14a31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 4 11:58:19 2025 GMT
Not After : May 8 11:58:19 2025 GMT
Subject: CN=67efc960-f04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:c4:54:1e:d0:ec:97:92:2b:28:7e:3e:48:
28:6f:a3:28:ac:c8:36:a9:b9:17:34:fa:39:de:9c:
c9:92:c9:5e:4d:47:16:c9:c2:36:99:f8:48:bb:79:
ab:10:92:9a:7b:5a:df:be:19:d8:15:f1:9d:8c:53:
28:a3:56:6a:d9:70:2e:f2:47:36:1e:78:a1:5b:ba:
d8:bf:a9:e3:42:79:7a:eb:12:1f:9d:58:34:6b:14:
69:84:4b:99:2a:a3:77:cd:8f:c7:60:7a:b0:85:39:
03:83:ca:b9:02:fc:e0:4b:d6:22:ca:79:e1:6d:49:
fc:50:e0:4e:85:f4:fc:4e:d6:dd:a0:7a:a3:20:5b:
04:e6:36:65:4b:2a:b0:ab:3a:b1:d7:5b:91:01:d6:
aa:56:18:2e:d1:b6:dc:dc:b0:20:37:eb:c7:7e:52:
22:49:68:0c:63:03:df:1e:bf:9b:47:6a:9a:63:f1:
62:61:0c:b9:a6:44:3e:ab:23:24:d6:47:4c:b9:40:
dc:00:e1:4a:c1:42:76:11:40:2a:f1:68:3f:8b:66:
aa:f5:9b:f9:ac:96:50:ad:8f:4e:8b:a5:95:64:71:
a9:62:90:46:91:6e:bc:5b:08:03:f3:2b:6b:06:dc:
f0:95:fb:7e:8a:9d:49:23:67:53:c9:29:6b:8c:e7:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:48:3D:72:9E:8D:0E:85:E6:E9:B8:2E:43:29:34:E9:57:3E:94:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C3132CC114C11F09EC9F846762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.10.0/23
45.202.76.0/22
Signature Algorithm: sha256WithRSAEncryption
85:7d:f4:4b:ae:b2:82:b8:3b:18:7e:ac:1f:9a:ee:14:9d:86:
e2:7d:7c:c6:b5:81:a0:47:9e:ca:5d:56:c7:96:76:88:ab:cb:
a5:18:30:4f:54:62:ac:35:d4:2d:74:bc:80:c5:83:a3:c1:35:
37:26:b7:ca:90:15:60:37:6b:40:29:54:85:48:21:98:76:cf:
b3:ec:82:85:a8:1d:9c:bb:49:db:f4:d3:a6:e5:31:4f:bf:47:
19:b5:3f:41:ab:ed:be:ba:3a:16:fe:e4:75:c7:54:8f:ea:c8:
38:b5:58:66:92:e4:9d:08:76:9f:13:0d:ab:20:37:bb:98:ef:
b3:56:e1:b3:4c:2a:cc:51:bf:7d:3a:0b:a5:54:5d:83:bf:91:
b6:76:b5:cf:cb:d7:31:6a:0b:1f:a0:0a:d0:5e:49:8a:15:75:
a9:6b:fa:fb:b2:d2:6e:d6:74:a2:0b:47:a4:c5:fe:07:39:1d:
df:b0:bc:21:8c:91:cc:69:5a:d9:a5:10:24:99:a1:13:ff:df:
c8:4c:af:dc:7e:fd:76:31:75:da:b6:1a:2c:13:6f:7c:9b:cb:
0f:14:20:18:72:ac:1d:a2:5d:64:0a:9f:c7:75:c9:05:92:1f:
df:5a:16:b9:4b:76:99:4c:5f:4c:53:a7:c5:05:20:93:1a:fd:
86:2c:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:18:01 2025 by rpki-client