Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7BD38060CB911F0B0DDFE87762E951A.roa
File: E7BD38060CB911F0B0DDFE87762E951A.roa (raw, json)
Hash identifier: uIcpAQ6L1XrrhbhqlG1KcBgb7YGzOH8KXjYSsif3DLQ=
Subject key identifier: B3:DE:B6:4C:6E:72:54:6F:50:3B:73:AE:E2:37:10:B9:D4:9E:23:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0148AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7BD38060CB911F0B0DDFE87762E951A.roa
Signing time: Sat 29 Mar 2025 16:21:44 +0000
ROA not before: Sat 29 Mar 2025 16:21:41 +0000
ROA not after: Tue 27 May 2025 16:21:41 +0000
asID: 203020
IP address blocks: 45.198.193.0/24 maxlen: 24
45.198.194.0/23 maxlen: 24
45.198.196.0/22 maxlen: 24
45.198.200.0/21 maxlen: 24
45.198.208.0/20 maxlen: 24
45.198.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84138 (0x148aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 29 16:21:41 2025 GMT
Not After : May 27 16:21:41 2025 GMT
Subject: CN=67e81e18-1c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:38:09:de:20:c5:a6:6a:24:dd:60:ff:e9:
9f:e5:96:62:b4:74:ba:f6:83:bb:97:ed:91:3a:f9:
cb:c5:a1:55:31:3c:52:75:af:f3:8f:da:a2:d7:6d:
35:b3:72:7e:ed:98:19:3b:de:53:97:d7:f7:ba:8c:
a4:f0:f6:d7:36:9e:41:cf:b9:ba:74:6d:02:a7:b1:
bc:99:83:ce:48:6d:02:18:7c:5e:a9:f1:f9:30:b2:
38:d3:e8:cd:01:6a:1c:b6:bd:e6:95:7d:3a:f0:18:
5f:9e:4c:32:45:44:98:55:3b:ae:e9:81:21:5f:f7:
3d:33:b5:2a:48:ce:a2:bd:0d:27:0a:c6:47:68:6a:
90:16:31:d0:e3:51:bd:77:d4:6a:a3:a1:8a:a3:dd:
f9:15:3f:26:e1:14:2b:15:9c:09:b2:4c:af:ff:d9:
f7:cd:51:60:75:82:ae:a1:0d:8d:4a:6f:1e:25:fc:
01:2a:c0:6d:9c:be:a8:92:3f:df:37:59:cc:02:62:
7c:16:f7:9f:0d:dc:62:24:39:7d:fe:58:3b:9d:cc:
46:23:f2:cd:55:ba:d0:ac:90:3a:89:16:49:86:95:
4f:7d:1e:60:67:0c:76:c7:3b:d5:4d:92:40:4f:17:
58:e8:d2:fa:be:25:f8:06:9d:e3:f7:85:f4:a8:bd:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DE:B6:4C:6E:72:54:6F:50:3B:73:AE:E2:37:10:B9:D4:9E:23:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7BD38060CB911F0B0DDFE87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.193.0-45.198.224.255
Signature Algorithm: sha256WithRSAEncryption
80:6a:74:37:03:b6:51:3a:6b:be:91:4f:a5:56:ca:34:eb:33:
4d:ef:15:11:d2:ae:6a:42:64:c3:cb:b7:fb:ff:b9:e1:0c:88:
87:cf:01:bd:ed:5b:93:18:1c:ba:3f:2e:0e:52:9b:79:8e:96:
1c:68:d8:af:60:c5:fd:5a:e2:bc:ac:15:5d:7c:61:d3:29:7b:
80:7b:1f:9c:af:ac:16:37:23:24:f3:89:11:c1:12:80:55:a6:
83:c5:7f:b6:4e:f2:eb:80:cf:99:5b:94:e9:77:ef:30:21:78:
4f:3d:b4:39:e2:14:47:c0:66:97:36:fe:13:2c:87:10:83:d8:
35:cd:17:b3:e2:85:17:ce:4b:f8:ea:67:e7:53:b9:1e:a3:e5:
91:3f:2b:a9:04:14:1b:aa:d1:1b:60:87:bd:43:d5:b3:bd:c7:
c4:c9:6d:1b:c0:36:ef:a2:6c:66:40:ad:a2:d9:a4:b8:ef:a7:
48:74:91:28:f1:77:b9:21:18:e7:20:c4:8b:ff:f0:48:69:88:
4c:1e:c5:70:ea:af:c7:85:5c:0f:f5:ae:a6:b0:fa:0e:60:de:
d8:fb:a4:ab:0e:ff:dd:5e:20:2f:07:c5:2c:91:34:c5:11:01:
11:ac:48:d5:01:35:bb:8e:fd:ac:ce:e5:5c:f2:4f:b1:55:b2:
00:93:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:17 2025 by rpki-client