Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05F92604244811F0A9257DACDAE4EC9C.roa
File: 05F92604244811F0A9257DACDAE4EC9C.roa (raw, json)
Hash identifier: 2HrHKZJ/7xLTSKnp2YPtt91POAeu6txce8VEMIT8yvY=
Subject key identifier: 48:11:CA:3A:9C:22:06:A9:9C:2E:27:9D:55:39:B2:85:85:AF:A8:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05F92604244811F0A9257DACDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 15:47:01 +0000
ROA not before: Mon 28 Apr 2025 15:46:56 +0000
ROA not after: Tue 03 Jun 2025 15:46:56 +0000
asID: 138995
IP address blocks: 45.192.208.0/24 maxlen: 24
45.192.209.0/24 maxlen: 24
45.192.210.0/24 maxlen: 24
45.192.211.0/24 maxlen: 24
45.192.212.0/24 maxlen: 24
45.192.213.0/24 maxlen: 24
45.192.214.0/24 maxlen: 24
45.192.224.0/24 maxlen: 24
45.192.225.0/24 maxlen: 24
45.192.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85931 (0x14fab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 15:46:56 2025 GMT
Not After : Jun 3 15:46:56 2025 GMT
Subject: CN=680fa2f5-a780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:68:2a:a8:0a:5e:f2:f8:90:23:48:81:3e:
8e:f2:2a:b4:54:26:08:0b:66:5f:fc:b7:eb:01:df:
20:23:aa:65:2a:61:ad:4d:1f:6d:89:36:89:3a:08:
4f:85:77:7e:5a:58:66:45:6a:f4:0d:2f:44:d7:11:
57:f8:2c:10:1f:25:b3:fa:f7:5d:62:73:55:26:03:
a8:eb:f9:98:7d:ee:b8:a5:4b:70:f3:ed:7e:c5:f8:
d9:0e:4e:c8:3a:02:91:c0:b8:3b:c0:b0:c5:26:51:
e0:53:55:f6:08:34:54:f9:08:4b:91:61:9d:4c:a0:
81:76:2c:9c:05:ce:40:93:76:ef:53:e7:a1:7f:b5:
98:4a:30:66:e7:f5:29:8e:bf:a4:25:af:8c:66:d9:
bb:53:cb:35:5f:1f:05:e3:d4:c6:1d:bd:1b:0a:5a:
5a:47:37:22:ff:4b:c9:9d:4f:69:33:fb:23:52:b8:
e8:48:82:ca:97:24:b8:72:3d:4f:eb:2a:c0:73:f9:
b9:a4:0f:2e:cc:48:9c:51:ac:b5:62:da:30:db:17:
70:21:1f:a7:55:ef:4b:43:ea:c8:fb:49:2f:4d:9a:
1d:0b:12:68:3f:35:3c:be:ad:b3:53:d9:fa:83:d6:
01:74:5f:f4:3a:f1:1d:ba:e7:f4:c3:a1:27:e8:73:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:11:CA:3A:9C:22:06:A9:9C:2E:27:9D:55:39:B2:85:85:AF:A8:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05F92604244811F0A9257DACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.208.0-45.192.214.255
45.192.224.0-45.192.226.255
Signature Algorithm: sha256WithRSAEncryption
5b:73:20:18:3b:07:62:97:c8:9a:a6:dd:23:0a:72:ba:2f:98:
44:40:3a:7b:a0:0c:8d:4c:13:4b:a5:a5:c9:ee:e0:63:a8:58:
cb:38:dd:1c:3c:9b:1a:ee:47:3f:e1:7e:3a:48:05:64:85:19:
ef:8c:56:fd:45:a3:ee:6e:d7:a4:81:2d:6d:a8:c3:47:7c:5b:
53:d9:8f:b6:da:78:5c:56:da:7c:4d:7c:ac:fa:e9:54:d4:c6:
1c:76:1e:b3:11:7f:33:c2:4c:84:99:14:03:1e:e5:d1:59:9a:
80:4e:c0:c1:dd:52:c6:42:1c:2c:8f:60:a1:5d:c6:62:a1:97:
76:1e:ac:2b:ee:df:57:8d:59:86:b0:e5:b3:3b:c2:a7:ab:85:
45:7b:f6:8c:c4:5a:cf:10:12:d0:cb:9b:e6:d3:b7:33:50:f0:
dc:b0:5d:3e:72:9b:8d:ca:fc:dc:df:05:27:db:29:94:5a:ce:
63:f1:2a:3a:d3:ae:9b:d5:10:56:85:f1:e3:d5:28:8d:86:18:
33:66:12:5a:68:84:a7:fd:34:15:98:a7:b4:a7:55:15:68:77:
66:17:60:7d:f5:03:02:fc:bd:10:bc:7b:81:0b:00:d9:5a:d6:
5a:45:25:37:76:03:94:d7:23:07:1b:14:96:ad:63:5c:6d:3c:
a7:a7:b3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:44:08 2025 by rpki-client