Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBC2F9B23EDA11F09766CD8BDAE4EC9C.roa
File: CBC2F9B23EDA11F09766CD8BDAE4EC9C.roa (raw, json)
Hash identifier: HgaCHF6KW97QRgF/LQc/Z75vmF7NP7pH62CZbCmYA6A=
Subject key identifier: F1:67:D9:33:0B:A5:D9:88:22:01:55:E0:FA:0D:1D:A6:13:4E:30:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01594A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBC2F9B23EDA11F09766CD8BDAE4EC9C.roa
Signing time: Sun 01 Jun 2025 11:23:10 +0000
ROA not before: Sun 01 Jun 2025 11:23:04 +0000
ROA not after: Fri 04 Jul 2025 11:23:04 +0000
asID: 203020
IP address blocks: 45.198.34.0/23 maxlen: 24
45.198.36.0/23 maxlen: 24
45.198.38.0/23 maxlen: 24
45.198.40.0/23 maxlen: 24
45.198.42.0/23 maxlen: 24
45.198.44.0/23 maxlen: 24
45.198.46.0/23 maxlen: 24
45.198.48.0/23 maxlen: 24
45.198.50.0/23 maxlen: 24
45.198.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88394 (0x1594a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 1 11:23:04 2025 GMT
Not After : Jul 4 11:23:04 2025 GMT
Subject: CN=683c381d-1191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:00:73:60:13:b9:ee:23:39:90:ea:41:b4:
bf:cb:db:08:e8:14:65:f9:cd:e2:7f:a3:a9:42:77:
cd:be:9f:4d:15:1c:6f:ed:66:0a:ca:63:56:a5:6d:
b0:cb:3a:83:a4:8f:d6:69:17:49:97:47:14:c9:b1:
cb:79:ea:c6:50:53:ad:0f:13:9f:22:da:23:91:0e:
df:82:f2:48:dc:bc:9a:59:82:51:12:1e:41:41:4c:
13:03:01:2a:0f:cd:76:fa:43:df:11:e0:ee:ba:eb:
89:ed:5e:56:68:d6:e1:f8:1c:7f:35:c1:7f:3c:c8:
2c:1d:3d:b6:b5:9b:b1:84:cf:47:28:57:dc:82:65:
e3:02:19:4f:f9:69:b1:81:f2:e6:b5:46:55:7f:4b:
f9:6a:ff:11:bb:30:ef:ca:ce:20:0a:db:b9:4e:8c:
14:a3:36:c7:fa:b2:7d:e1:17:de:3d:51:c2:0e:02:
5b:5a:07:95:aa:10:95:59:cc:c6:af:eb:fc:b1:1b:
ce:31:fe:f4:40:07:38:5f:86:08:44:8d:84:15:9e:
b8:58:92:38:aa:92:49:93:0d:c2:c8:b8:e3:c3:4a:
87:50:7e:40:d2:33:5e:1f:53:53:5a:92:b9:ca:aa:
98:da:77:b0:34:3b:f6:33:e4:a9:11:83:db:ea:7e:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:67:D9:33:0B:A5:D9:88:22:01:55:E0:FA:0D:1D:A6:13:4E:30:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBC2F9B23EDA11F09766CD8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.34.0-45.198.53.255
Signature Algorithm: sha256WithRSAEncryption
70:83:fb:0a:cd:e0:a1:07:42:43:d5:f7:bb:61:b8:d8:1c:ce:
cc:e6:27:9e:55:37:93:0b:e0:95:e2:c6:8f:32:46:6e:47:29:
e4:4f:88:9f:be:02:86:02:4a:72:fc:8e:c4:9a:75:9c:94:70:
9b:07:34:87:8d:91:5c:95:d5:42:bf:ff:dc:fb:05:2c:c2:02:
e0:76:9b:5b:fd:49:2a:50:17:41:5b:15:1c:6c:cf:26:b9:b5:
af:25:7b:97:45:52:53:e1:01:8b:05:90:35:b2:ac:22:31:d6:
1c:bb:e6:e2:8d:16:7b:30:4e:f5:6f:d1:ef:4d:09:d9:03:5a:
83:f0:aa:ac:20:07:28:82:23:67:b8:77:c4:61:11:6b:60:fb:
23:4c:f9:79:b9:6a:85:50:40:dd:55:31:3f:d7:65:cf:87:ec:
c1:9d:7a:0a:14:29:72:25:7b:65:e8:db:2d:7e:50:ea:07:d6:
40:f7:2d:ea:02:c3:5f:1f:f7:71:77:59:31:f2:f6:71:28:92:
64:48:95:87:3a:b1:a7:1a:c6:0e:df:40:79:d6:b5:03:b8:39:
65:49:25:42:b3:07:5a:de:5f:02:b7:e4:ce:8a:ae:03:ff:95:
e2:45:f7:a0:0d:1d:b0:55:8e:4b:11:71:ca:a0:36:13:d4:b6:
00:5d:c9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 01:56:40 2025 by rpki-client