Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/0468721019FB11F0AB8EE9EE6DB8BCC6.roa
File: 0468721019FB11F0AB8EE9EE6DB8BCC6.roa (raw, json)
Hash identifier: mvMjW2POQd7dO772pvpokj2pVxBoJFXmceUcYOCCYVM=
Subject key identifier: 80:43:BA:59:90:AD:59:0D:9D:99:92:47:9C:13:8A:FB:CA:21:F9:5F
Certificate issuer: /CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Certificate serial: 0140
Authority key identifier: CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/0468721019FB11F0AB8EE9EE6DB8BCC6.roa
Signing time: Tue 15 Apr 2025 13:10:35 +0000
ROA not before: Tue 15 Apr 2025 13:10:32 +0000
ROA not after: Thu 08 May 2025 13:10:32 +0000
asID: 0
IP address blocks: 41.221.37.0/24 maxlen: 24
41.221.40.0/24 maxlen: 24
41.221.44.0/24 maxlen: 24
196.45.32.0/22 maxlen: 22
196.45.32.0/23 maxlen: 23
196.45.33.0/24 maxlen: 24
196.45.34.0/23 maxlen: 23
196.45.34.0/24 maxlen: 24
196.45.35.0/24 maxlen: 24
196.45.36.0/22 maxlen: 22
196.45.36.0/23 maxlen: 23
196.45.37.0/24 maxlen: 24
196.45.38.0/23 maxlen: 23
196.45.38.0/24 maxlen: 24
196.45.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368BC41AF, serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Validity
Not Before: Apr 15 13:10:32 2025 GMT
Not After : May 8 13:10:32 2025 GMT
Subject: CN=67fe5acb-2cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:96:c0:ac:75:1b:bf:4f:ef:18:33:26:35:
85:73:69:c0:fa:68:fa:a3:2e:2f:3e:e8:42:d8:a6:
65:31:4b:7b:bb:ae:20:b1:3b:9a:f4:30:18:70:7b:
09:ff:77:9c:0b:c0:74:4f:d0:71:fe:a1:b2:dd:90:
fe:30:f9:22:0f:9d:d5:29:b1:9c:8a:47:e1:0e:0c:
b4:2e:b0:37:1b:27:91:f7:86:5c:9c:8e:f0:52:d3:
d4:4e:2a:77:1b:9b:b2:8d:c3:44:37:8c:74:a5:10:
91:66:f5:9a:81:cc:9b:23:28:58:41:3c:3b:50:85:
b2:17:74:f6:ad:46:cb:38:d3:dc:d5:a2:a6:11:79:
a6:45:68:05:42:4f:90:2a:ba:34:1b:47:1c:47:98:
4e:58:b7:0b:cf:e4:89:9c:fb:23:e8:8e:c4:98:73:
51:d9:3e:5b:58:a2:91:83:52:1f:01:61:eb:ac:b7:
0f:cd:e5:db:59:c5:d7:da:36:12:7c:39:e3:b8:1f:
b0:57:d4:7b:c9:0a:9d:cf:a2:6c:dd:72:db:a2:c7:
7a:20:d7:c6:ad:51:9e:0f:a9:64:89:8b:23:8d:84:
94:bd:ca:21:a4:20:8c:14:be:28:45:dc:42:b1:59:
57:53:1f:9d:bd:62:5e:64:f8:24:b5:ce:9c:71:07:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:43:BA:59:90:AD:59:0D:9D:99:92:47:9C:13:8A:FB:CA:21:F9:5F
X509v3 Authority Key Identifier:
keyid:CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/0468721019FB11F0AB8EE9EE6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.37.0/24
41.221.40.0/24
41.221.44.0/24
196.45.32.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:1a:e0:2e:db:de:8f:e9:fc:9d:fe:0c:75:20:31:ce:b1:5c:
8f:74:0f:31:e3:d2:f2:08:ed:ae:e3:12:0a:41:58:37:7f:ea:
af:23:9b:00:b9:c4:d2:0b:49:b0:44:72:14:de:03:0d:8b:e7:
34:0f:bb:36:4b:03:a8:ce:d2:ee:f2:38:18:d7:ca:23:5c:84:
cc:24:9b:cf:57:70:b2:7b:96:92:f7:99:8b:16:f4:9a:71:a4:
0c:56:f4:f2:f0:99:17:dc:c9:08:72:32:ad:68:b4:47:80:e7:
0e:a9:1f:9c:8e:90:d0:35:d1:7b:21:5c:ad:0b:e9:ce:10:a9:
e7:23:7d:e2:ae:9c:04:ab:e3:ac:0d:d7:35:03:34:5c:b8:93:
62:3b:83:d8:f3:3f:d2:28:64:f9:fe:24:8e:fa:72:84:92:c6:
1f:3b:63:b0:95:fc:a9:5f:5b:ce:ff:ca:e7:72:bf:17:0c:f0:
1f:01:63:32:15:81:11:bb:cf:1e:6d:f3:74:de:9a:8e:20:75:
bb:38:ec:ae:7b:58:58:07:cb:97:8f:bf:bc:15:e5:ab:a4:34:
9d:00:68:6c:ac:f1:47:2b:f8:69:ea:75:c8:2a:a8:ba:fd:fd:
88:9e:1b:27:ce:a9:2f:77:67:f4:2e:cf:f8:8d:aa:28:99:c3:
f6:6f:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 06:51:50 2025 by rpki-client on console.sobornost.net