Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57F54E34598A11F09633B6BADAE4EC9C.roa
File: 57F54E34598A11F09633B6BADAE4EC9C.roa (raw, json)
Hash identifier: +DrLOYtbrdlp81QfVa/4xra4zjyjQ2JnMDS2e/l7W/A=
Subject key identifier: 5C:A4:90:53:A2:C9:1D:0E:53:64:8E:2D:6D:E3:E3:6E:67:7A:25:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016195
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57F54E34598A11F09633B6BADAE4EC9C.roa
Signing time: Sat 05 Jul 2025 10:25:17 +0000
ROA not before: Sat 05 Jul 2025 10:25:12 +0000
ROA not after: Sun 10 Aug 2025 10:25:12 +0000
asID: 61112
IP address blocks: 45.192.240.0/24 maxlen: 24
45.192.241.0/24 maxlen: 24
45.192.246.0/24 maxlen: 24
45.192.247.0/24 maxlen: 24
45.192.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90517 (0x16195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 10:25:12 2025 GMT
Not After : Aug 10 10:25:12 2025 GMT
Subject: CN=6868fd8d-13c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:d3:04:2d:1b:19:7d:8e:7b:de:f8:56:90:
7d:42:d3:3f:c1:77:0b:6d:02:5d:0e:be:96:21:9e:
9c:a5:62:ee:56:64:6a:76:46:83:06:6b:40:1e:12:
96:8d:5f:c2:0a:78:3b:d6:7a:65:9a:2e:9b:73:5b:
b4:cd:2e:8b:1e:75:8b:90:5d:b2:c9:78:a5:81:c8:
cc:bd:58:3d:be:3b:87:04:e4:8b:e3:12:51:63:87:
df:47:3f:ec:3f:c3:a6:b1:bb:1d:d1:ac:7a:5d:dd:
6c:7b:5e:d0:7c:52:fc:62:9b:93:90:a5:97:a7:62:
43:ae:cb:9b:2a:89:69:38:ff:d3:f0:3a:bc:01:6c:
ce:bd:d4:df:a5:0b:c6:44:84:dd:a8:50:73:6e:e2:
c5:ac:96:c7:2e:43:40:dc:3e:05:8d:21:ed:88:9d:
b2:10:c9:b3:47:fb:26:8a:06:d6:b4:1c:41:50:a9:
dc:26:b7:63:97:2c:d9:14:50:f7:f3:6f:76:6a:dc:
1e:64:50:00:84:30:bb:98:37:e6:27:a9:21:b9:c4:
fd:17:92:17:29:e0:e9:ec:7d:a8:97:c3:96:3e:c8:
a7:5b:32:aa:70:25:9a:8c:55:cc:11:16:5c:2d:64:
f5:0d:e4:06:d3:cc:5b:89:73:0d:a0:7f:23:52:04:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A4:90:53:A2:C9:1D:0E:53:64:8E:2D:6D:E3:E3:6E:67:7A:25:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57F54E34598A11F09633B6BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/23
45.192.246.0-45.192.249.255
Signature Algorithm: sha256WithRSAEncryption
6b:7f:0a:14:fb:19:57:cb:d6:39:bb:34:79:00:cf:9e:a4:f7:
1d:2c:1f:a6:60:b5:34:ad:6f:bd:b1:d1:c0:6b:84:92:00:eb:
c5:38:0f:68:58:14:ed:6e:f6:52:8c:d0:69:60:04:0a:df:79:
b8:4e:f8:c7:55:7f:58:70:1c:5a:af:14:f3:d9:73:66:bc:91:
bb:0b:0e:75:f7:33:9f:fe:df:7a:a7:a6:ba:82:16:fe:15:4f:
91:39:61:7e:03:03:d1:4f:e4:7d:ae:df:3c:bd:2c:64:09:88:
72:df:a6:40:b8:2f:3c:b1:8b:4e:93:63:ab:83:be:02:54:07:
1e:c5:5d:7d:bd:db:ae:86:05:89:01:74:02:6a:f9:00:62:e1:
46:96:9a:fc:e1:93:fb:0e:f7:e6:a4:74:b3:28:86:3e:74:de:
5b:3f:c0:85:25:d3:04:85:3f:ce:c5:4e:5e:11:3c:50:bf:55:
1c:4c:83:e5:61:69:72:a4:38:ef:6f:a4:05:0b:3a:7a:b1:e7:
6c:16:6d:bf:22:52:0a:d2:93:d6:fa:90:9a:2f:5d:dd:7d:42:
b6:86:cc:50:1a:4c:d8:45:df:1b:c9:cd:99:43:33:dd:96:10:
63:ed:a8:f9:04:c2:d9:31:9f:c5:11:ec:1c:a0:04:2e:7c:ba:
6c:d8:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:35:53 2025 by rpki-client