Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51FA38A22A5D11F0989839E9DAE4EC9C.roa
File: 51FA38A22A5D11F0989839E9DAE4EC9C.roa (raw, json)
Hash identifier: aJvqVKqqIQ+y+RVKsk5RPRwWDKEz3g3wyGV0Z+/8yFY=
Subject key identifier: 5E:70:A7:FA:55:55:0B:F5:6A:AB:37:03:E3:DD:80:C4:B1:2D:4B:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015251
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51FA38A22A5D11F0989839E9DAE4EC9C.roa
Signing time: Tue 06 May 2025 09:34:35 +0000
ROA not before: Tue 06 May 2025 09:34:30 +0000
ROA not after: Mon 09 Jun 2025 09:34:30 +0000
asID: 139646
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
45.207.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86609 (0x15251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 09:34:30 2025 GMT
Not After : Jun 9 09:34:30 2025 GMT
Subject: CN=6819d7ab-091b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:f6:0a:bf:44:d6:e9:14:55:9b:aa:b5:d2:
87:f9:c5:09:6a:1d:46:4e:8d:f3:0c:48:56:62:36:
3a:22:62:d8:ac:f4:aa:44:08:e9:06:5f:44:dc:4e:
51:3a:33:7e:62:8c:10:15:41:ba:b1:e3:5e:4e:c3:
46:2c:ed:4b:a1:a0:74:01:4e:d8:62:be:2c:bf:69:
b2:70:23:be:a0:50:76:f5:86:55:de:d4:cc:e1:9e:
0a:5a:dc:a0:e9:6d:29:4c:78:96:8c:c8:b4:41:31:
76:75:ac:bf:a7:7e:9b:65:32:4d:05:65:aa:c3:ee:
16:9c:20:f3:80:9e:e4:83:87:59:21:e5:5d:41:3b:
42:23:46:0e:81:c5:f1:d4:8b:dc:8a:65:e9:1c:eb:
26:b4:d1:3f:fe:bf:49:90:06:31:98:d6:ca:3f:2a:
6d:82:9b:3c:1e:86:f3:50:83:14:43:ab:ae:fe:ae:
35:0e:f2:1e:56:dc:1b:ff:a6:1e:4e:ae:24:0d:b9:
ca:75:9c:58:d0:f2:6f:af:fd:3b:a8:7e:54:ae:70:
e0:1c:4f:67:7d:34:86:5e:f0:59:39:7d:91:17:cc:
c5:17:94:6c:fa:5a:82:99:53:eb:50:58:a7:3b:6f:
4f:d8:a9:9c:f3:43:bd:d9:14:b2:e2:cc:16:8b:b4:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:70:A7:FA:55:55:0B:F5:6A:AB:37:03:E3:DD:80:C4:B1:2D:4B:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51FA38A22A5D11F0989839E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
54:fd:53:5a:9f:6a:b2:1f:b8:c3:25:50:5d:57:f9:7d:41:c2:
73:c2:21:9d:bf:27:f5:aa:d0:2c:f6:2f:8d:15:8c:68:53:38:
3b:3a:87:11:dd:51:71:bb:3b:95:54:33:a3:f6:20:75:1a:22:
a0:fd:c1:3e:0d:47:93:25:43:1a:11:0e:c7:48:1b:36:1e:5b:
fc:ff:e3:93:95:5d:58:d8:3e:2d:bf:9a:fd:51:f4:9c:ad:da:
86:f0:17:b7:68:72:db:b1:2d:63:e7:55:4f:54:2a:0e:0e:9e:
9e:ce:87:b3:75:a4:52:65:48:c3:78:11:40:17:83:e6:35:0e:
97:eb:3b:84:5d:3d:d5:9a:7c:95:e1:06:b3:7e:d5:8c:ef:d0:
b8:ca:cc:19:ac:c3:9f:64:6c:08:b4:1c:62:63:91:0c:72:6a:
33:83:86:43:c4:a0:b7:bc:8d:84:9a:4a:c2:39:3b:af:5c:9a:
72:0a:21:59:b6:83:c8:83:b6:ae:a5:ea:fe:7c:7c:22:21:80:
b2:34:29:1f:5c:7a:39:0b:49:6d:3c:13:04:88:01:6d:14:ea:
4d:7f:d0:53:d1:fe:f1:b3:95:fd:ca:0b:53:01:ef:76:37:e0:
81:fb:21:b5:d0:72:02:d5:53:e2:69:b8:cb:f1:08:00:4c:bc:
19:76:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:32:36 2025 by rpki-client