Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6961ABE3E2411F089BCD2E8DAE4EC9C.roa
File: E6961ABE3E2411F089BCD2E8DAE4EC9C.roa (raw, json)
Hash identifier: 36WLOQwTokM05uZJQUcE0/JPCREGFkEG8smxPNDR/QY=
Subject key identifier: BE:09:7B:61:78:E1:96:AB:35:B6:A3:77:F2:FE:32:4F:45:F0:68:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015922
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6961ABE3E2411F089BCD2E8DAE4EC9C.roa
Signing time: Sat 31 May 2025 13:41:06 +0000
ROA not before: Sat 31 May 2025 13:41:01 +0000
ROA not after: Tue 08 Jul 2025 13:41:01 +0000
asID: 44559
IP address blocks: 45.196.106.0/24 maxlen: 24
45.196.107.0/24 maxlen: 24
45.202.192.0/24 maxlen: 24
45.202.193.0/24 maxlen: 24
45.202.198.0/24 maxlen: 24
45.202.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88354 (0x15922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 13:41:01 2025 GMT
Not After : Jul 8 13:41:01 2025 GMT
Subject: CN=683b06f2-8c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:62:c2:5f:20:fc:5f:6c:7a:6d:4d:44:80:
d0:54:f5:a5:58:6e:24:bb:02:bb:2d:89:9b:78:38:
31:1a:af:6c:9c:0d:6b:be:9f:85:e4:ab:3b:c2:3d:
11:fd:41:4e:de:26:60:e5:63:bc:ad:3f:c2:58:8b:
20:5c:2a:26:56:33:44:44:55:24:8a:f1:8f:e0:13:
6d:ed:a6:e0:9f:b1:c2:42:d9:5a:3d:51:01:85:c5:
0c:6e:0e:6e:1d:d4:ab:da:b1:d5:4b:1a:8b:71:19:
56:8a:93:5d:94:cf:c0:d2:c6:b0:95:55:3a:8e:5f:
c6:b4:0e:c3:0a:ff:a8:ff:5c:f2:89:0e:bc:d5:44:
6f:7d:07:30:f9:ad:98:08:9e:ff:3e:b1:35:3b:97:
a8:39:53:5f:e1:df:a5:fd:e8:47:99:9c:ab:3f:f2:
18:04:ce:d1:b1:11:29:8e:74:a7:bd:e8:e6:60:13:
57:d2:f2:f4:23:de:12:26:83:80:cb:2c:2e:59:3f:
e2:20:11:d3:55:8b:b7:54:31:0d:56:80:ff:15:6a:
e6:be:29:c8:5f:f9:c9:3c:2d:87:32:7a:57:d5:9b:
d7:39:26:e3:33:0d:38:45:bb:25:06:df:62:53:e6:
ef:16:00:1a:ea:c3:29:43:93:1e:a3:fb:04:60:95:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:09:7B:61:78:E1:96:AB:35:B6:A3:77:F2:FE:32:4F:45:F0:68:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6961ABE3E2411F089BCD2E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.106.0/23
45.202.192.0/23
45.202.198.0/24
45.202.200.0/24
Signature Algorithm: sha256WithRSAEncryption
57:26:9d:16:e1:bd:6e:c1:53:80:be:5c:3b:50:ff:52:07:a1:
67:14:c2:71:83:83:95:e9:5a:c3:9f:3d:c0:ad:57:21:6e:09:
a4:89:52:34:3a:3b:6a:b1:b6:33:44:e5:d6:45:fd:41:3b:29:
d7:0e:ce:51:2c:0c:c5:ac:c2:bc:86:fb:8f:eb:fc:a2:c5:d6:
ed:f1:2e:3b:06:bb:98:76:c9:c1:c0:fe:4c:1a:2e:21:38:ab:
ca:2b:ae:7f:3f:98:04:b5:eb:d0:8f:a8:df:80:ab:70:3e:16:
15:33:1b:4a:a9:68:36:a5:bb:c6:2b:02:d1:1b:23:1f:82:f0:
c0:90:7f:83:1f:cc:59:fa:04:8c:d0:d9:c5:0a:18:0b:6a:29:
39:23:d1:61:12:f9:31:94:46:0d:dd:d2:a6:10:ee:f2:42:ba:
d4:b6:28:b4:8f:ca:ae:79:07:8a:7a:61:2c:5e:53:6e:fc:a2:
47:e7:79:e3:f8:1a:17:99:43:9a:a0:ad:72:f5:d8:c0:04:2c:
28:6b:19:f6:fa:b9:4b:ad:cd:ca:87:3d:a5:e8:56:50:11:73:
f4:f7:60:c0:34:f1:18:e5:2e:8a:f8:2f:85:b0:9a:30:35:fe:
b9:e4:03:41:5a:9d:97:d3:04:d6:5b:20:56:6b:71:1b:fd:cf:
07:af:d3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:31:10 2025 by rpki-client