Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5744D8D2240C11F096E5299FDAE4EC9C.roa
File: 5744D8D2240C11F096E5299FDAE4EC9C.roa (raw, json)
Hash identifier: qNTd30c18dXibuzpy7QzYBNKRovei59C+mjigpwHFxY=
Subject key identifier: BE:E6:A2:58:5A:D6:13:4A:97:2A:73:1B:FD:6D:56:73:1C:92:0B:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014EE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5744D8D2240C11F096E5299FDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 08:39:47 +0000
ROA not before: Mon 28 Apr 2025 08:39:42 +0000
ROA not after: Tue 03 Jun 2025 08:39:42 +0000
asID: 13335
IP address blocks: 45.192.222.0/24 maxlen: 24
45.192.223.0/24 maxlen: 24
45.192.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85729 (0x14ee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 08:39:42 2025 GMT
Not After : Jun 3 08:39:42 2025 GMT
Subject: CN=680f3ed3-2cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:7b:2b:69:7d:98:f7:71:e4:02:22:30:e0:
07:5a:0d:50:68:78:e3:43:9d:35:77:2f:90:df:c5:
3b:2a:a6:6c:d2:c2:89:3b:bd:39:d5:01:10:b2:f7:
17:00:41:9b:60:62:55:15:95:81:96:f2:7c:65:20:
fa:7a:b7:bf:2b:ba:5f:36:a3:6e:24:1a:55:6d:32:
d2:fd:ac:ca:fc:96:bc:d9:ba:db:12:0d:dc:cf:16:
ad:91:b9:4f:a2:6a:1f:b3:eb:14:2d:bf:8f:cf:af:
8b:0f:1a:a3:e4:aa:fe:38:67:f2:c8:cd:de:54:c6:
07:f0:a1:c5:34:44:c9:7f:1d:a4:4e:f9:a0:b3:c6:
63:d9:64:38:67:9a:d5:41:05:0f:ac:88:5e:25:50:
b0:70:eb:cd:45:dd:fc:67:a6:73:e8:d3:f7:fb:7d:
1f:13:de:14:8e:b0:77:55:7b:19:47:2f:5c:82:e0:
6c:28:3b:fb:4d:0c:21:8c:83:a6:d4:ba:d0:55:74:
7a:a7:60:8b:1e:7a:50:ad:73:bf:0c:cc:13:ef:46:
73:12:0a:51:a5:f9:c6:00:ea:60:69:71:66:f5:15:
1d:14:2c:d9:2c:15:08:c8:2b:ba:94:81:87:e2:80:
c8:ea:4e:55:3b:94:75:da:50:6f:93:1d:f1:7a:9e:
89:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E6:A2:58:5A:D6:13:4A:97:2A:73:1B:FD:6D:56:73:1C:92:0B:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5744D8D2240C11F096E5299FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.222.0-45.192.224.255
Signature Algorithm: sha256WithRSAEncryption
97:39:6e:48:41:09:43:05:93:79:9d:ad:ca:9c:5d:8b:9e:e3:
ac:0a:2c:58:76:0c:f1:d0:ee:3f:cf:d2:f5:80:c3:8d:25:a4:
50:06:45:8d:da:8e:e8:78:5d:a4:d7:d6:ee:40:b6:fc:2b:b4:
b8:15:79:5e:d2:1f:c1:9b:0c:ac:6a:50:17:5d:51:bb:c4:9e:
4b:52:fc:82:1c:8f:c8:6c:18:fc:e2:74:44:92:33:99:22:fd:
a9:bf:ed:d6:44:e4:07:f4:87:d3:ea:03:3a:b5:e9:90:04:d8:
4b:04:26:f0:64:1a:d1:97:b8:47:95:34:cd:30:ae:05:98:30:
d2:55:b1:8b:55:e8:99:9d:69:b8:62:ce:ce:5d:5d:b4:a3:3d:
d4:d1:d2:7a:1f:7f:3d:16:0a:d2:14:bb:cc:66:bf:85:a2:1d:
96:5d:44:8a:f0:6b:9e:f8:33:8a:e0:70:27:3a:1f:22:18:0f:
a4:12:38:65:7b:e8:62:7d:91:7f:86:e7:bd:5b:d9:17:a0:51:
da:3b:b3:d5:04:cf:99:d0:8a:09:4f:96:3d:a3:e6:06:8c:7a:
56:9d:69:29:fd:9b:9d:8d:14:92:e0:c7:c1:cc:36:ec:27:df:
17:76:55:0c:24:03:8a:63:be:57:5a:21:b1:5c:81:df:80:3a:
51:41:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:05:21 2025 by rpki-client