Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A796FBE3AF411F0AA9770ADDAE4EC9C.roa
File: 5A796FBE3AF411F0AA9770ADDAE4EC9C.roa (raw, json)
Hash identifier: 9po2ulfXWvWDumiOYxepOTrNhek2vHfX0BzX9Q7zHCA=
Subject key identifier: B0:30:7A:0E:D3:A7:C9:67:C1:06:33:C3:8F:3B:F0:D1:91:1F:5A:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0157F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A796FBE3AF411F0AA9770ADDAE4EC9C.roa
Signing time: Tue 27 May 2025 12:16:02 +0000
ROA not before: Tue 27 May 2025 12:15:56 +0000
ROA not after: Wed 27 May 2026 12:15:56 +0000
asID: 32043
IP address blocks: 45.195.157.0/24 maxlen: 24
45.195.158.0/24 maxlen: 24
45.196.136.0/24 maxlen: 24
45.196.137.0/24 maxlen: 24
45.203.60.0/24 maxlen: 24
45.203.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88055 (0x157f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 12:15:56 2025 GMT
Not After : May 27 12:15:56 2026 GMT
Subject: CN=6835ad01-e6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:09:d7:3f:47:fd:6b:db:59:2f:19:b6:31:8f:
f1:1a:c6:5a:0e:22:bf:3d:47:bf:70:65:c2:fe:68:
32:6a:95:f2:e4:38:6c:3d:4a:be:be:0d:57:fc:0a:
29:f9:73:58:79:64:92:bb:4d:99:59:82:d6:7e:05:
31:1f:f0:8a:f3:f0:38:9f:60:33:6e:24:8e:58:4b:
68:72:19:b0:f8:3c:e9:a3:68:08:80:98:a0:41:0c:
24:3b:99:9a:eb:d4:e7:d2:1f:22:5d:6b:f0:f8:5a:
d6:1b:4d:10:a8:82:53:1d:57:63:80:b3:1c:3b:9a:
79:cf:4c:92:d8:40:6c:6a:6b:9d:17:2c:8b:f0:e5:
8c:95:e0:d7:d8:d3:d6:be:03:36:30:c7:a6:a9:fd:
a5:91:d1:ae:71:78:c8:36:13:5d:af:42:c3:93:50:
34:b9:be:ab:85:cd:0b:4a:54:20:d0:fe:c6:b2:68:
23:0c:70:45:3d:4a:03:3e:56:5d:ce:e2:6b:be:e0:
16:82:28:d9:5c:7e:77:32:0f:ed:f6:bc:68:9c:ce:
2f:76:71:8d:55:d6:ec:da:50:83:0f:01:8b:19:90:
46:54:8c:14:84:de:11:17:5f:26:66:76:51:69:5d:
e2:26:bb:e9:04:b0:ac:e7:64:d2:10:12:28:65:ec:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:30:7A:0E:D3:A7:C9:67:C1:06:33:C3:8F:3B:F0:D1:91:1F:5A:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A796FBE3AF411F0AA9770ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.157.0-45.195.158.255
45.196.136.0/23
45.203.60.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:f4:7f:53:f1:8f:9f:38:33:59:83:a0:48:43:a6:06:6d:34:
ae:71:aa:4c:72:36:de:d8:6c:93:a3:2a:39:90:84:dd:a6:29:
e1:cc:30:b9:90:d2:00:b1:7c:44:5b:9f:56:86:af:45:9a:f1:
ea:29:fc:c9:1e:5c:16:5f:22:f9:13:bd:2c:87:e9:78:02:c7:
c5:61:6e:06:21:9f:01:9e:82:d9:26:28:09:98:1a:00:e4:ce:
50:49:4a:7f:a6:c0:cf:ae:ea:6c:af:ba:fe:14:c3:85:64:76:
f8:8f:95:c4:22:76:a8:80:f8:a3:14:10:53:84:b6:48:43:3f:
33:22:e8:56:aa:9c:99:08:d0:98:9d:5f:d0:8b:7e:e4:5c:98:
51:3d:3b:58:c4:66:5c:4c:8b:92:bc:78:1c:34:61:f1:7f:69:
8b:24:00:10:7c:24:2d:08:28:4d:03:80:29:c6:4d:89:b5:d7:
76:bf:6f:f1:8d:43:96:17:b6:93:77:0d:fe:d6:ee:80:96:74:
7f:7d:30:85:7b:63:1a:c6:82:49:09:f5:8f:02:b2:65:49:e1:
af:42:ea:6c:3c:27:76:91:16:44:06:28:4f:f4:0e:de:17:61:
b4:bb:f2:2b:16:78:89:04:87:bd:02:48:de:7c:6d:85:55:08:
f9:f2:9c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:26:50 2025 by rpki-client