Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/559D953A5B1311F0B9734EBBDAE4EC9C.roa
File: 559D953A5B1311F0B9734EBBDAE4EC9C.roa (raw, json)
Hash identifier: wgRGU39CMWwlAZ6O+W9qKiitS5H1jMfqokRiNCKlSFM=
Subject key identifier: BC:80:CC:F2:AE:CF:BB:10:A8:10:3D:CC:65:BA:81:D3:F9:79:87:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0162E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/559D953A5B1311F0B9734EBBDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 09:18:25 +0000
ROA not before: Mon 07 Jul 2025 09:18:20 +0000
ROA not after: Wed 23 Jul 2025 09:18:20 +0000
asID: 131471
IP address blocks: 45.195.130.0/24 maxlen: 24
45.195.131.0/24 maxlen: 24
45.195.194.0/24 maxlen: 24
45.195.195.0/24 maxlen: 24
45.195.210.0/24 maxlen: 24
45.195.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90852 (0x162e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 09:18:20 2025 GMT
Not After : Jul 23 09:18:20 2025 GMT
Subject: CN=686b90e1-bcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:70:ba:1e:12:81:f0:7e:2b:eb:24:61:60:
a8:67:77:b1:8d:6d:03:08:f1:08:bf:f5:92:5e:7f:
1f:82:09:93:60:8c:49:84:7f:1a:ab:ea:23:82:0c:
c4:10:80:76:19:9d:8f:ff:95:14:e0:da:b7:4c:0b:
7c:06:23:4a:45:35:88:7b:14:75:e8:f5:1e:32:3c:
d6:24:ff:25:54:55:af:fd:5a:93:88:1a:06:6b:bb:
2b:93:a8:f6:d1:ee:42:3d:39:c0:38:58:91:d4:35:
42:f4:7c:3d:94:6c:db:c0:43:88:bb:8e:fd:44:ad:
13:dd:85:a6:12:7e:a5:c2:7d:cc:8e:73:a9:88:90:
1a:07:3b:dc:5f:af:14:30:09:00:ff:8a:47:5a:fd:
7b:c5:df:3a:01:cd:58:68:ed:fd:25:e6:ec:bb:fd:
b2:f3:97:42:c9:a4:27:1a:3c:cd:97:f9:cc:85:56:
40:80:7b:3e:ca:41:38:e0:73:5a:4b:26:2f:73:0d:
81:5b:f6:76:d8:63:61:c5:c1:cf:f5:99:06:17:d9:
93:f5:46:7b:39:12:83:71:c5:62:1e:a6:2f:48:06:
85:7a:62:26:f6:94:ca:63:fd:7f:99:6a:6b:f3:6a:
ea:04:60:7b:09:f7:e3:e7:5d:f8:81:7c:a1:d6:e1:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:80:CC:F2:AE:CF:BB:10:A8:10:3D:CC:65:BA:81:D3:F9:79:87:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/559D953A5B1311F0B9734EBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.130.0/23
45.195.194.0/23
45.195.210.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:5c:26:23:6f:51:16:a7:cb:81:f0:c5:1a:c8:4b:d7:27:15:
25:d4:d1:12:78:51:95:65:97:13:f1:d7:e4:2d:44:9a:03:ed:
a8:4e:a7:d5:ca:82:37:68:99:fe:5c:41:b7:6e:11:f8:57:64:
60:d6:24:86:d4:38:75:68:0a:9b:db:1a:d9:64:06:d6:b6:3a:
6d:84:6c:65:f3:6d:7a:61:1a:3e:7b:80:e6:82:3d:31:08:17:
e2:9d:26:2f:d0:87:cb:7f:2e:20:58:80:74:0c:41:02:9d:5a:
51:ad:ce:09:82:a3:d2:ec:ab:f6:50:01:5e:7d:69:69:ed:86:
7b:42:4b:89:18:f8:5a:6f:61:24:d1:4e:0b:40:a4:3c:df:ff:
13:12:9c:1f:73:36:7f:a2:62:f0:ef:90:62:0b:53:43:58:75:
ed:f9:98:2c:5d:af:15:e7:6a:02:c4:94:bc:ca:a7:8c:d2:cb:
f6:55:f1:4d:74:09:1b:16:ce:c3:48:04:21:95:4e:e5:6a:48:
2a:23:0e:10:6a:92:af:c5:c3:e0:ce:8f:4a:22:1a:d9:55:13:
a2:b1:3b:2c:95:58:f5:a9:e5:dc:55:b7:ea:01:96:20:a4:53:
df:db:e8:17:7d:c9:93:97:d6:b1:f8:97:cc:06:ea:ec:69:7e:
a8:c2:79:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:59:26 2025 by rpki-client