Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AF6C024247A11F09DB336F5DAE4EC9C.roa
File: 2AF6C024247A11F09DB336F5DAE4EC9C.roa (raw, json)
Hash identifier: +GnBaQgx1u+bBixx6EUD6GYNRKIsL2LArK5kKBmmNVQ=
Subject key identifier: F1:E5:60:F0:79:03:4D:0E:9F:13:FC:04:FC:E1:D1:01:B7:33:DD:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AF6C024247A11F09DB336F5DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 21:45:58 +0000
ROA not before: Mon 28 Apr 2025 21:45:53 +0000
ROA not after: Fri 13 Jun 2025 21:45:53 +0000
asID: 63139
IP address blocks: 45.197.125.0/24 maxlen: 24
45.197.126.0/24 maxlen: 24
45.197.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86003 (0x14ff3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 21:45:53 2025 GMT
Not After : Jun 13 21:45:53 2025 GMT
Subject: CN=680ff716-3d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:31:22:92:8d:c4:ac:27:0b:f9:37:a5:38:
5c:0c:21:61:55:b5:bc:a5:6b:73:15:5d:90:37:0d:
ae:f7:15:93:d6:7f:ce:a9:41:51:b0:fe:ca:92:80:
97:65:9e:1c:03:98:e0:cf:22:76:e6:7d:ca:5d:44:
ca:db:0f:57:db:aa:43:00:b6:ad:38:ad:53:43:41:
1f:db:41:12:b6:7e:26:63:33:0d:50:12:8b:52:f7:
28:b7:ab:6f:67:d2:79:70:7f:a2:3e:77:77:77:62:
5e:23:fc:0f:0b:80:73:c3:1a:30:0e:88:44:a0:07:
f0:c6:43:4a:fc:9e:a9:be:76:0f:a9:83:c9:d9:78:
f1:d5:21:8b:2b:c4:23:c3:ce:8e:2d:45:28:fd:c1:
46:11:00:ed:63:02:77:6d:03:9f:e5:75:21:12:50:
78:82:71:a7:36:b0:98:b6:23:58:cb:f5:df:72:2d:
a2:59:cb:e6:62:5b:a5:26:76:c0:dc:a0:89:73:fc:
42:50:ce:a7:5c:d1:ae:32:2a:01:d9:82:2f:99:80:
e6:8a:9e:0a:8e:b7:e5:7e:49:c8:60:fd:19:8a:a4:
0c:92:14:42:e7:cf:c5:1d:5c:44:d8:90:c4:c3:91:
b6:9d:e0:60:e8:18:56:02:76:b9:dd:d4:2f:35:da:
ea:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E5:60:F0:79:03:4D:0E:9F:13:FC:04:FC:E1:D1:01:B7:33:DD:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AF6C024247A11F09DB336F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.125.0-45.197.127.255
Signature Algorithm: sha256WithRSAEncryption
11:ff:5f:93:60:75:69:e1:c7:e8:5d:e7:65:23:d5:16:11:10:
7c:d3:86:1a:7c:45:72:89:0d:8c:1b:f1:37:a2:39:80:5c:2b:
7d:b1:01:df:39:d3:a0:3a:c5:6c:2d:88:c9:b9:2e:89:ea:f4:
8c:87:e0:06:9d:12:c2:a3:27:83:3f:fd:5b:ef:d6:1d:68:4b:
e3:11:b4:4b:61:86:77:ef:b6:d1:18:e5:c9:80:dd:de:28:29:
ea:ee:6e:79:9c:6c:ff:00:b8:23:24:ea:d8:95:52:e9:c0:a4:
7a:33:12:7d:f6:cf:30:34:a2:d0:07:4c:8b:96:a7:01:6b:c3:
ab:73:26:dd:11:34:2b:f4:01:7d:55:40:61:07:2f:81:46:d0:
1d:fb:01:04:ef:13:cf:2d:ce:7b:d0:ce:2e:2d:ba:38:a9:92:
3b:6b:11:72:8c:86:f7:01:1a:2f:1b:ac:88:6d:ae:0e:7b:88:
49:71:5d:9c:7e:60:31:dc:c1:65:da:4b:8d:b1:77:34:fa:94:
97:20:d5:e0:3d:08:c6:83:5d:31:0f:41:12:92:e0:b6:ba:e1:
87:ab:cf:9e:9a:e3:42:cf:6a:ef:89:f8:87:75:bf:80:c5:5b:
c0:f3:03:ef:03:26:b1:85:62:e6:34:1c:c1:89:b2:d8:67:fc:
5b:ea:39:af
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAU/zMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI4MjE0NTUzWhcNMjUwNjEzMjE0NTUzWjAYMRYw
FAYDVQQDEw02ODBmZjcxNi0zZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyPAxIpKNxKwnC/k3pThcDCFhVbW8pWtzFV2QNw2u9xWT1n/OqUFRsP7K
koCXZZ4cA5jgzyJ25n3KXUTK2w9X26pDALatOK1TQ0Ef20EStn4mYzMNUBKLUvco
t6tvZ9J5cH+iPnd3d2JeI/wPC4BzwxowDohEoAfwxkNK/J6pvnYPqYPJ2Xjx1SGL
K8Qjw86OLUUo/cFGEQDtYwJ3bQOf5XUhElB4gnGnNrCYtiNYy/Xfci2iWcvmYlul
JnbA3KCJc/xCUM6nXNGuMioB2YIvmYDmip4KjrflfknIYP0ZiqQMkhRC58/FHVxE
2JDEw5G2neBg6BhWAna53dQvNdrqowIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPHl
YPB5A00OnxP8BPzh0QG3M91JMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQUY2QzAyNDI0N0ExMUYwOURCMzM2RjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtxX0DBActxQAwDQYJKoZI
hvcNAQELBQADggEBABH/X5NgdWnhx+hd52Uj1RYREHzThhp8RXKJDYwb8TeiOYBc
K32xAd8506A6xWwtiMm5Lonq9IyH4AadEsKjJ4M//Vvv1h1oS+MRtEthhnfvttEY
5cmA3d4oKerubnmcbP8AuCMk6tiVUunApHozEn32zzA0otAHTIuWpwFrw6tzJt0R
NCv0AX1VQGEHL4FG0B37AQTvE88tznvQzi4tujipkjtrEXKMhvcBGi8brIhtrg57
iElxXZx+YDHcwWXaS42xdzT6lJcg1eA9CMaDXTEPQRKS4La64Yerz56a40LPau+J
+Id1v4DFW8DzA+8DJrGFYuY0HMGJsthn/FvqOa8=
-----END CERTIFICATE-----
Generated at Sat May 10 10:26:58 2025 by rpki-client