Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2D422FE37C111F084BE98DBDAE4EC9C.roa
File: E2D422FE37C111F084BE98DBDAE4EC9C.roa (raw, json)
Hash identifier: PPE69PrrBLDFLxiKvhNXxBsgWA1F2PO+oH0hNDFX0hs=
Subject key identifier: 0B:B2:43:F9:45:DA:16:24:43:6D:14:04:93:C5:6E:18:78:31:18:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2D422FE37C111F084BE98DBDAE4EC9C.roa
Signing time: Fri 23 May 2025 10:37:13 +0000
ROA not before: Fri 23 May 2025 10:37:08 +0000
ROA not after: Fri 01 May 2026 10:37:08 +0000
asID: 328608
IP address blocks: 45.197.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87742 (0x156be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 10:37:08 2025 GMT
Not After : May 1 10:37:08 2026 GMT
Subject: CN=68304fd8-9b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:72:b7:90:11:11:26:d9:c5:e8:d0:9d:f7:
15:f2:a5:17:ed:b7:2d:17:07:b6:ad:4b:cb:d9:83:
99:e2:7d:17:98:65:14:16:cf:44:a9:be:06:ff:42:
e5:96:42:7b:9c:b9:ae:cf:c0:2a:4c:2e:1f:b6:3a:
0d:65:c2:68:00:12:9c:20:6f:c4:43:47:eb:20:fd:
1b:60:d3:83:f2:ee:90:87:8a:ec:d8:f4:89:ac:4c:
c0:0a:61:3f:6c:cc:19:87:b6:39:95:d3:28:39:ee:
7c:fd:00:91:5b:fc:79:64:9d:4d:77:64:04:6b:94:
dd:3f:76:c5:5a:c8:09:f6:a6:53:c4:34:b3:2c:45:
d6:f2:68:2b:77:12:38:e8:48:d4:d1:24:85:ff:91:
d8:1c:68:61:e5:ba:f6:69:8f:ca:8d:24:c7:54:58:
57:f8:56:14:b1:9b:2b:e0:2e:7b:74:ea:9b:90:e0:
41:df:e8:45:12:b2:72:ee:cb:5d:af:e0:9c:87:17:
5c:e6:fd:73:21:60:f7:a8:ef:b3:d5:b0:96:11:fb:
ae:2f:03:71:50:48:24:7c:40:d9:5c:a3:c7:3d:59:
b7:a5:c2:c7:12:60:0e:f0:7b:50:c8:a0:12:28:6b:
69:a7:f4:fe:67:7a:69:86:15:1d:ee:dd:9a:9e:74:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B2:43:F9:45:DA:16:24:43:6D:14:04:93:C5:6E:18:78:31:18:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2D422FE37C111F084BE98DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:cb:9d:42:68:19:26:78:98:ca:76:9b:dc:e3:40:cd:f0:8e:
b4:3b:fa:11:07:a6:94:63:5c:00:fb:2a:04:63:f1:40:04:00:
4b:9a:ea:12:8d:b4:f9:9b:c8:2a:82:52:07:5b:0d:52:8e:a4:
77:c0:dc:1d:0d:c3:a1:68:a0:6d:4b:5c:5e:be:a2:94:95:49:
8c:a1:e3:4f:cd:42:af:e2:67:12:ad:82:6f:1b:22:1a:ea:0d:
bd:00:01:ab:e7:a3:23:1c:43:11:43:09:19:44:28:89:12:19:
a3:76:b8:1a:14:e6:d5:c7:41:a2:7a:e9:ee:66:d7:1a:56:21:
68:70:46:8b:f1:b2:d6:d3:59:50:7b:8b:46:be:6f:c6:a3:47:
99:43:b8:58:3e:c3:7e:7c:c4:86:0f:33:5c:ab:9b:cc:6d:06:
d6:d7:b4:7a:5b:4e:7d:92:52:22:0a:83:02:89:6f:aa:33:d4:
af:2d:f7:a3:68:5c:82:c2:e0:0d:f5:67:c4:b2:80:ac:1f:cf:
04:55:e1:c9:9a:5d:b0:46:5a:26:50:5d:ec:28:4e:34:33:84:
36:1c:7c:4e:e9:93:13:0b:6d:f5:5f:ca:33:72:73:7d:a5:73:
74:27:c1:39:1d:39:4c:9a:af:65:47:93:14:b1:a5:0f:b1:20:
25:87:d1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:24:55 2025 by rpki-client