Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63169BB2247711F096E041E3DAE4EC9C.roa
File: 63169BB2247711F096E041E3DAE4EC9C.roa (raw, json)
Hash identifier: o/TzSi7h0LryNWoUoehcPBSE2YF3QQdGPkgDxXdNq6o=
Subject key identifier: 4E:A2:56:05:3B:0E:AB:D1:44:B2:CE:30:8E:22:61:55:BD:AC:CD:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63169BB2247711F096E041E3DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 21:26:05 +0000
ROA not before: Mon 28 Apr 2025 21:25:58 +0000
ROA not after: Fri 13 Jun 2025 21:25:58 +0000
asID: 63139
IP address blocks: 45.197.95.0/24 maxlen: 24
45.197.96.0/24 maxlen: 24
45.197.97.0/24 maxlen: 24
45.197.98.0/24 maxlen: 24
45.197.99.0/24 maxlen: 24
45.197.100.0/24 maxlen: 24
45.197.101.0/24 maxlen: 24
45.197.102.0/24 maxlen: 24
45.197.103.0/24 maxlen: 24
45.197.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85997 (0x14fed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 21:25:58 2025 GMT
Not After : Jun 13 21:25:58 2025 GMT
Subject: CN=680ff26c-90d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:5d:ad:c1:75:06:05:82:f5:3f:2f:54:86:
a2:52:9c:3a:ce:e0:c1:4e:8b:89:5e:2a:f7:ca:3d:
ef:1e:5a:36:51:05:d1:f0:2c:85:16:83:5d:00:53:
73:d0:f3:e4:66:7a:60:7b:1b:36:ad:10:b7:13:72:
a0:6a:b5:be:b7:f3:ba:df:85:b3:df:57:72:75:5d:
46:c4:c1:ef:8e:d7:fb:93:77:5d:33:fd:ea:2d:b4:
f1:3e:b7:e9:f8:62:21:87:db:4c:9e:0d:e0:d4:a4:
a3:95:d6:3a:75:5e:8d:17:b7:f2:d5:28:50:6f:43:
01:38:df:1f:14:26:30:ed:4d:b6:9b:b6:ec:07:4c:
23:f6:1a:37:1c:ab:fd:6b:85:a5:8b:cd:25:44:d3:
2e:ae:0f:52:7b:50:14:e6:4f:ce:71:4d:7f:c7:66:
2d:2e:83:7a:20:e9:54:e8:42:16:9d:df:15:b5:b0:
89:ce:42:75:a2:08:2a:c3:72:87:2e:dd:95:16:a1:
a0:f7:6f:79:e6:c1:bc:ab:c1:ca:bc:c4:58:ae:c2:
7c:8d:af:09:2d:59:57:c3:0e:03:8e:76:2f:f0:b2:
e5:45:fb:a7:ff:29:67:43:b9:7e:e6:3c:6e:67:af:
99:bf:91:49:0d:b5:5c:7b:78:4b:45:9a:34:fe:fa:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A2:56:05:3B:0E:AB:D1:44:B2:CE:30:8E:22:61:55:BD:AC:CD:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63169BB2247711F096E041E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.95.0-45.197.104.255
Signature Algorithm: sha256WithRSAEncryption
95:45:99:c5:ba:59:e3:38:1b:4d:19:17:08:86:22:62:68:b0:
16:e3:7d:f0:e6:b9:69:84:21:2a:66:3b:8f:f9:34:e0:f3:26:
3e:49:4a:db:d4:2a:35:00:09:c9:80:54:e7:00:c7:d0:f8:ca:
8d:92:4f:b3:25:ff:50:55:f3:9c:b0:70:d4:02:2c:9e:5b:4c:
cd:4e:09:ac:f4:f1:8a:52:8f:41:ee:d8:6a:eb:8b:ee:e2:97:
b3:16:6a:24:80:6e:c5:51:45:76:40:43:2a:2e:10:db:62:97:
ab:25:99:9d:e5:41:13:da:b0:50:34:90:29:ab:6a:03:36:2d:
b1:d2:65:41:ee:49:51:a3:6c:b4:2f:a7:18:6e:90:07:f9:81:
9e:48:4c:ec:75:b8:08:74:b0:be:17:cf:6f:6b:41:d3:a4:e6:
9f:38:83:36:da:c6:8c:d4:19:b0:21:48:e5:ac:58:79:80:ca:
4e:1a:77:88:53:21:c0:6a:da:65:84:af:1f:c7:65:67:02:46:
2e:b1:a5:81:3b:a6:f6:37:95:40:69:8d:fc:a3:7a:39:8b:7d:
ea:f4:b8:db:0b:5c:f5:99:15:4b:f2:ca:10:7c:01:d6:91:8b:
d9:a6:f3:63:94:dd:70:49:31:e1:5e:47:a8:06:ed:03:5c:16:
72:97:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:46:18 2025 by rpki-client