Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6691D37A3D4E11F08A79D8F6DAE4EC9C.roa
File: 6691D37A3D4E11F08A79D8F6DAE4EC9C.roa (raw, json)
Hash identifier: g6k1ADTpeYSQnTRHqJ6sbhm4NLfylbyLVaNE4MBvFLM=
Subject key identifier: 16:ED:69:CA:0A:D4:87:4F:1E:2C:CE:2D:C1:82:BC:F4:1B:51:7C:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0158CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6691D37A3D4E11F08A79D8F6DAE4EC9C.roa
Signing time: Fri 30 May 2025 12:05:39 +0000
ROA not before: Fri 30 May 2025 12:05:34 +0000
ROA not after: Fri 06 Jun 2025 12:05:34 +0000
asID: 400619
IP address blocks: 45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88271 (0x158cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 12:05:34 2025 GMT
Not After : Jun 6 12:05:34 2025 GMT
Subject: CN=68399f13-7994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:68:d5:c6:0f:85:db:c2:1b:2c:fa:06:0a:
1b:5c:13:62:19:dc:a5:31:cd:0a:19:2f:fc:00:86:
c3:d0:16:96:51:f1:b1:a7:8c:c6:99:00:16:d2:d8:
0b:8c:e3:20:10:e1:75:4d:05:66:d2:7f:e9:e0:5e:
c7:79:89:4d:c5:69:d9:42:38:aa:6e:fc:a3:1e:c9:
26:50:bf:66:27:5d:d8:89:4b:94:96:d6:21:38:93:
71:6f:fd:7c:44:6d:86:7d:bd:dc:b0:d1:0f:84:7d:
a6:b4:0b:ef:1d:90:0b:0e:77:2a:ab:fc:89:f7:ac:
19:73:e7:8e:3f:b5:79:a5:c1:49:90:86:73:b6:95:
ad:52:58:d6:e5:e8:61:f0:fc:8e:60:1b:16:54:f7:
5e:89:19:5f:e2:67:8c:3e:ff:28:79:b6:59:bb:f5:
ec:fd:39:2b:6f:67:cb:e2:ef:e9:cc:d0:e5:98:32:
53:57:80:e3:cf:ff:c9:49:4a:ed:95:76:89:40:07:
20:dd:9d:74:f5:36:f5:29:b2:09:c5:26:5c:12:09:
3e:9d:76:6e:9c:9d:d1:b2:d5:4f:31:e9:1a:ff:1c:
46:7a:06:78:6b:59:56:6f:13:74:d6:0e:86:b3:23:
44:26:47:62:fd:e8:0f:14:31:07:5d:9a:2c:da:e3:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:ED:69:CA:0A:D4:87:4F:1E:2C:CE:2D:C1:82:BC:F4:1B:51:7C:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6691D37A3D4E11F08A79D8F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.120.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:b0:22:a0:f0:a1:e2:dd:09:90:73:81:f6:db:ad:38:b2:47:
1a:dc:e8:98:f7:bd:d5:8d:c0:52:b6:f9:e2:ef:53:94:0d:1e:
1d:36:b1:45:13:19:3a:b8:7a:f9:6e:c5:53:b5:9b:0a:a6:b1:
5e:f4:15:e2:7e:28:da:42:de:9c:36:47:35:04:24:3c:85:66:
0c:03:4c:4b:de:b1:e7:0d:22:8b:80:68:ed:de:61:a8:80:13:
d1:68:8e:b8:2c:67:aa:7b:43:6a:de:25:11:95:05:85:9f:bb:
6f:3b:c7:ea:c1:65:96:4f:4c:60:6d:e8:b6:ae:2b:bf:40:f0:
e0:b5:a3:18:a8:a2:5d:61:19:fa:f1:1d:82:51:a5:33:6e:bf:
9a:c7:fa:f6:65:a3:02:ee:76:dc:3f:f0:fe:ad:2f:0a:d1:19:
2c:9b:97:5a:ca:54:36:3b:7d:a9:48:33:af:bb:4a:3f:b1:3a:
6f:5b:c8:6d:38:26:d1:11:b7:f0:71:3b:03:32:82:39:74:20:
46:b8:f7:7d:e1:8d:0a:c4:2d:85:21:dc:ef:a6:14:8c:1e:cf:
02:e3:a7:31:21:c1:ff:d6:77:cd:3a:fa:c2:1d:30:da:f5:23:
24:91:9e:5a:b0:79:6c:84:b5:2f:ff:d7:01:f9:ae:b6:3a:43:
bd:97:4b:97
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVjPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTMwMTIwNTM0WhcNMjUwNjA2MTIwNTM0WjAYMRYw
FAYDVQQDEw02ODM5OWYxMy03OTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAztto1cYPhdvCGyz6BgobXBNiGdylMc0KGS/8AIbD0BaWUfGxp4zGmQAW
0tgLjOMgEOF1TQVm0n/p4F7HeYlNxWnZQjiqbvyjHskmUL9mJ13YiUuUltYhOJNx
b/18RG2Gfb3csNEPhH2mtAvvHZALDncqq/yJ96wZc+eOP7V5pcFJkIZztpWtUljW
5ehh8PyOYBsWVPdeiRlf4meMPv8oebZZu/Xs/Tkrb2fL4u/pzNDlmDJTV4Djz//J
SUrtlXaJQAcg3Z109Tb1KbIJxSZcEgk+nXZunJ3RstVPMeka/xxGegZ4a1lWbxN0
1g6GsyNEJkdi/egPFDEHXZos2uM11QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBbt
acoK1IdPHizOLcGCvPQbUXzVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NjkxRDM3QTNENEUxMUYwOEE3OUQ4RjZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcN4MA0GCSqGSIb3DQEBCwUA
A4IBAQChsCKg8KHi3QmQc4H22604skca3OiY973VjcBStvni71OUDR4dNrFFExk6
uHr5bsVTtZsKprFe9BXifijaQt6cNkc1BCQ8hWYMA0xL3rHnDSKLgGjt3mGogBPR
aI64LGeqe0Nq3iURlQWFn7tvO8fqwWWWT0xgbei2riu/QPDgtaMYqKJdYRn68R2C
UaUzbr+ax/r2ZaMC7nbcP/D+rS8K0Rksm5daylQ2O32pSDOvu0o/sTpvW8htOCbR
EbfwcTsDMoI5dCBGuPd94Y0KxC2FIdzvphSMHs8C46cxIcH/1nfNOvrCHTDa9SMk
kZ5asHlshLUv/9cB+a62OkO9l0uX
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:54:21 2025 by rpki-client