Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DAE3C9630A711F0B31E407CDAE4EC9C.roa
File: 2DAE3C9630A711F0B31E407CDAE4EC9C.roa (raw, json)
Hash identifier: PJbasckMO9DeWv9Y0Z5YSy1kGtJBP6rKc/Wnvchteoc=
Subject key identifier: 0E:4F:62:64:75:2E:84:F4:91:ED:47:88:0F:52:F7:12:B6:18:3E:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015432
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DAE3C9630A711F0B31E407CDAE4EC9C.roa
Signing time: Wed 14 May 2025 09:38:24 +0000
ROA not before: Wed 14 May 2025 09:38:19 +0000
ROA not after: Wed 18 Jun 2025 09:38:19 +0000
asID: 20326
IP address blocks: 45.198.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87090 (0x15432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 09:38:19 2025 GMT
Not After : Jun 18 09:38:19 2025 GMT
Subject: CN=6824648f-8faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:80:04:3d:02:14:5c:ea:8e:f0:0d:33:44:39:
d0:b2:0e:11:d1:20:9f:b3:e2:41:a6:fe:48:8b:ba:
5b:ec:45:92:60:ba:98:43:fd:60:6e:76:95:2d:5a:
dd:d9:81:8c:f6:25:d2:e3:38:39:1d:ed:3f:e5:c9:
01:a8:8a:71:5b:b7:2d:f8:69:4e:5d:5d:32:23:f3:
b0:78:e1:09:8e:27:1b:80:63:57:80:24:25:c1:ee:
77:8e:00:a8:1f:5f:19:6d:57:dc:e6:e0:43:b7:01:
b5:81:6b:0c:12:56:7c:9b:24:ce:b9:4e:46:3c:46:
fb:05:64:a1:44:8b:bd:09:68:09:1c:09:f9:4d:34:
30:04:1f:4d:44:77:94:65:a2:2d:1c:0d:e7:ba:15:
5c:4f:ea:1a:cc:50:85:c0:cd:cf:a4:65:bf:bf:0e:
cf:61:9f:25:4f:b8:12:7f:12:a3:95:c7:3f:87:52:
e5:69:65:a1:d3:a7:7b:26:68:f4:f6:18:fa:0d:70:
33:15:0e:d9:2d:e9:58:40:df:65:40:f1:d2:09:82:
f1:c1:f3:25:e1:e6:c5:8e:8f:5f:45:69:1f:60:b8:
af:bf:89:f9:8e:8b:74:4e:73:2a:fa:36:a8:dd:72:
72:52:c0:ff:b8:f2:d9:b2:da:6b:ca:96:3e:8b:79:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4F:62:64:75:2E:84:F4:91:ED:47:88:0F:52:F7:12:B6:18:3E:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DAE3C9630A711F0B31E407CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.115.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ed:07:4d:f7:22:ee:3c:41:bd:a9:c5:a0:ea:69:13:50:5c:
4f:34:34:77:60:73:5b:5c:25:4f:2d:53:1d:7e:1a:97:20:ea:
41:2c:f9:e4:b7:27:90:a4:e4:56:cb:40:f0:3f:d1:cd:f7:e4:
a2:c2:68:57:62:7b:a1:fc:b6:7a:02:9c:5f:fa:fd:69:17:42:
dc:3e:37:9c:c2:48:55:ed:0c:14:1b:14:0c:ed:98:8b:9e:85:
34:57:d8:71:b2:d9:8c:47:53:9e:41:d5:f5:3c:bb:2c:1f:7e:
8b:53:e0:9d:06:b6:91:f3:e0:0c:a0:09:2e:ce:19:b2:ce:8c:
11:e5:71:ad:fb:43:c1:14:f3:9d:1d:e9:04:73:95:02:91:29:
1b:bc:7d:ec:ad:1d:91:38:c2:ea:ef:11:e4:a7:be:fe:aa:69:
96:24:91:6d:db:75:7c:86:2f:e4:9a:6a:50:ca:24:a1:ab:46:
87:a0:5b:6f:85:00:a9:23:ed:cf:1c:65:c6:a9:04:72:95:26:
b9:3a:1c:80:cc:a0:f1:a1:b0:82:17:a9:16:4c:06:22:5b:50:
12:04:ca:00:1a:98:7f:b7:c9:5e:3c:fe:40:81:cd:88:66:0e:
41:da:37:6d:05:2d:90:4b:0e:5c:48:be:04:78:50:32:95:ec:
10:83:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:33:48 2025 by rpki-client