Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B6107AC247911F0B064B7F0DAE4EC9C.roa
File: 5B6107AC247911F0B064B7F0DAE4EC9C.roa (raw, json)
Hash identifier: ewTW8ejeJ9wzZwmI2pXN15m8sB7hvrJzOBAmSGYxNnY=
Subject key identifier: 6E:B1:49:84:80:1E:3B:36:E4:E2:E0:C0:DF:BD:6F:0A:BB:0E:8B:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B6107AC247911F0B064B7F0DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 21:40:09 +0000
ROA not before: Mon 28 Apr 2025 21:40:04 +0000
ROA not after: Fri 13 Jun 2025 21:40:04 +0000
asID: 63139
IP address blocks: 45.197.115.0/24 maxlen: 24
45.197.116.0/24 maxlen: 24
45.197.117.0/24 maxlen: 24
45.197.118.0/24 maxlen: 24
45.197.119.0/24 maxlen: 24
45.197.120.0/24 maxlen: 24
45.197.121.0/24 maxlen: 24
45.197.122.0/24 maxlen: 24
45.197.123.0/24 maxlen: 24
45.197.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86001 (0x14ff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 21:40:04 2025 GMT
Not After : Jun 13 21:40:04 2025 GMT
Subject: CN=680ff5b9-bd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:d0:1e:6e:76:f4:84:13:5e:c1:22:e6:25:
91:9c:d8:b5:f9:78:02:41:40:74:da:70:4c:c1:bf:
e6:84:9e:e8:83:e5:2b:12:be:87:c9:e3:d9:f3:f5:
28:4a:9d:c3:1c:c7:b7:4e:83:f1:3a:41:f9:3c:09:
2a:7e:e2:21:63:c4:60:4e:af:a8:8e:02:3d:c4:64:
a5:52:75:46:a3:06:4e:e6:3a:e4:31:f0:f7:30:de:
b9:50:8d:8b:15:fe:d9:36:33:cb:90:a8:85:e9:74:
af:f1:65:ba:48:70:35:39:e8:ae:c2:08:40:ee:73:
76:ae:5a:e1:6a:ea:d0:d5:23:ab:b6:82:40:ab:a7:
79:38:60:df:9b:76:ef:d1:da:54:b7:8c:8d:7f:21:
3e:9c:52:c2:d2:39:e1:78:db:36:16:42:5d:de:18:
d8:a0:da:53:90:d8:87:8c:b0:c1:f6:49:f8:33:01:
b1:86:c9:4f:89:66:ec:8b:0c:a4:e4:a8:73:24:6f:
3e:67:a3:44:30:60:f9:32:89:df:2e:e7:09:39:d7:
c3:3f:dc:96:5e:e2:4d:2c:99:5c:7e:6c:77:31:9a:
da:b2:74:80:23:80:c1:cc:cf:7b:3c:f6:ca:e1:70:
07:f3:5e:f8:80:7a:23:ec:42:58:19:0e:82:a8:a8:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B1:49:84:80:1E:3B:36:E4:E2:E0:C0:DF:BD:6F:0A:BB:0E:8B:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B6107AC247911F0B064B7F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.115.0-45.197.124.255
Signature Algorithm: sha256WithRSAEncryption
9d:a2:fb:ed:14:5d:6a:0c:98:b5:94:f4:56:80:82:a5:dd:93:
4f:63:a1:1c:b8:bb:5f:d0:aa:10:06:3b:3c:65:1d:e8:c8:16:
00:9e:4c:3b:17:56:1e:f7:df:c4:f4:3a:b7:84:5b:30:45:4d:
8d:9f:de:30:bd:50:12:43:4b:e1:36:22:b1:93:76:e5:ff:1a:
9b:fd:8d:12:f0:ba:fe:0f:9c:54:19:c0:5e:59:78:57:37:df:
8a:c8:13:53:4a:59:26:25:f2:dd:73:a4:9f:d5:24:01:b6:ff:
15:d5:f7:e7:54:ee:f6:2f:a5:14:e7:74:fa:2a:d5:14:bf:ad:
91:e9:07:c0:a9:06:bd:8b:52:54:5e:cc:e9:35:0b:94:75:f5:
f1:c7:96:e7:19:8a:46:6d:ba:25:8d:63:97:27:07:4b:7f:a1:
cb:63:61:e2:38:20:56:95:4c:9b:e6:bb:9c:e6:a2:df:ac:a3:
50:f1:36:1b:c9:30:16:e2:b7:fd:07:b8:e9:b6:e7:5c:71:00:
4e:cc:f1:01:cc:61:c7:8e:1d:68:23:2b:3f:bf:ea:1b:78:f7:
1f:cf:39:3b:aa:2e:0e:ae:cd:7f:5b:3e:1a:70:85:4f:b4:ea:
da:b5:81:06:27:d1:22:fe:3f:e4:44:4f:23:e8:c9:09:60:61:
52:18:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:34:54 2025 by rpki-client