Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7C63B5036F111F0AA869D94DAE4EC9C.roa
File: F7C63B5036F111F0AA869D94DAE4EC9C.roa (raw, json)
Hash identifier: HQZTPCbzpRpvMNP8hcTm4M8IGf7uvnKGN3xTm0vsIS4=
Subject key identifier: EE:11:F3:18:2E:40:0F:69:AE:2E:DB:C7:D7:B3:DE:7A:B8:AC:23:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01567C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7C63B5036F111F0AA869D94DAE4EC9C.roa
Signing time: Thu 22 May 2025 09:48:52 +0000
ROA not before: Thu 22 May 2025 09:48:47 +0000
ROA not after: Wed 09 Jul 2025 09:48:47 +0000
asID: 63139
IP address blocks: 45.197.67.0/24 maxlen: 24
45.197.68.0/23 maxlen: 24
45.197.70.0/24 maxlen: 24
45.197.71.0/24 maxlen: 24
45.197.72.0/24 maxlen: 24
45.197.73.0/24 maxlen: 24
45.197.74.0/24 maxlen: 24
45.197.75.0/24 maxlen: 24
45.197.76.0/24 maxlen: 24
45.197.77.0/24 maxlen: 24
45.197.78.0/24 maxlen: 24
45.197.79.0/24 maxlen: 24
45.197.80.0/24 maxlen: 24
45.197.81.0/24 maxlen: 24
45.197.82.0/24 maxlen: 24
45.197.83.0/24 maxlen: 24
45.197.84.0/24 maxlen: 24
45.197.85.0/24 maxlen: 24
45.197.86.0/24 maxlen: 24
45.197.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87676 (0x1567c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 09:48:47 2025 GMT
Not After : Jul 9 09:48:47 2025 GMT
Subject: CN=682ef304-b507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:e0:52:e5:37:66:78:71:01:6e:76:28:b6:
8b:8d:cc:29:8e:cc:50:a5:f2:95:6f:17:e1:96:5a:
41:ab:5f:4d:6f:2c:ab:43:16:17:db:08:da:81:f8:
4e:df:40:00:3d:a6:ce:75:d9:a8:8c:c2:18:8c:7f:
15:2d:f0:ae:b3:07:b4:6a:fc:42:ee:04:54:51:34:
aa:ea:61:b2:50:e7:f7:eb:02:24:0a:13:05:78:b0:
4d:ca:35:d8:e7:e9:bc:fb:7c:16:cb:97:6f:f4:69:
1e:46:0e:d8:f0:f0:02:03:b8:ee:f3:fd:7b:89:51:
42:5b:bc:f2:c5:cd:11:9c:15:db:c5:96:21:13:8f:
2c:38:cf:7b:79:05:93:9c:d4:87:b5:1c:45:0e:70:
ba:bc:ec:33:49:0a:73:fd:91:da:16:90:f5:05:5f:
01:4c:2e:44:1e:b2:be:5c:92:7a:87:31:42:77:c1:
20:c0:37:f4:37:4d:f0:fb:0e:21:f7:fc:7c:6c:f4:
c6:7c:c3:82:0c:e9:dc:5b:96:42:fe:28:56:ad:1c:
31:92:82:ae:ad:dc:f7:5d:f3:71:c2:e3:b1:a0:8a:
95:8c:33:9e:15:30:4e:08:3c:be:3b:2d:b0:00:2c:
54:c4:33:dc:63:c2:d1:c1:48:00:98:28:23:69:a8:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:F3:18:2E:40:0F:69:AE:2E:DB:C7:D7:B3:DE:7A:B8:AC:23:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7C63B5036F111F0AA869D94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.67.0-45.197.87.255
Signature Algorithm: sha256WithRSAEncryption
61:49:05:d9:79:3e:41:cf:57:98:26:fe:aa:a7:d6:47:7d:51:
64:0d:91:c6:f6:93:f0:05:2e:03:62:5f:02:03:51:44:1b:f1:
15:80:5c:e8:7a:67:e7:8e:a2:80:79:71:f5:b0:a4:bd:cb:35:
04:17:a3:ac:f7:d2:8a:f0:fd:8e:da:f5:e7:bb:db:55:eb:e6:
69:5f:df:9b:43:aa:6a:1e:db:d9:1c:e1:b4:9d:2f:d9:26:fe:
1c:fd:fd:37:a3:e4:5a:f8:5b:a1:44:f4:a0:5b:8e:0d:c4:13:
64:07:c4:2d:12:d6:ab:3b:f1:35:a1:ac:da:35:b9:3f:75:6d:
85:25:d6:0c:b9:d3:f1:99:e5:df:2b:49:73:ee:5c:86:b9:77:
17:33:6e:e5:3e:75:2d:00:de:01:39:65:7b:36:21:3b:53:b0:
6c:e3:19:03:42:00:0f:e8:ab:1d:1b:98:57:1a:95:be:80:e4:
8d:28:cf:ae:94:d4:5e:28:da:bc:62:3f:6a:0c:b1:ec:c3:11:
64:f6:d1:89:82:a0:c5:da:33:cc:6e:18:b9:7d:09:ac:85:98:
3e:c6:5d:bc:76:eb:b9:e9:b5:7f:1b:94:43:c3:fd:db:19:5a:
1a:4b:08:5a:73:51:37:0e:1e:a3:04:de:1a:21:90:0c:f1:df:
4c:d7:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:45:25 2025 by rpki-client