Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FBABAAA114E11F09E535957762E951A.roa
File: 7FBABAAA114E11F09E535957762E951A.roa (raw, json)
Hash identifier: M2Mi5u46dndKQLetji8uzmK82d9FzE9d7kxeB8od2lg=
Subject key identifier: DF:89:91:33:28:D5:5E:D0:4C:72:72:E4:FE:6B:46:FA:93:16:67:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A35
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FBABAAA114E11F09E535957762E951A.roa
Signing time: Fri 04 Apr 2025 12:15:30 +0000
ROA not before: Fri 04 Apr 2025 12:15:25 +0000
ROA not after: Thu 15 May 2025 12:15:25 +0000
asID: 396356
IP address blocks: 45.203.165.0/24 maxlen: 24
45.203.166.0/23 maxlen: 24
45.203.168.0/21 maxlen: 24
45.203.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84533 (0x14a35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 4 12:15:25 2025 GMT
Not After : May 15 12:15:25 2025 GMT
Subject: CN=67efcd62-3811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:54:05:85:99:8f:c6:e0:a9:ac:f2:a5:8d:
f7:bb:1f:bd:11:73:b8:fe:66:a5:06:8b:0f:4c:3e:
48:df:36:c1:8c:00:24:3b:a4:0b:4b:fb:84:86:29:
d6:15:4a:49:81:3d:f5:a0:57:02:2f:bd:fa:c7:3a:
94:c4:3d:57:78:31:bf:c6:ce:8a:0b:cb:fc:5f:81:
c2:d3:7b:78:b9:c8:d3:97:10:c7:b8:f3:de:14:9c:
bb:52:dc:c4:eb:93:24:41:3a:f9:50:e1:07:03:1f:
58:7d:7c:7c:b6:41:62:37:26:be:09:5b:93:44:37:
fc:17:6f:24:3c:9a:4e:ca:bf:32:e6:a7:e0:e2:ba:
8b:15:7b:c0:4d:67:4d:32:ea:29:a9:ce:7d:9d:b1:
34:e3:cf:03:d3:f2:b9:08:07:65:ac:37:83:d3:12:
fe:e7:e5:22:6c:ec:8b:34:24:6f:97:03:63:2f:c9:
ae:e7:62:a5:1f:15:3b:c9:2f:67:86:2b:5c:b2:54:
3c:30:b7:65:35:5e:5a:82:6b:fd:22:cd:27:61:14:
7c:02:3e:16:34:d8:9c:5e:be:82:b3:f8:d1:1d:66:
8d:63:26:a6:7e:99:ce:b8:62:72:8d:d8:c1:d4:20:
fb:e8:c3:ce:be:cc:0e:07:7b:d1:6a:63:c6:8d:55:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:89:91:33:28:D5:5E:D0:4C:72:72:E4:FE:6B:46:FA:93:16:67:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FBABAAA114E11F09E535957762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.165.0-45.203.191.255
Signature Algorithm: sha256WithRSAEncryption
1e:a4:9f:3f:77:37:c2:b5:76:c1:8a:b6:76:26:6a:d1:52:d3:
d1:4a:b7:36:93:6e:ee:a4:6a:3e:e0:b9:60:0e:ce:f1:06:a2:
57:82:e7:68:fa:08:ae:88:dd:8c:81:6f:59:60:55:8f:19:55:
4e:03:a2:ba:03:8a:14:e2:2d:d4:9f:09:2a:79:2f:9f:4f:df:
fe:88:0b:80:8f:87:9b:ec:d8:f9:29:eb:ef:90:ea:27:97:86:
d8:eb:d2:dc:7c:40:b1:1b:a2:3a:0d:3b:4c:21:a5:aa:ab:fb:
55:b3:0d:e2:5b:d7:c2:3b:22:0a:43:53:5a:9e:ee:f6:51:35:
f8:39:76:e1:9f:48:84:dc:df:31:28:35:57:f0:dc:67:4a:ce:
82:c1:cb:b5:5b:f2:82:91:14:98:3d:60:f0:7d:60:7d:c2:d3:
8a:53:07:89:a8:77:77:99:e9:b3:e0:3e:6c:16:cf:97:1b:68:
3f:e8:a0:70:35:52:21:7f:ce:aa:82:32:ea:2d:7a:bc:7f:57:
de:ec:69:d3:46:8d:f1:85:2f:5e:ef:38:57:9a:c5:13:21:d9:
c7:e2:06:d0:6d:35:33:bd:fb:d1:cb:ba:3b:2d:6b:81:dd:8c:
0f:c2:bd:62:23:0c:a4:42:ce:a8:36:e2:db:fc:36:f5:1e:37:
44:72:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:23:11 2025 by rpki-client