Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66BEED5E3C8D11F093659A91DAE4EC9C.roa
File: 66BEED5E3C8D11F093659A91DAE4EC9C.roa (raw, json)
Hash identifier: 18FyKNRqxLScdXBS2IvVjbuqnN7v+UaOhkvEdFD7SsU=
Subject key identifier: 4C:79:B8:1B:58:3F:32:57:DC:0C:03:F4:3D:E1:A2:D9:29:0B:58:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0158C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66BEED5E3C8D11F093659A91DAE4EC9C.roa
Signing time: Thu 29 May 2025 13:04:07 +0000
ROA not before: Thu 29 May 2025 13:04:00 +0000
ROA not after: Sat 28 Jun 2025 13:04:00 +0000
asID: 204741
IP address blocks: 45.194.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88256 (0x158c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 29 13:04:00 2025 GMT
Not After : Jun 28 13:04:00 2025 GMT
Subject: CN=68385b46-af2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:62:5b:ca:b1:66:c8:5c:88:aa:62:d6:42:
3e:c4:23:87:15:e3:83:dd:93:37:64:8c:b7:21:e6:
09:7e:11:29:0d:fc:41:e3:82:45:db:6c:44:6e:89:
a2:55:b8:8c:b2:f8:33:20:de:bb:b9:8c:5a:de:0b:
d2:67:1f:50:23:dd:e0:a0:07:dd:60:4e:b6:a8:a4:
4b:b6:8c:93:dc:06:cc:41:4f:14:14:ae:6e:ed:ad:
6c:f9:82:93:e2:fc:b5:e0:95:cc:fc:1f:ba:50:4d:
00:d2:e3:64:e8:69:23:34:e7:36:d9:29:bf:cc:f9:
9e:11:ac:38:b3:d2:c5:92:b4:98:97:a2:1c:9e:94:
37:b0:38:df:dd:03:9e:6d:b8:a7:92:e7:eb:42:52:
1f:66:d0:38:3c:2a:88:5b:51:b3:a9:53:1f:ed:2b:
04:af:77:c1:bb:22:2d:dd:41:05:ee:e2:b5:f7:e7:
d2:5f:20:3e:72:ac:73:0a:b8:59:08:8b:91:75:e3:
98:c8:48:26:bf:9b:bd:a5:17:f3:80:6a:76:b7:1f:
37:cf:53:82:37:56:3d:42:4e:69:45:00:18:e1:56:
59:2e:63:8f:ed:ef:76:8e:e8:c8:b4:8e:ae:1d:a3:
05:bb:4a:09:fe:91:e0:1b:82:5f:6a:45:4f:46:f9:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:79:B8:1B:58:3F:32:57:DC:0C:03:F4:3D:E1:A2:D9:29:0B:58:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66BEED5E3C8D11F093659A91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.65.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bd:4b:32:3b:d0:57:9a:39:d3:aa:1a:a4:f3:d2:5a:e2:20:
a5:23:73:95:28:9f:4d:64:8a:c4:fe:bc:b7:6b:35:aa:35:0a:
cf:d4:ff:7d:94:38:a5:47:f0:61:5f:5d:d6:15:f8:e8:40:b1:
0a:5f:c0:58:98:ee:13:3b:1f:b7:e3:47:7c:0a:e9:39:88:d1:
20:ae:94:0b:42:48:aa:e0:2c:bd:dd:70:5b:ff:10:d1:d9:4a:
6c:83:00:34:83:17:d3:85:a0:d5:f2:d1:13:f3:97:54:65:78:
b4:e2:ef:7d:c6:d8:8b:4b:d3:a0:c5:61:f7:cc:a4:a1:e5:90:
14:9f:5c:78:a9:10:07:40:35:cb:c3:31:9f:76:68:26:87:7b:
72:1c:6f:25:6b:af:0b:4f:9a:8e:db:0c:f5:2b:43:27:17:a2:
b6:84:d2:8b:60:c4:86:7c:9a:ee:70:16:9c:65:48:9b:d6:f7:
69:dc:f5:d9:a0:60:18:d3:f9:20:1c:ec:7c:54:09:4c:e5:03:
97:47:87:45:16:df:81:34:ad:2b:5e:83:3b:10:e0:02:a6:f5:
e3:97:c4:a1:f4:46:04:7b:c8:17:a3:5b:d0:fc:25:38:69:1f:
91:f9:ef:3b:fe:5f:63:9d:ed:d5:43:5d:91:f8:dd:09:90:b0:
38:a9:82:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:22:04 2025 by rpki-client