Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A12B5CE2A5611F0A802D4BCDAE4EC9C.roa
File: 6A12B5CE2A5611F0A802D4BCDAE4EC9C.roa (raw, json)
Hash identifier: F1LpXHMWjfmGsQ8dLg6nGIsMOoKdA1cYNLEpPOQZLi0=
Subject key identifier: 03:A1:0B:79:4F:66:E8:B9:8C:34:48:84:CF:1A:D4:CE:28:7D:42:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01523F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A12B5CE2A5611F0A802D4BCDAE4EC9C.roa
Signing time: Tue 06 May 2025 08:45:09 +0000
ROA not before: Tue 06 May 2025 08:45:04 +0000
ROA not after: Thu 12 Jun 2025 08:45:04 +0000
asID: 27951
IP address blocks: 45.195.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86591 (0x1523f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 08:45:04 2025 GMT
Not After : Jun 12 08:45:04 2025 GMT
Subject: CN=6819cc15-6918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:cd:d0:98:e2:83:8c:fd:25:cf:77:4f:42:
ed:66:a6:83:32:c9:05:04:38:a3:94:50:1b:64:44:
ef:ed:7e:63:d5:ed:88:bc:b9:a1:6b:cd:7e:ef:df:
93:35:81:f4:55:6a:8a:73:b6:02:47:6d:eb:16:6d:
24:cf:c6:4d:2f:1c:c8:9c:77:f3:15:25:f5:f2:77:
08:e5:bb:cb:5c:87:2f:5d:be:87:5c:b1:b5:9b:2d:
38:5d:9b:fe:2c:f5:39:5c:87:44:de:c2:8b:7f:22:
8a:5d:5d:06:78:91:6c:6e:40:92:4f:52:6f:47:58:
5b:77:aa:21:7b:c8:9b:4f:a4:10:4b:18:c9:57:62:
96:7f:fe:39:b4:ab:08:a4:cf:5b:9e:eb:b9:d9:ef:
26:a3:f2:4d:ec:9c:84:57:c9:dd:99:4f:6c:91:d8:
15:e9:ef:e8:17:95:1b:90:70:e7:78:e2:6c:4a:62:
4d:b1:97:c5:9d:5f:6f:a4:b1:20:43:76:88:c2:df:
c5:48:c0:95:e6:c3:4f:31:49:14:64:a8:6d:7a:17:
ed:2b:50:cc:bc:b8:30:3c:e7:78:29:4e:08:1a:fe:
22:f6:b1:b8:2a:c6:bf:bc:89:a3:50:17:53:82:ee:
8c:cc:eb:50:6a:2c:07:f0:aa:9f:87:02:28:70:7a:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A1:0B:79:4F:66:E8:B9:8C:34:48:84:CF:1A:D4:CE:28:7D:42:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A12B5CE2A5611F0A802D4BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.68.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:17:4e:db:0c:14:1c:ef:8a:d3:80:dd:98:e1:72:6d:ed:13:
7a:52:f7:36:2f:6f:03:9b:65:b1:0e:76:a1:1b:a7:97:68:83:
09:7a:a0:25:4c:d9:6f:f0:22:2e:9e:e6:3e:e3:16:9f:d8:25:
3c:16:17:3a:49:36:35:8b:ab:3b:e0:be:e1:5f:4f:31:42:10:
ce:a0:08:27:1a:52:d1:86:c4:ad:29:8f:3b:1e:cb:30:87:0f:
fc:81:c6:2d:74:c8:25:f7:89:9d:9e:66:e4:3e:68:be:a8:33:
ce:85:f1:f8:ce:3a:3e:a1:10:6b:ae:a9:cb:fe:e6:07:fc:0b:
65:eb:32:cb:f3:f6:16:47:b0:2b:c5:d6:1b:f2:cb:ae:d7:c5:
22:c4:f8:fa:7f:2b:fb:9f:73:2e:f0:47:c2:c5:a2:dd:b2:36:
12:b0:78:7f:85:28:81:0d:29:ac:6a:4d:36:b7:af:6c:7d:b9:
f1:ad:02:09:09:95:90:f0:f0:b6:4f:7e:b9:f3:95:2f:26:ee:
34:e9:fd:52:d9:cc:89:29:d8:8a:17:c4:97:f0:0a:f4:c8:f6:
61:e7:b4:68:9c:58:b5:71:79:7f:e4:10:0b:00:5f:4c:a6:17:
44:92:96:27:2c:2d:f9:03:d1:5e:78:fe:41:f5:d7:bd:ed:07:
0d:c0:f2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:38:03 2025 by rpki-client