Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B0C8FBA3BAB11F0A86D82D4DAE4EC9C.roa
File: 2B0C8FBA3BAB11F0A86D82D4DAE4EC9C.roa (raw, json)
Hash identifier: TkmZdZkodBQ+4R8ATwz5IugkBC36/TsQAO1+5fPzNUs=
Subject key identifier: 63:2F:A5:EA:81:A3:71:28:1D:AB:74:E2:E6:41:BA:83:05:C1:46:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015831
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B0C8FBA3BAB11F0A86D82D4DAE4EC9C.roa
Signing time: Wed 28 May 2025 10:04:40 +0000
ROA not before: Wed 28 May 2025 10:04:35 +0000
ROA not after: Wed 02 Jul 2025 10:04:35 +0000
asID: 395793
IP address blocks: 45.195.148.0/23 maxlen: 24
45.195.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88113 (0x15831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 10:04:35 2025 GMT
Not After : Jul 2 10:04:35 2025 GMT
Subject: CN=6836dfb8-d880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0f:7b:3d:d5:b6:a4:ae:63:90:93:fa:21:c2:
47:c9:a4:ec:53:07:8b:2f:76:c7:05:43:ed:81:18:
8f:75:ad:9e:a9:9d:42:77:de:03:71:b3:c3:36:52:
1e:9c:64:f9:b8:7f:a1:c3:f1:b0:7e:64:d8:6c:74:
df:5e:81:7e:0d:ad:9c:c7:9b:f5:e6:f9:dc:58:c8:
05:60:1a:7e:45:cc:27:05:bb:c5:4a:b0:a3:63:c5:
fb:fe:09:66:d5:2d:bc:6a:8c:e8:ef:f2:90:79:c2:
5c:ee:9e:5f:c6:88:4a:d0:1e:e7:2c:a0:aa:e7:64:
ce:49:10:58:d9:16:cb:dd:35:cd:ca:16:a7:74:ff:
70:74:d3:c5:71:cc:e8:8d:1f:ce:87:da:20:47:d7:
29:08:b5:d2:df:76:fb:8f:a2:11:7f:76:3b:e8:ab:
c2:88:f3:bc:c4:1c:be:3c:52:45:06:fe:a0:30:76:
a5:a2:ea:c4:2d:7f:a1:e7:f2:ea:6d:92:5c:78:a3:
24:7d:73:75:30:3e:ae:4b:a0:5f:21:d5:22:c2:61:
d2:a7:9e:eb:24:46:76:08:07:67:05:82:b7:39:5f:
ea:be:d0:49:47:46:c1:34:72:39:13:44:c1:6c:aa:
ec:e2:07:03:37:8f:30:61:58:d9:91:39:6b:23:86:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2F:A5:EA:81:A3:71:28:1D:AB:74:E2:E6:41:BA:83:05:C1:46:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B0C8FBA3BAB11F0A86D82D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.148.0/23
45.195.202.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:0a:d4:9f:fd:e1:03:da:2b:05:60:e8:81:9a:2a:3c:49:49:
13:ff:ce:1e:b2:7f:02:95:90:26:f4:9b:c5:00:c9:33:a0:98:
a6:8a:b7:58:29:31:fe:52:9f:fb:00:ce:ce:12:23:43:26:9e:
32:6f:73:b4:ef:81:2d:df:7a:8c:8e:c7:4a:60:28:29:2e:f3:
50:b6:fb:58:77:f0:ac:75:6a:02:e2:bd:09:3c:7d:ea:31:56:
ce:a3:cc:58:d6:64:32:c8:0a:79:5b:d7:65:9a:8e:42:f2:4e:
60:1d:c9:80:33:e2:b0:09:3f:07:d7:23:b7:d9:19:f3:67:34:
42:bc:5b:22:3b:76:de:6b:37:90:2c:f6:8b:01:08:8b:b0:ba:
cf:e2:c2:67:13:38:73:7f:f8:9e:bd:16:92:4e:cc:4c:cd:6c:
3e:52:a0:a0:c4:64:d0:c7:a3:b7:bb:02:49:86:f6:55:58:88:
d3:4f:61:dc:c1:b6:04:bd:a4:f7:ff:b9:a5:71:9d:14:a9:bf:
ef:83:16:a7:c3:db:84:76:09:96:2b:d8:dc:aa:be:26:17:67:
aa:27:26:6b:cf:d3:c5:ec:49:3c:7e:c6:e9:81:db:a9:c4:48:
3f:7c:5b:f6:c7:f0:eb:12:2e:98:bd:c2:a7:0f:00:45:76:72:
4a:60:e8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 01:44:04 2025 by rpki-client