Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/516C56DE299711F0AEAA24BDDAE4EC9C.roa
File: 516C56DE299711F0AEAA24BDDAE4EC9C.roa (raw, json)
Hash identifier: VNM/WDuPfuTgINY5R53Qx6nrxMhFd67A8lnIrpEqkzw=
Subject key identifier: 1E:EF:42:B9:87:2C:F0:6A:9D:FF:75:7C:C2:CB:93:8B:C9:17:62:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01520D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/516C56DE299711F0AEAA24BDDAE4EC9C.roa
Signing time: Mon 05 May 2025 09:57:13 +0000
ROA not before: Mon 05 May 2025 09:57:08 +0000
ROA not after: Thu 04 May 2028 09:57:08 +0000
asID: 17561
IP address blocks: 45.195.19.0/24 maxlen: 24
45.195.20.0/24 maxlen: 24
45.195.21.0/24 maxlen: 24
45.195.22.0/24 maxlen: 24
45.195.23.0/24 maxlen: 24
45.195.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86541 (0x1520d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 5 09:57:08 2025 GMT
Not After : May 4 09:57:08 2028 GMT
Subject: CN=68188b79-73f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:5d:25:52:ce:5f:4f:7c:19:b3:52:98:00:
64:55:a3:ea:b9:70:0a:b3:0b:e0:eb:55:a5:fa:c9:
5c:83:39:4e:6c:7d:0c:87:f8:bf:17:5c:67:b1:31:
57:f9:a3:09:41:ad:b2:ad:0d:86:83:54:bf:1b:df:
2f:40:16:fc:12:65:5b:00:da:16:3a:5f:56:9e:94:
00:7d:43:05:2b:fe:f4:a3:31:b3:ea:55:34:03:d3:
7c:d2:69:0b:8b:a3:30:a6:87:ff:a8:d2:0e:0b:16:
26:fa:de:ed:e7:5e:a9:57:3d:8a:91:98:b3:9d:fe:
c1:91:ac:37:ae:09:1a:df:df:8f:9f:d5:dd:a9:fb:
34:9d:df:ad:86:1d:de:fe:f3:ce:12:b7:7d:6c:83:
fb:cc:bd:60:21:38:94:9d:a6:5c:15:13:a4:40:fb:
76:67:89:5e:16:69:22:85:7b:d4:ac:47:af:5f:54:
45:82:1a:20:60:5e:54:ea:ba:49:ba:66:3a:d7:a0:
5c:7f:ef:c3:d7:7a:89:fb:49:6e:26:13:ce:10:9a:
5e:af:ac:13:00:88:f5:b5:d3:45:90:7f:40:72:f1:
0e:14:39:b6:7c:92:74:ad:c9:c5:53:ae:f1:c0:d4:
68:e2:b5:31:b0:26:0f:42:65:a9:24:b8:13:b9:5f:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EF:42:B9:87:2C:F0:6A:9D:FF:75:7C:C2:CB:93:8B:C9:17:62:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/516C56DE299711F0AEAA24BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.19.0-45.195.24.255
Signature Algorithm: sha256WithRSAEncryption
64:f8:61:84:cd:75:ad:1f:a8:7d:17:85:ae:2c:99:c1:36:a5:
41:88:5d:31:64:3c:90:7c:c3:83:f0:bd:fe:9f:33:6e:35:b2:
ad:ef:c4:a0:a2:b5:7f:d6:bb:53:fb:73:95:a5:c7:8f:74:3e:
fa:8b:e1:9c:d3:b5:10:a0:b5:37:23:ec:bf:07:c2:b5:d7:71:
92:53:59:bc:ce:b9:14:e3:a5:b3:e0:aa:83:8c:5f:5c:0b:ac:
ad:cc:67:47:1b:6b:72:15:7b:b0:d3:72:5c:fb:0c:57:68:06:
da:10:7b:59:2d:0f:d5:62:80:69:f0:53:bb:65:12:27:db:b8:
f8:d8:9c:f9:41:d3:19:49:16:20:56:f8:2f:23:59:25:47:f2:
12:e2:fe:60:8f:63:e4:53:24:6a:a9:95:e0:ea:99:b0:97:c6:
2b:fa:1c:cf:19:7a:07:cf:11:3c:23:c3:51:1c:e0:5b:6e:73:
29:13:03:e9:4b:5d:9f:a4:39:15:14:51:83:bf:25:90:0d:a2:
f0:6b:45:38:fa:03:5a:7a:3b:86:07:f6:6d:25:6f:7e:2e:49:
5e:08:5b:71:fd:3a:b7:07:9e:13:40:7b:97:b9:73:f3:ac:6d:
27:3e:60:31:63:33:10:9f:1c:27:c8:ed:3e:b9:d0:3d:b8:1c:
1b:d0:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:29:21 2025 by rpki-client