Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06C85ED4267211F09964F5AFDAE4EC9C.roa
File: 06C85ED4267211F09964F5AFDAE4EC9C.roa (raw, json)
Hash identifier: NzyY7vYgSLk7SsO/4zPncjOHQgnRjzSmCP5MyTuI1HI=
Subject key identifier: 61:11:BC:41:E4:05:E1:56:B0:34:6D:5B:34:86:26:8A:7C:AC:8E:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015136
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06C85ED4267211F09964F5AFDAE4EC9C.roa
Signing time: Thu 01 May 2025 09:52:43 +0000
ROA not before: Thu 01 May 2025 09:52:38 +0000
ROA not after: Wed 26 Apr 2028 09:52:38 +0000
asID: 17561
IP address blocks: 45.196.141.0/24 maxlen: 24
45.196.142.0/24 maxlen: 24
45.196.143.0/24 maxlen: 24
45.197.8.0/24 maxlen: 24
45.197.9.0/24 maxlen: 24
45.197.10.0/24 maxlen: 24
45.197.11.0/24 maxlen: 24
45.197.28.0/24 maxlen: 24
45.197.29.0/24 maxlen: 24
45.197.30.0/24 maxlen: 24
45.197.31.0/24 maxlen: 24
45.197.192.0/24 maxlen: 24
45.197.193.0/24 maxlen: 24
45.197.195.0/24 maxlen: 24
45.197.196.0/24 maxlen: 24
45.197.199.0/24 maxlen: 24
45.197.202.0/24 maxlen: 24
45.197.203.0/24 maxlen: 24
45.197.204.0/24 maxlen: 24
45.197.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86326 (0x15136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 09:52:38 2025 GMT
Not After : Apr 26 09:52:38 2028 GMT
Subject: CN=6813446b-dce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:a8:f7:2e:34:44:d2:70:9c:94:b3:0d:78:
8c:13:93:ef:c4:a8:33:bc:00:06:08:ca:4c:9c:75:
2a:bc:57:5e:05:28:64:d7:0d:dc:9f:05:97:19:0a:
1a:5e:87:e6:ff:79:5d:99:a5:6f:c7:69:99:7e:1b:
6a:35:0d:ae:d6:ed:c4:77:de:d0:03:0d:21:27:c4:
be:c9:4a:bf:87:ff:54:6c:01:9e:fb:a7:02:7b:1d:
25:24:39:3f:ce:8b:91:3f:07:8f:d0:61:74:54:0f:
0d:37:f8:9b:bd:b5:9b:26:b8:f3:79:d7:1c:c4:5c:
82:ed:9d:34:26:f8:82:c0:c9:7b:21:a0:bd:78:74:
66:de:49:b6:4a:96:de:8e:a8:27:3a:da:6a:7b:8f:
b2:58:58:da:8f:92:c8:d6:5b:8c:9d:5b:f4:4c:96:
1b:86:70:58:bc:3e:2b:d6:11:d7:fa:b8:0c:c3:b4:
5a:f8:f2:01:80:e6:8b:c5:1d:56:5b:73:2d:90:b1:
67:31:8a:b5:94:58:4b:bb:4c:81:5b:2d:02:65:06:
ea:78:d3:a6:2b:1b:d9:e5:58:a8:ed:dc:0b:77:4e:
66:e3:78:5a:72:37:a5:29:d2:bb:8e:8e:88:a6:62:
d9:c5:1a:77:c9:a9:41:f3:b5:7c:8b:6b:0b:4e:4e:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:11:BC:41:E4:05:E1:56:B0:34:6D:5B:34:86:26:8A:7C:AC:8E:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06C85ED4267211F09964F5AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.141.0-45.196.143.255
45.197.8.0/22
45.197.28.0/22
45.197.192.0/23
45.197.195.0-45.197.196.255
45.197.199.0/24
45.197.202.0-45.197.204.255
45.197.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d7:83:90:bb:36:62:72:e2:d1:e2:99:ad:cc:f9:4d:07:2d:
7a:60:5b:30:b4:b2:f5:43:37:26:c1:25:1d:a1:a5:9d:d0:c9:
f4:bb:75:24:df:21:e2:a2:32:7d:d5:c6:33:82:9e:7f:3a:1a:
17:1a:4c:84:38:47:67:55:20:d7:37:d1:e8:79:b6:98:8a:43:
87:73:0a:1b:3c:30:59:e9:16:ad:32:23:44:a6:c4:16:ec:b8:
5d:7a:89:88:df:79:25:f5:78:32:66:9e:38:a9:16:ff:89:3d:
d5:40:28:69:8d:70:f7:cc:2a:39:29:57:a3:5f:e8:27:38:b9:
7d:68:e8:07:2a:4f:68:4a:ca:50:21:3f:14:ed:9d:8d:ba:0d:
54:12:d9:ca:be:85:02:68:16:4d:5d:01:4b:0e:cc:9c:e2:88:
91:75:8c:e9:ab:61:53:81:c6:69:52:4c:99:ce:40:d7:89:a7:
a8:b6:da:01:01:6f:1c:f5:71:1a:2a:00:6e:dd:b9:cb:f4:d8:
c8:e2:fd:0e:aa:b3:25:7c:ea:8c:46:75:d3:54:1e:98:85:9d:
67:4d:3e:a9:9b:e7:4b:45:b3:5d:03:07:61:0f:bc:70:13:3c:
fe:16:c4:f5:49:74:36:d5:37:69:b9:71:d6:e8:a9:65:95:78:
0b:08:7b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:23:03 2025 by rpki-client