Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD9B75E437D311F0A39076CCDAE4EC9C.roa
File: AD9B75E437D311F0A39076CCDAE4EC9C.roa (raw, json)
Hash identifier: NR63LAxK39y0px+11/ck7iP23PW77SegFfuh/qLohsI=
Subject key identifier: 7E:66:07:19:AF:18:AB:20:C5:E6:87:4B:E8:7D:04:72:F3:9C:C8:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD9B75E437D311F0A39076CCDAE4EC9C.roa
Signing time: Fri 23 May 2025 12:44:34 +0000
ROA not before: Fri 23 May 2025 12:44:29 +0000
ROA not after: Fri 27 Jun 2025 12:44:29 +0000
asID: 9304
IP address blocks: 45.196.250.0/23 maxlen: 24
45.196.252.0/23 maxlen: 24
45.196.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87771 (0x156db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 12:44:29 2025 GMT
Not After : Jun 27 12:44:29 2025 GMT
Subject: CN=68306db2-feda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:59:08:d1:cd:73:8f:58:4e:8b:62:fb:36:
98:58:87:97:fb:e6:5f:d7:01:35:be:11:13:51:33:
28:66:b6:d4:63:0d:da:3a:76:c8:09:41:1d:08:eb:
ad:8c:87:d9:0b:03:84:e3:74:a4:78:0f:9d:7b:cd:
3f:aa:8b:bf:eb:42:67:09:1a:42:ce:b1:b0:4f:3b:
d4:74:3b:4f:f2:56:14:fd:ba:af:89:b2:d4:b9:38:
57:31:95:f7:67:13:9d:06:c3:a7:ac:ce:9b:72:2d:
95:3b:1e:97:88:d8:8c:6b:f6:4b:71:eb:df:a5:2d:
ff:35:9e:7a:f8:83:0e:7e:e6:17:ff:7d:70:a1:f2:
eb:03:a6:ce:c1:d8:ac:6d:2f:04:e2:60:79:38:84:
da:fc:32:08:ca:0a:65:30:2e:9f:56:8f:a0:7b:cb:
0f:ea:a7:b3:f1:18:3a:21:08:58:e5:2a:ef:a4:24:
d4:49:27:19:76:42:7c:44:6c:6c:11:1f:72:4b:65:
89:a0:47:36:61:59:42:87:52:b0:de:4f:36:52:97:
ba:3d:9a:39:38:33:04:e1:59:71:21:e0:3d:fd:1d:
de:42:5d:8e:f4:a4:91:46:98:07:1b:d1:ba:36:0c:
6c:a8:f3:f8:1e:c3:61:b0:c9:97:72:f0:b3:32:f3:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:66:07:19:AF:18:AB:20:C5:E6:87:4B:E8:7D:04:72:F3:9C:C8:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD9B75E437D311F0A39076CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.250.0-45.196.255.255
Signature Algorithm: sha256WithRSAEncryption
0e:c9:dc:24:0e:1d:eb:3c:31:2c:f6:a2:2b:21:51:be:5c:96:
ff:80:5c:42:a1:ce:95:69:07:8f:94:53:e5:1d:fb:4c:8d:19:
dc:da:38:cf:b6:f4:ef:1c:f5:10:4e:51:84:ff:fa:fb:66:9a:
98:00:7f:ca:a2:ff:df:e2:06:50:d3:36:38:61:0e:83:17:85:
67:8e:9d:74:40:86:0c:29:92:52:6f:d0:c5:7a:09:01:59:8e:
c2:91:5e:8d:56:45:71:ee:2a:8b:5c:72:59:b0:ca:d5:35:7f:
9c:56:6d:c8:de:6d:b0:87:fa:1c:fa:ff:60:ff:bb:f1:49:43:
b4:37:45:29:54:df:61:5a:8c:7c:df:31:e0:3a:c9:39:af:64:
e5:c2:6c:bc:f1:3d:37:0a:c3:9e:d6:58:70:14:8c:32:e8:7e:
a1:c3:05:ca:29:12:a6:31:ef:74:46:b4:a6:1d:68:5b:e4:0d:
18:77:7d:04:8d:d6:cb:f1:50:33:62:99:1e:da:91:50:56:80:
5a:b2:32:d8:17:73:23:f4:b1:46:b7:9a:b7:04:d5:5d:ea:cf:
7b:d7:f3:03:4d:c2:b2:3c:fd:86:0c:a2:90:c7:98:d1:08:22:
6e:4d:4a:8c:95:3a:61:6f:db:55:b6:f5:c0:e7:fd:3f:5a:6f:
f8:cd:e5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:42:39 2025 by rpki-client