Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CA32B221C4D11F0ABCA3BCDDAE4EC9C.roa
File: 7CA32B221C4D11F0ABCA3BCDDAE4EC9C.roa (raw, json)
Hash identifier: BplK6BdcSe0PCNBvwqvEALOCxmIRHF5kcGjdSOs6ND8=
Subject key identifier: CD:61:01:FC:8E:13:AA:C9:8F:F9:61:4E:16:E3:45:7A:05:0A:74:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014CC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CA32B221C4D11F0ABCA3BCDDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 12:05:58 +0000
ROA not before: Fri 18 Apr 2025 12:05:54 +0000
ROA not after: Thu 01 Apr 2027 12:05:54 +0000
asID: 132585
IP address blocks: 45.195.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85192 (0x14cc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 12:05:54 2025 GMT
Not After : Apr 1 12:05:54 2027 GMT
Subject: CN=68024026-8b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:62:22:49:26:9f:09:02:ed:ee:b1:d7:a5:
d7:dd:04:32:9d:bb:f7:b3:ec:f0:34:b9:b5:89:d8:
92:c7:36:c9:7b:66:07:20:cb:bd:78:75:e1:31:89:
24:d3:e9:76:94:92:ea:50:b9:1d:00:20:8e:a2:c3:
cf:ed:65:d1:26:f3:74:b5:d9:f3:69:51:1a:ec:4e:
f5:d2:a3:a6:d4:7a:57:82:fc:c0:4d:ec:15:55:d3:
37:88:0d:3d:c4:27:b0:a6:6b:85:f1:5c:2e:1e:6e:
ac:7d:7c:75:45:6f:77:3a:a1:7b:08:c2:7b:0d:8c:
b4:c4:9d:dc:6c:51:9f:4d:6f:a0:67:5b:79:0a:7d:
b1:b7:bb:dd:99:6b:e5:68:62:c4:cf:c4:68:ab:bb:
f9:bc:cf:4c:fa:c9:41:aa:5e:7f:05:db:fe:f9:06:
f3:92:d5:f6:40:56:37:ab:d5:33:6d:f7:c5:0a:ee:
e6:60:ba:d0:ab:19:b4:24:05:83:8e:51:13:0b:6f:
47:84:1a:e3:5c:a1:38:c6:67:3e:ff:2a:d1:f2:89:
f8:98:e4:73:d1:39:c5:f9:f7:60:5a:8a:8d:c3:f7:
35:04:a9:77:ce:c2:2c:34:ff:1d:f4:7f:63:a9:3e:
bb:7b:30:fd:ab:d0:ff:c5:5e:5b:39:8f:44:6a:2f:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:61:01:FC:8E:13:AA:C9:8F:F9:61:4E:16:E3:45:7A:05:0A:74:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CA32B221C4D11F0ABCA3BCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.58.0/23
Signature Algorithm: sha256WithRSAEncryption
84:35:db:1c:25:29:1b:64:62:7a:38:50:65:79:4d:d5:60:f2:
b9:07:53:c2:60:86:39:ea:88:d1:03:79:94:3e:0a:b6:01:68:
bc:70:25:68:6c:a9:bd:6a:33:78:5f:59:d5:4a:12:3e:ee:a1:
da:10:0b:3f:0d:6c:eb:78:95:bf:1e:6d:70:2d:fd:23:c7:b6:
df:a8:ed:3b:04:83:45:98:dc:ab:56:25:c2:e6:51:12:74:ea:
4e:d2:1d:1a:eb:fa:6d:1d:c2:62:b5:25:55:4e:b4:09:39:85:
d0:17:36:6a:d9:fe:20:75:88:84:f2:3f:ea:b9:eb:49:1c:ef:
e7:87:48:e3:0c:97:fd:99:7f:fb:58:9f:d5:69:10:0f:10:94:
5f:73:00:c6:77:96:8a:1d:5a:2e:1a:c3:df:14:2f:41:ee:8d:
00:9b:2f:53:c3:fc:95:64:66:c8:35:76:8f:00:73:3c:0f:4a:
79:dd:fb:44:89:70:eb:58:28:82:a3:3d:b7:82:2b:fa:17:cb:
05:e5:8d:1b:63:f9:9d:2f:d5:68:ed:4b:e4:da:c4:07:54:f2:
a9:52:fe:10:6d:78:bc:58:5f:18:2a:02:9e:63:bd:44:b8:51:
f6:48:86:92:f8:28:c6:f4:38:72:6e:a6:21:8a:a7:e9:92:89:
2f:1a:d7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:42 2025 by rpki-client