Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B44B89261C5611F086F1BA8BDAE4EC9C.roa
File: B44B89261C5611F086F1BA8BDAE4EC9C.roa (raw, json)
Hash identifier: 3RWtZgO6pKdtXlBtO9HeDFHwWtGSRra+kaalf/fKxKA=
Subject key identifier: 07:1D:91:D6:03:76:63:0B:D0:D9:6B:62:57:DE:0B:2D:AE:7F:9B:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014CF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B44B89261C5611F086F1BA8BDAE4EC9C.roa
Signing time: Fri 18 Apr 2025 13:11:57 +0000
ROA not before: Fri 18 Apr 2025 13:11:52 +0000
ROA not after: Fri 23 May 2025 13:11:52 +0000
asID: 274089
IP address blocks: 45.195.15.0/24 maxlen: 24
45.195.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85232 (0x14cf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 13:11:52 2025 GMT
Not After : May 23 13:11:52 2025 GMT
Subject: CN=68024f9d-6f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:0f:73:8f:4d:80:0d:c0:b2:15:80:30:f7:
7b:24:91:45:7b:bd:bd:a0:e3:42:a8:cf:f3:ec:ec:
d6:a1:f7:53:a7:84:5b:81:39:87:e4:bb:7d:e4:88:
d9:ae:a3:bd:b8:85:90:2d:7f:e1:b3:a1:6c:35:4c:
a3:e9:6e:4b:7f:05:5b:3d:82:10:44:97:d8:4b:52:
a7:39:47:8b:2f:e4:ec:56:7b:a4:65:0f:fb:60:0d:
02:0f:63:5f:1d:ff:2e:d4:30:d8:cc:8f:7c:c5:dd:
49:a1:3b:b9:72:e4:f5:1a:c5:ba:ce:45:36:43:6b:
3b:c9:7b:5c:e5:1c:cc:10:3d:3f:a3:c9:b7:4a:45:
9d:eb:5e:4a:89:c5:19:2e:b4:81:98:be:5c:a8:aa:
ac:29:3a:61:09:93:86:f1:e1:62:4e:90:1c:1c:86:
fd:bd:dc:ac:8e:d1:75:fa:62:28:30:51:a5:78:08:
38:a7:2d:2f:fe:66:1d:69:e0:65:7d:d7:5f:a8:9e:
27:8f:7a:8d:5d:f0:2d:62:58:d7:38:12:8b:41:cb:
46:8d:66:ab:f1:dd:09:18:e4:ea:03:6d:8c:8c:05:
47:8e:cf:25:a6:d8:58:c2:f9:f4:5a:41:23:fc:3e:
5d:8d:30:51:b5:b3:3a:5a:c2:aa:db:5f:bb:32:e7:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1D:91:D6:03:76:63:0B:D0:D9:6B:62:57:DE:0B:2D:AE:7F:9B:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B44B89261C5611F086F1BA8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.15.0/24
45.195.110.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:61:c8:a4:87:22:b5:ad:b0:ed:ed:62:20:57:90:df:aa:6f:
0c:13:11:ef:bb:90:4b:d8:ea:2d:6d:be:b3:bc:b4:62:39:d9:
37:60:2d:88:96:c4:da:af:1c:de:8c:63:aa:e6:4e:4b:76:a2:
37:1a:f6:a2:2b:77:cd:2e:a1:e4:0f:92:b5:6d:f8:7d:bc:80:
e7:d6:40:0e:de:cc:68:94:68:69:55:31:3c:2d:3a:7c:11:74:
df:12:b2:74:a0:65:c4:86:05:89:fe:66:0e:68:1e:99:99:a5:
26:68:53:f5:11:44:96:93:5d:08:01:a1:cf:e2:f0:11:f6:8a:
63:06:6c:43:31:e8:08:5e:ff:ad:64:10:31:74:7e:a7:ce:c7:
52:8e:1c:6d:ef:3f:d9:84:70:aa:e1:ad:e6:fa:13:8b:a9:37:
ab:f7:92:57:a1:fd:7f:96:79:89:b1:ba:91:8e:73:7a:27:75:
82:3c:a5:89:ca:d9:19:81:71:cb:a2:e4:03:dd:9a:9a:d8:3d:
e6:c2:13:db:5c:2d:2c:ba:79:10:4a:fc:15:ab:d9:2a:e9:cb:
58:d0:dc:41:c6:f3:23:68:87:d0:d9:b0:35:77:59:c6:91:6a:
67:11:66:dc:b6:e5:02:d7:84:89:d0:ea:c6:2c:ea:d6:d7:de:
3d:eb:d4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:30:54 2025 by rpki-client on console.sobornost.net