Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94097E5A244111F0ACD41682DAE4EC9C.roa
File: 94097E5A244111F0ACD41682DAE4EC9C.roa (raw, json)
Hash identifier: mfw2FCNml7gNVTC+8VMSbSSsbrYo11oHtIL5WSJ2eos=
Subject key identifier: B4:3F:54:82:E7:FE:B9:00:96:A1:5F:E6:F9:22:08:41:2B:AE:CB:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94097E5A244111F0ACD41682DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 15:00:53 +0000
ROA not before: Mon 28 Apr 2025 15:00:48 +0000
ROA not after: Tue 03 Jun 2025 15:00:48 +0000
asID: 214143
IP address blocks: 45.192.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Jun 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85897 (0x14f89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 15:00:48 2025 GMT
Not After : Jun 3 15:00:48 2025 GMT
Subject: CN=680f9825-c3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:2d:d4:28:5d:3c:bf:e2:85:ca:2f:ae:ed:
ba:04:2f:f9:6d:2e:27:8d:ec:55:15:7a:dc:c3:e8:
67:42:05:b3:da:2b:bc:73:e5:6d:19:f6:f1:04:cd:
bc:93:de:93:ae:78:9b:d7:4d:e5:fd:d1:0b:75:0d:
22:84:04:46:16:a1:e2:18:77:f1:ca:e0:3b:ea:6a:
b4:fe:0a:10:88:4b:c5:12:2b:6b:44:17:f5:35:c2:
97:f6:fb:e5:1c:bf:8a:5e:24:d4:9c:5a:02:1e:b0:
27:d0:98:f7:68:41:2d:c0:d0:53:f1:94:17:12:01:
2d:44:56:17:6e:6b:e2:64:59:e0:d2:b8:34:42:f5:
84:ab:94:1f:35:d1:3e:5a:9f:a9:b1:11:c6:c7:a0:
f3:ad:9e:59:fb:e1:dd:e3:09:72:a6:dd:3f:ed:9c:
ce:67:1f:e0:7c:7d:a2:e1:75:eb:51:88:d5:e1:93:
5b:ab:7a:93:7d:6e:24:f7:3b:3f:52:a0:be:8f:69:
b7:d0:82:70:e9:ee:bb:63:c2:d9:3f:f3:e6:e6:92:
8a:ac:31:21:0b:a2:cf:32:18:ee:9b:35:df:c8:04:
49:77:a0:6e:18:35:09:ec:aa:ea:76:48:6f:30:11:
b6:db:f5:84:c9:cd:64:db:e3:58:09:e0:5a:c5:34:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3F:54:82:E7:FE:B9:00:96:A1:5F:E6:F9:22:08:41:2B:AE:CB:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94097E5A244111F0ACD41682DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.235.0/24
Signature Algorithm: sha256WithRSAEncryption
42:49:67:fd:69:d8:b7:7d:d0:a1:52:01:d3:b3:9b:a0:55:da:
ee:6f:67:a6:bd:db:7b:bd:bf:02:b1:76:c7:b8:cf:bd:58:32:
c1:00:2f:f9:43:77:ae:f0:e7:38:95:36:e0:64:a7:3b:1d:b8:
fc:53:7a:ad:bd:60:8e:d4:f2:63:b9:df:ab:c3:1b:31:ec:aa:
b4:b2:22:89:56:d6:04:6d:15:b5:6b:05:74:2b:d3:f2:d7:61:
b2:33:09:6a:f7:2f:7a:bc:ae:80:6f:58:57:b8:ad:85:c9:ea:
42:dd:bd:27:f4:34:03:ac:91:c2:ef:3d:62:15:a7:8c:b8:c7:
86:e6:26:8a:3b:74:00:00:5d:d2:50:bb:37:74:c8:b6:a2:89:
05:99:74:bd:05:95:df:46:14:54:2e:6a:0f:f1:c7:f3:c7:23:
bb:78:1f:22:1c:67:92:cf:4a:f6:51:cb:87:ff:8a:2f:3f:a3:
39:87:d4:35:8e:ba:46:4d:b1:68:fd:a5:f1:5b:d1:c3:d7:28:
bc:f1:3f:7e:aa:f6:07:a5:f7:59:c9:64:a4:7b:fe:fc:86:81:
75:d7:fd:cc:ec:f0:e1:81:9b:16:be:64:a3:4c:25:4b:19:48:
91:a1:7a:be:77:b7:e0:82:39:0f:98:ce:59:c4:c8:8a:fa:b9:
4f:ac:0a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:34:25 2025 by rpki-client