Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/657B320C315911F095C4ECA5DAE4EC9C.roa
File: 657B320C315911F095C4ECA5DAE4EC9C.roa (raw, json)
Hash identifier: aryRExdF4a+915MFSeV+GR/mogAsr4KvcZKR5qympDM=
Subject key identifier: CC:68:40:36:2F:C6:AB:E5:F4:2D:E8:2F:89:97:A5:4C:BC:11:61:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015462
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/657B320C315911F095C4ECA5DAE4EC9C.roa
Signing time: Thu 15 May 2025 06:54:08 +0000
ROA not before: Thu 15 May 2025 06:54:03 +0000
ROA not after: Tue 17 Jun 2025 06:54:03 +0000
asID: 147181
IP address blocks: 45.192.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87138 (0x15462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 06:54:03 2025 GMT
Not After : Jun 17 06:54:03 2025 GMT
Subject: CN=68258f8f-d35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:8a:25:92:1f:4b:14:b3:95:3b:6d:7c:f3:
5f:55:11:ea:90:ac:95:62:b4:ca:38:4a:8a:93:53:
bd:65:f3:95:df:b9:52:e1:56:92:52:54:9b:8e:26:
a1:9f:56:26:8c:8b:29:9f:16:ae:4b:33:c6:cb:2d:
bd:4e:fc:4d:ce:0f:4a:fc:57:ff:b5:98:d1:56:5e:
b3:e8:86:36:99:78:91:bb:08:3e:96:1b:f0:94:a6:
1d:b6:45:0d:87:4f:2d:f8:fb:64:8c:4f:d5:6f:c9:
fe:67:35:39:9b:36:6c:b4:20:95:d6:a3:ae:13:0f:
90:a7:08:8f:55:a2:5d:c6:77:ed:f3:74:ba:6b:1b:
0e:bf:28:7d:8a:51:64:91:5e:b1:66:0a:eb:f3:5e:
6c:59:22:56:27:64:9b:21:43:59:9a:25:52:92:91:
fc:60:55:c9:c4:0f:f9:fb:5b:78:5b:6a:47:ac:e1:
fd:da:07:f3:a6:72:d9:34:5b:55:86:e6:1f:41:e1:
43:91:16:7a:23:53:82:64:db:04:c0:11:df:95:0b:
0c:e7:8c:0d:20:c8:6b:0f:b5:39:be:9b:ba:6f:8f:
71:3c:4e:1e:72:57:ab:f5:95:e3:47:58:7c:c7:93:
86:cc:2f:33:32:50:9a:27:1a:dc:3b:b2:4e:eb:28:
01:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:68:40:36:2F:C6:AB:E5:F4:2D:E8:2F:89:97:A5:4C:BC:11:61:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/657B320C315911F095C4ECA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.11.0/24
Signature Algorithm: sha256WithRSAEncryption
58:97:8d:ea:87:3b:4f:68:88:7f:cd:54:ed:5b:fe:de:3a:d9:
39:0e:dd:96:ba:41:ef:2f:73:5a:c8:95:c3:5b:03:63:d9:2d:
eb:8c:81:35:2f:e8:23:0b:9a:de:6e:1f:63:e0:50:97:84:62:
6c:79:6e:9b:47:f6:62:cd:d7:73:26:61:a7:eb:eb:3d:33:5d:
1c:9c:47:f9:c4:cf:3d:1c:56:2e:17:5a:cc:c3:57:16:d8:05:
91:91:87:81:70:03:c5:86:72:84:c7:2b:63:e6:95:04:37:50:
d4:a8:79:17:75:1a:e5:ad:06:c7:d3:80:0b:6b:e2:64:be:75:
c4:16:8d:b0:7c:59:b0:4d:0e:6c:cd:58:61:ec:2d:35:24:34:
e2:1c:2a:52:79:f4:d1:e6:0d:62:c6:5e:7c:a2:51:68:9a:3b:
16:20:af:65:89:0a:6e:07:0d:ac:99:08:3e:75:b2:68:0f:6b:
f3:34:00:5d:26:fe:0b:07:ea:0a:21:32:8f:2d:3e:ef:b5:f6:
52:15:9c:23:66:d4:2b:a8:8e:f2:e7:fb:ce:22:b0:1f:b4:76:
4f:86:59:9a:fc:9e:56:99:47:c6:7f:9c:dd:f2:c7:9b:c7:9c:
df:e3:56:01:82:a4:d6:be:56:92:96:ff:ab:7e:f9:5c:46:d9:
a7:8f:b6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:34:20 2025 by rpki-client