Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83DF3CE2356A11F0958CBDD8DAE4EC9C.roa
File: 83DF3CE2356A11F0958CBDD8DAE4EC9C.roa (raw, json)
Hash identifier: VUqQYxpH1T6y4lFZABbToYorb3rAOmwGmdRzJSWblqE=
Subject key identifier: 98:24:88:41:30:F0:B1:F2:84:8E:94:1F:6F:48:33:13:EB:3C:81:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01563E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83DF3CE2356A11F0958CBDD8DAE4EC9C.roa
Signing time: Tue 20 May 2025 11:06:45 +0000
ROA not before: Tue 20 May 2025 11:06:40 +0000
ROA not after: Fri 27 Jun 2025 11:06:40 +0000
asID: 48031
IP address blocks: 45.200.181.0/24 maxlen: 24
45.200.182.0/24 maxlen: 24
45.200.183.0/24 maxlen: 24
45.200.184.0/24 maxlen: 24
45.200.185.0/24 maxlen: 24
45.200.186.0/24 maxlen: 24
45.200.187.0/24 maxlen: 24
45.200.188.0/24 maxlen: 24
45.200.189.0/24 maxlen: 24
45.200.190.0/24 maxlen: 24
45.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87614 (0x1563e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 11:06:40 2025 GMT
Not After : Jun 27 11:06:40 2025 GMT
Subject: CN=682c6245-33bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:36:5c:17:21:94:ee:b0:82:05:74:1f:b1:
8e:17:c7:3f:d3:09:e3:56:fb:1b:75:9f:33:61:69:
b8:e6:9a:25:89:16:40:e5:45:54:94:a1:80:d8:56:
77:a3:5a:53:79:63:a9:3f:96:84:11:12:86:e4:10:
83:a2:b7:a7:52:e5:1b:a4:87:4a:df:0c:78:e1:8b:
81:fe:f5:76:49:be:e1:74:08:c3:6e:7e:69:09:78:
0c:2c:e7:b8:37:64:34:31:aa:37:7b:36:d0:ee:09:
31:93:89:d3:1d:cb:99:ed:88:2e:7b:12:13:fb:3d:
c8:f0:71:9f:33:38:ef:94:f0:79:ab:97:1b:ff:f7:
37:b7:2d:01:e7:39:fd:2a:81:b0:ad:29:dd:b6:5c:
56:f8:74:2b:b0:86:20:fe:97:28:bc:98:4d:29:b4:
92:f7:4d:cc:0f:bb:08:5c:6a:44:47:81:fd:8f:24:
d0:2e:0a:f8:0e:28:1e:2a:22:8a:cb:75:f7:7c:49:
83:4a:ff:8b:fb:bf:d8:26:8e:1f:c5:95:cd:f7:6d:
b4:7e:27:69:22:a2:a8:0a:db:37:4a:ab:eb:6d:4d:
8f:4c:64:5b:1a:38:3c:41:86:64:fc:7d:08:d1:b5:
8a:85:c9:b4:5b:23:f8:2a:b9:14:4e:7e:d3:58:fd:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:24:88:41:30:F0:B1:F2:84:8E:94:1F:6F:48:33:13:EB:3C:81:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83DF3CE2356A11F0958CBDD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.181.0-45.200.191.255
Signature Algorithm: sha256WithRSAEncryption
2f:c1:0d:b9:34:cc:11:8c:08:5d:7c:db:56:1e:1c:85:6f:44:
ac:7b:9c:e2:0d:8d:54:09:6f:86:06:0c:e1:4d:b5:16:a0:60:
40:5b:47:52:37:88:ef:59:fe:40:6d:22:fa:ff:c2:0f:d7:7c:
00:a4:b6:0a:39:4d:8c:e6:ba:6f:ba:e4:2c:92:63:91:c4:32:
1e:86:91:bf:ad:44:24:89:bd:87:ec:2b:a4:9b:07:5e:86:33:
16:98:90:43:97:25:23:09:0a:a7:cf:b5:74:44:a7:a7:d1:ca:
09:84:2a:98:2f:0d:6e:6b:4a:94:f1:f4:ac:73:74:21:c1:7d:
2b:f3:8f:d0:ff:7a:2f:78:d4:c3:41:8f:4f:4f:76:d8:50:ce:
ca:d2:c4:aa:ff:55:d3:0c:a6:c1:fa:45:12:1f:31:da:28:55:
f1:ba:db:8c:d3:f7:70:b3:35:ca:59:28:a1:49:2b:92:b3:57:
c8:5d:0f:23:bb:f3:d7:6a:fb:1b:14:4d:49:c3:c1:09:08:6a:
b3:01:ae:a7:82:ca:0a:19:4a:c5:bc:dc:1e:4a:01:70:ed:57:
b0:dc:06:4a:d4:17:80:8d:c8:b4:95:47:79:48:19:dc:ab:a8:
b5:10:e0:31:76:1f:db:46:9f:09:28:fa:71:da:79:f5:b7:0e:
7a:22:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:26:18 2025 by rpki-client