Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53FEF9360F9A11F0B7C8FA86762E951A.roa
File: 53FEF9360F9A11F0B7C8FA86762E951A.roa (raw, json)
Hash identifier: w8JybJfyAPOc8AKKaXd6iRwQhLpacmbZaBzGASAv5rA=
Subject key identifier: D3:26:66:4A:BD:52:96:63:D5:E7:97:6D:0B:0C:DC:34:63:A6:9E:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01495F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53FEF9360F9A11F0B7C8FA86762E951A.roa
Signing time: Wed 02 Apr 2025 08:13:16 +0000
ROA not before: Wed 02 Apr 2025 08:13:12 +0000
ROA not after: Fri 09 May 2025 08:13:12 +0000
asID: 141883
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84319 (0x1495f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 08:13:12 2025 GMT
Not After : May 9 08:13:12 2025 GMT
Subject: CN=67ecf19c-75cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:6d:b4:57:9d:d5:ea:1a:43:8e:a9:ae:a4:
af:42:66:3d:cf:80:36:7e:37:10:3a:14:d1:ad:c8:
54:61:ea:62:75:ab:d5:a9:f6:09:b4:fe:e7:96:ea:
8c:0e:7c:b6:3d:ba:2a:dd:e9:0c:44:da:b8:94:0c:
e0:e3:5c:42:6d:7c:8d:b4:6e:7a:6c:61:50:b0:d5:
70:7f:8f:51:3e:89:06:61:1e:fa:64:88:e7:95:a3:
34:24:05:c7:90:5e:45:91:74:c3:bd:22:e4:4e:10:
3d:f2:dc:bc:e6:d3:38:d9:b2:47:0c:5b:6f:7f:1d:
b3:99:81:68:1a:5d:13:7b:9a:6d:4e:80:1b:4a:69:
ad:a5:74:8e:7e:78:57:4f:48:95:34:97:ed:1c:26:
07:14:02:f4:34:a4:14:d1:f5:5e:f2:4d:44:93:3b:
49:4c:3f:89:1b:c6:f7:c0:66:12:18:53:a9:ec:72:
26:6e:19:0a:b2:11:4a:86:96:18:01:ad:c8:eb:0c:
49:92:56:b5:44:0e:9c:54:77:ef:98:8d:2e:8f:44:
72:70:a1:ae:a0:82:56:32:7e:20:7c:63:8d:90:7e:
3e:4f:10:2b:4a:26:f6:cc:79:a6:9d:d1:28:fa:1a:
b4:40:b5:6c:22:be:e6:f3:e4:da:51:3c:77:f3:2a:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:26:66:4A:BD:52:96:63:D5:E7:97:6D:0B:0C:DC:34:63:A6:9E:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53FEF9360F9A11F0B7C8FA86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:94:58:e9:f4:b1:73:a5:88:a1:63:0f:2b:7f:5c:2d:c8:0a:
c8:63:6c:34:f8:32:d0:7f:8b:0e:9f:42:50:17:fd:36:59:f1:
be:ea:2f:81:7e:aa:8e:19:0a:50:66:54:01:e9:06:74:ef:00:
2b:0c:b1:ce:5b:59:69:d4:39:16:d3:13:15:cf:f7:bc:a9:ac:
34:f4:94:4b:7c:34:92:ef:cd:2d:4d:70:15:89:bb:9c:23:aa:
a3:89:16:06:d8:59:5e:54:b6:5a:e7:d8:f1:83:ac:89:a9:6d:
58:48:84:2b:04:53:93:3e:08:23:4b:48:6e:9d:5d:7a:db:40:
10:69:a9:fa:9c:e6:a8:65:98:0a:2d:c9:be:92:0b:40:e2:8f:
86:43:c4:d0:df:ad:dc:fe:c9:c0:b4:52:e0:b3:cb:95:8f:bd:
b7:99:84:a5:d2:b6:bc:62:10:6b:21:de:76:62:7f:11:98:e4:
63:c7:fd:f6:f6:f1:2b:86:83:ae:f9:64:a2:f7:92:28:b6:ea:
bc:5b:b3:27:45:11:18:e9:df:30:b8:e7:56:b9:a0:1f:cf:26:
37:b4:b2:66:d2:a9:2a:1f:3d:08:89:49:60:c8:29:e4:c0:4a:
f6:c2:75:dc:48:10:77:75:93:ed:d5:1d:ee:9a:de:5c:af:db:
9f:c4:15:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:12:38 2025 by rpki-client