Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/537D48E413CF11F08134F36F762E951A.roa
File: 537D48E413CF11F08134F36F762E951A.roa (raw, json)
Hash identifier: FEA0VB9hj26htn+2Ml63wSB/11COaTq7qyeN6OCoXS4=
Subject key identifier: 86:2E:58:0F:4E:8E:51:13:D9:53:18:17:B0:84:4C:A4:FE:62:C8:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/537D48E413CF11F08134F36F762E951A.roa
Signing time: Mon 07 Apr 2025 16:42:43 +0000
ROA not before: Mon 07 Apr 2025 16:42:39 +0000
ROA not after: Fri 16 May 2025 16:42:39 +0000
asID: 142032
IP address blocks: 45.192.96.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84630 (0x14a96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 16:42:39 2025 GMT
Not After : May 16 16:42:39 2025 GMT
Subject: CN=67f40083-32b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:f6:59:83:9e:38:94:48:95:1e:43:3d:63:
4a:4b:4c:02:7c:70:47:ab:fa:be:66:74:57:0a:f2:
e6:44:35:87:11:1c:5b:ae:37:d9:db:1d:cb:da:9e:
b9:b2:0e:63:8e:31:ef:78:c0:6e:1c:fe:a8:e6:24:
00:40:1e:79:e2:e3:26:a1:5e:aa:d2:43:f1:4e:a8:
c9:bd:e9:2b:f7:bc:14:6a:41:c3:f2:31:f9:e5:20:
39:aa:6b:f4:a4:bc:39:8d:72:3c:77:15:86:fc:57:
b4:b9:a6:b1:e3:d9:ab:68:4d:ac:9c:c7:79:aa:74:
f7:9c:8a:37:67:b3:c3:3a:15:76:9b:1b:9e:b0:b2:
f2:5f:10:34:b3:a0:58:a8:ea:62:7c:76:f6:7c:9d:
fb:bf:c1:7f:dc:e9:92:f4:0b:a4:1c:1a:27:c7:89:
ba:d8:f3:07:37:c5:ae:30:76:1b:d1:b9:9f:1c:46:
a6:0e:8e:b4:92:41:0c:a0:10:4d:dd:a0:db:e7:e6:
49:37:9c:e1:9d:04:19:15:b1:50:d9:bd:a3:47:37:
bd:d3:b2:ab:72:9a:69:06:16:b6:c8:40:8f:34:59:
b9:ae:07:1c:65:fb:fc:93:4a:d0:2f:9f:61:a3:b6:
0c:72:e3:71:ac:a7:22:74:ef:cb:c7:c2:32:43:cd:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2E:58:0F:4E:8E:51:13:D9:53:18:17:B0:84:4C:A4:FE:62:C8:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/537D48E413CF11F08134F36F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
63:67:9a:13:d0:fb:cc:5d:c7:e4:72:f5:30:24:0b:09:d9:b3:
33:85:f7:85:05:57:b5:8a:63:c7:22:ca:c9:c8:15:22:31:2c:
24:01:35:93:12:78:e7:b9:1a:b2:22:f3:3c:0e:ae:90:96:63:
fd:f6:a9:2f:d4:92:bb:aa:14:b9:9d:07:78:7f:3f:77:fe:e2:
4d:06:30:13:be:cc:3e:0c:c4:64:78:3d:1f:31:b9:f9:1e:4e:
03:03:e4:51:d5:d7:db:b4:dd:8d:95:9e:8b:f8:28:33:a8:fd:
5b:f1:a7:d0:a0:00:9d:5f:77:ad:e5:6c:58:a0:6a:9a:78:fb:
37:9e:c9:7b:06:97:0c:c8:24:d4:22:41:c4:51:6b:f1:d6:7d:
58:92:40:7c:df:3b:b9:ea:ef:a8:bd:a0:a1:ff:2f:2d:d2:50:
37:fc:83:23:b1:56:cd:c8:28:ed:9c:00:58:09:9a:50:ab:a7:
51:11:02:54:a9:7e:9d:28:f3:fe:85:15:33:6f:7b:fb:eb:d0:
2b:5d:35:b3:1c:8e:49:58:c2:06:35:59:8b:78:59:6b:21:7d:
ad:ab:6e:14:67:5f:ac:c0:20:42:5a:b9:20:62:df:fd:8d:46:
0c:ae:ad:ce:a2:68:32:25:72:84:b2:ed:63:ba:48:e0:19:a9:
62:51:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:18:19 2025 by rpki-client