Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9315F17A38A711F0A8FE98B0DAE4EC9C.roa
File: 9315F17A38A711F0A8FE98B0DAE4EC9C.roa (raw, json)
Hash identifier: 41LOCF6Ec7hCq1xYBZytJprAqPlIZY+PfK2humpFnug=
Subject key identifier: 8A:95:08:EF:98:F6:A3:9C:0E:82:50:6A:B6:74:8E:BA:57:EE:90:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015764
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9315F17A38A711F0A8FE98B0DAE4EC9C.roa
Signing time: Sat 24 May 2025 14:01:23 +0000
ROA not before: Sat 24 May 2025 14:01:18 +0000
ROA not after: Tue 24 Jun 2025 14:01:18 +0000
asID: 6079
IP address blocks: 45.198.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87908 (0x15764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 14:01:18 2025 GMT
Not After : Jun 24 14:01:18 2025 GMT
Subject: CN=6831d133-d30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:93:8e:4f:fc:6b:2a:47:96:48:e7:16:25:
95:4d:5e:4e:43:44:7b:e0:10:1f:bd:54:19:08:2b:
01:de:f8:05:7a:71:c2:4d:a2:36:ee:e9:ed:26:4e:
28:1c:a8:a1:83:70:de:54:30:5d:7e:19:d9:6b:f9:
14:6d:d6:4e:89:af:24:6e:81:dd:82:a1:60:48:c3:
f1:f3:b9:14:34:25:c1:e6:c4:77:85:23:08:60:bf:
fc:5e:ca:6a:62:e0:d0:85:bc:20:e8:df:13:00:8f:
84:5c:de:f4:36:de:2c:1b:93:c6:21:88:e6:39:9b:
86:e9:48:b8:0d:ca:9a:3b:6e:ef:ce:e4:24:f2:38:
a5:2b:f7:71:86:e5:eb:c0:a6:2e:a2:85:52:20:03:
1c:24:9f:11:ee:6c:17:4e:46:6c:0c:41:51:9c:53:
f7:27:97:e1:6f:21:7b:cb:be:cf:e9:53:00:b3:da:
c1:d2:00:7b:cc:a6:9a:64:06:ab:ce:fc:77:31:e6:
00:3c:48:5b:f6:46:73:72:f4:7f:47:ce:82:cd:72:
69:ad:bd:f5:14:24:70:7c:7a:a6:6a:13:ac:2e:e9:
ff:5c:ca:87:25:dd:af:ba:c7:78:0f:a0:09:2a:ef:
93:76:08:72:ae:eb:f5:d3:ca:54:0f:15:6f:44:5f:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:95:08:EF:98:F6:A3:9C:0E:82:50:6A:B6:74:8E:BA:57:EE:90:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9315F17A38A711F0A8FE98B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.153.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c5:dd:41:89:e2:bd:92:e7:3d:ca:1f:ce:6d:30:ce:42:00:
09:63:c1:18:97:34:b3:4e:1b:cc:b5:65:f3:96:d4:b7:f0:47:
4f:cb:61:1a:d3:87:c1:6f:a3:c7:47:16:c1:db:6e:a7:b8:1d:
ed:72:97:64:f6:18:e9:e9:0a:f0:b1:6c:c5:10:16:c3:ce:de:
3e:30:27:7a:fd:f1:7c:04:a4:bb:eb:3e:59:28:56:43:af:10:
f4:af:42:9e:76:f7:a4:37:0b:a4:a0:b0:f3:7a:e9:41:62:bb:
4b:fd:e7:4a:85:95:73:72:9c:6b:56:cb:31:6e:18:02:17:18:
0a:ab:cc:d2:48:d1:26:07:02:54:63:75:24:03:08:bb:e0:54:
6b:ed:05:47:f6:86:2c:86:d0:7d:28:e1:c0:dd:ca:62:4c:4c:
f8:58:2c:54:47:b7:95:64:c9:76:bb:9d:d3:8d:a2:32:cf:56:
7d:71:82:86:e9:d6:60:7a:93:6a:ea:8c:f8:94:0e:fd:bc:ae:
40:1b:d9:1d:dd:de:53:57:ba:3f:8a:a7:c4:23:2b:15:fb:cd:
4b:36:7d:70:f9:6e:05:b5:33:b5:71:32:e5:f2:1d:80:69:08:
ef:81:2b:ee:4c:77:20:a3:ec:58:c9:db:18:ee:a2:5f:ec:1b:
ac:3d:8a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:30:02 2025 by rpki-client