Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C85AB3E2F3011F08F4656ABDAE4EC9C.roa
File: 6C85AB3E2F3011F08F4656ABDAE4EC9C.roa (raw, json)
Hash identifier: KEBpa8UiNT1VvkRzMo9iZEHRpNlb21QH8hxZc9lUAtE=
Subject key identifier: CA:ED:FE:9E:E5:A8:AF:F5:3D:95:22:1F:EB:94:10:7B:00:40:22:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01536B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C85AB3E2F3011F08F4656ABDAE4EC9C.roa
Signing time: Mon 12 May 2025 12:55:48 +0000
ROA not before: Mon 12 May 2025 12:55:43 +0000
ROA not after: Tue 17 Jun 2025 12:55:43 +0000
asID: 9304
IP address blocks: 45.196.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86891 (0x1536b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 12:55:43 2025 GMT
Not After : Jun 17 12:55:43 2025 GMT
Subject: CN=6821efd4-cff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cc:8c:ba:46:62:5a:67:54:2b:fc:12:30:a2:
63:fd:8a:a7:df:ac:93:89:01:d0:8d:52:30:de:a5:
ab:da:cb:7e:cd:70:55:cd:48:6a:6f:85:13:92:e9:
dc:be:af:d1:b2:4d:d2:49:e2:e3:c8:4a:4a:12:18:
83:09:8b:7f:47:86:09:61:6f:3c:3a:b8:bd:d6:fe:
f8:26:db:f4:4c:45:f8:fd:a8:76:b3:d5:b9:b7:00:
25:e1:46:1e:ac:e3:4d:fb:5b:3e:e5:69:bf:2e:6a:
32:cd:14:38:2b:0f:e1:4b:89:20:89:76:2b:f6:d9:
b6:e1:63:e4:fc:3a:9d:eb:ec:f8:52:ce:97:3f:b6:
ea:d7:b2:6a:35:98:cc:e8:68:0b:80:49:9a:a4:d2:
68:ba:e6:7f:fe:6e:e7:eb:f7:5d:af:91:2f:ef:02:
be:8d:2f:b2:e5:e2:1d:32:99:b5:16:2d:f2:3b:96:
3f:37:68:5e:e1:f1:32:9d:1d:11:76:e6:78:5e:61:
fb:4f:ae:b5:38:d6:fa:ef:4d:b2:7f:39:f1:1c:b5:
00:f4:7f:3f:12:c3:5c:52:be:8b:c0:c0:85:98:ad:
a6:ed:b4:3b:cb:7f:6b:60:a6:a7:10:b5:93:5b:26:
c4:d0:20:2c:13:70:02:81:95:ce:31:d5:0f:2e:a1:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:ED:FE:9E:E5:A8:AF:F5:3D:95:22:1F:EB:94:10:7B:00:40:22:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C85AB3E2F3011F08F4656ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.228.0/24
Signature Algorithm: sha256WithRSAEncryption
09:09:d3:df:94:b0:42:78:a8:e8:6b:91:e3:5a:a3:d4:8a:75:
a6:2b:06:42:19:18:60:7a:1f:20:d4:4a:12:0e:fc:0c:48:6a:
1f:d0:13:eb:b0:11:36:a7:de:0a:72:d2:b7:8e:9d:e9:83:19:
75:40:48:1c:99:ff:10:f7:b7:b3:25:0c:23:29:ca:a6:58:9d:
a0:83:50:47:07:b8:d5:e6:3e:48:3a:1a:18:ac:16:b5:d9:8a:
ec:98:1c:0d:ca:80:a5:4b:a9:4f:fb:f3:9f:aa:d6:6a:a5:2a:
c6:ff:3f:bf:91:a6:14:81:2f:0b:0a:cf:1f:55:47:33:4f:37:
22:92:ec:4e:0f:6e:19:10:b0:1a:54:c8:48:98:3a:1a:3a:14:
80:9c:77:19:36:92:4c:8f:8a:9f:25:1c:44:52:13:fc:45:e7:
d6:5f:05:82:bd:4f:18:75:2a:89:1e:36:03:74:d5:fa:2a:07:
87:0e:56:6d:2b:bb:c3:6c:97:12:66:9c:b6:84:72:54:3c:ff:
2d:25:09:d5:ad:f0:99:3b:ac:f0:39:fa:2e:b3:63:ad:cf:aa:
f2:e9:46:f0:bf:fc:29:2f:64:13:79:66:08:e3:ff:2d:dc:21:
d7:fb:ab:e5:0e:c5:6d:08:91:88:1e:63:36:62:47:18:19:bc:
58:2e:ac:62
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVNrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTEyMTI1NTQzWhcNMjUwNjE3MTI1NTQzWjAYMRYw
FAYDVQQDEw02ODIxZWZkNC1jZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5cyMukZiWmdUK/wSMKJj/Yqn36yTiQHQjVIw3qWr2st+zXBVzUhqb4UT
kuncvq/Rsk3SSeLjyEpKEhiDCYt/R4YJYW88Ori91v74Jtv0TEX4/ah2s9W5twAl
4UYerONN+1s+5Wm/LmoyzRQ4Kw/hS4kgiXYr9tm24WPk/Dqd6+z4Us6XP7bq17Jq
NZjM6GgLgEmapNJouuZ//m7n6/ddr5Ev7wK+jS+y5eIdMpm1Fi3yO5Y/N2he4fEy
nR0RduZ4XmH7T661ONb6702yfznxHLUA9H8/EsNcUr6LwMCFmK2m7bQ7y39rYKan
ELWTWybE0CAsE3ACgZXOMdUPLqHVnwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMrt
/p7lqK/1PZUiH+uUEHsAQCLcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82Qzg1QUIzRTJGMzAxMUYwOEY0NjU2QUJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTkMA0GCSqGSIb3DQEBCwUA
A4IBAQAJCdPflLBCeKjoa5HjWqPUinWmKwZCGRhgeh8g1EoSDvwMSGof0BPrsBE2
p94KctK3jp3pgxl1QEgcmf8Q97ezJQwjKcqmWJ2gg1BHB7jV5j5IOhoYrBa12Yrs
mBwNyoClS6lP+/OfqtZqpSrG/z+/kaYUgS8LCs8fVUczTzcikuxOD24ZELAaVMhI
mDoaOhSAnHcZNpJMj4qfJRxEUhP8RefWXwWCvU8YdSqJHjYDdNX6KgeHDlZtK7vD
bJcSZpy2hHJUPP8tJQnVrfCZO6zwOfous2Otz6ry6Ubwv/wpL2QTeWYI4/8t3CHX
+6vlDsVtCJGIHmM2YkcYGbxYLqxi
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:25:21 2025 by rpki-client