Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8435C3A6315911F0A2BCE3A7DAE4EC9C.roa
File: 8435C3A6315911F0A2BCE3A7DAE4EC9C.roa (raw, json)
Hash identifier: mYzxPrQEvCmRXwOoU5qGIT7wiL5IA7nQWLH3FtalR6c=
Subject key identifier: 28:8F:CC:16:86:3D:23:63:C6:91:BC:5A:CB:F8:CD:57:C3:C1:A6:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015464
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8435C3A6315911F0A2BCE3A7DAE4EC9C.roa
Signing time: Thu 15 May 2025 06:54:59 +0000
ROA not before: Thu 15 May 2025 06:54:54 +0000
ROA not after: Sat 21 Jun 2025 06:54:54 +0000
asID: 50028
IP address blocks: 45.198.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87140 (0x15464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 06:54:54 2025 GMT
Not After : Jun 21 06:54:54 2025 GMT
Subject: CN=68258fc3-3974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:f5:cf:71:75:76:4a:97:20:56:48:04:eb:
0b:63:43:02:4b:e8:ed:f9:18:83:9e:3c:58:ae:aa:
c3:47:3d:5e:be:37:5d:e5:2f:12:21:a7:1f:54:92:
3a:a7:21:62:82:16:e5:4d:b4:24:8e:0e:7e:8c:81:
68:c5:b6:5d:9b:67:2a:32:9d:12:42:6d:f9:44:84:
af:16:04:de:34:31:66:fb:57:df:70:63:2f:b1:fd:
5d:9a:cf:6e:bc:47:49:1b:09:87:1d:d1:cb:10:c6:
63:bb:6e:22:3e:31:a0:d3:98:4f:10:46:7d:6d:96:
8d:2c:77:fd:6d:3e:13:e3:87:4b:d5:01:07:e9:61:
e9:c3:64:03:08:d9:4a:d2:ee:4a:a2:25:12:70:f9:
ab:d7:e7:f4:13:36:5e:8d:65:15:6e:a2:31:b9:3e:
1d:3f:57:a9:a3:45:86:d0:21:68:42:42:30:06:30:
e4:45:70:e5:4b:65:63:3b:39:d3:da:ac:bf:72:bc:
4f:64:5f:36:5e:d4:06:7c:61:a6:7e:e5:26:5b:10:
b5:91:f0:a7:8a:76:f1:cc:95:84:f9:7c:9a:d9:9b:
28:86:9d:af:26:6d:8a:9d:b2:54:41:47:8a:12:7e:
89:67:13:71:62:d6:fe:97:34:9a:eb:1e:22:f0:96:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8F:CC:16:86:3D:23:63:C6:91:BC:5A:CB:F8:CD:57:C3:C1:A6:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8435C3A6315911F0A2BCE3A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.139.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7f:aa:b8:67:0a:07:93:be:39:5e:d8:9e:25:c3:49:3e:29:
97:53:fe:4f:ad:a5:e6:7b:58:8d:fb:90:54:20:b9:0d:de:81:
76:bd:9a:d6:f6:e2:fa:c8:f4:5b:a8:92:38:68:5d:b6:75:99:
94:48:5a:f0:51:41:2b:74:c1:ac:b9:db:7c:43:4b:e1:65:af:
55:de:34:da:cc:65:54:06:0c:41:31:b2:98:50:d1:a5:5b:72:
0e:3a:d6:6d:04:4d:20:0a:a3:92:94:45:63:00:eb:7a:e2:8d:
1d:31:fe:fe:77:70:64:f6:35:79:6a:ee:52:7d:fb:b9:56:34:
01:e3:10:8a:79:2d:70:ba:7c:9b:af:81:db:87:95:f3:eb:f9:
ad:09:2b:2b:dd:51:ec:b3:bc:c0:a6:31:61:29:31:fe:29:d3:
19:d2:71:f6:fe:35:55:18:99:10:f2:9b:ed:c9:c0:06:1b:f2:
e3:39:a4:ce:68:9e:cb:a5:b2:68:83:9e:8b:ef:99:91:11:5a:
ef:c7:1c:19:41:09:9f:45:c9:74:8b:e7:4a:e5:f2:ec:08:5b:
fd:15:d5:4d:d5:6b:16:37:b9:a2:ba:62:45:28:47:46:85:1f:
6e:cd:ce:86:37:09:d5:93:dd:b3:38:3a:ab:e2:a6:ec:f0:65:
e2:ba:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:43:34 2025 by rpki-client