Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6B730A247611F0A9FF42DCDAE4EC9C.roa
File: 6C6B730A247611F0A9FF42DCDAE4EC9C.roa (raw, json)
Hash identifier: j/dX8Puptn2Sv2foRz8zCsigsmcUcgZwTq+tRLdjhZk=
Subject key identifier: E6:E8:47:49:B3:F8:67:6D:CA:DD:CC:B3:93:76:79:93:75:89:CB:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6B730A247611F0A9FF42DCDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 21:19:10 +0000
ROA not before: Mon 28 Apr 2025 21:19:05 +0000
ROA not after: Fri 13 Jun 2025 21:19:05 +0000
asID: 63139
IP address blocks: 45.197.85.0/24 maxlen: 24
45.197.86.0/24 maxlen: 24
45.197.87.0/24 maxlen: 24
45.197.88.0/24 maxlen: 24
45.197.89.0/24 maxlen: 24
45.197.90.0/24 maxlen: 24
45.197.91.0/24 maxlen: 24
45.197.92.0/24 maxlen: 24
45.197.93.0/24 maxlen: 24
45.197.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85995 (0x14feb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 21:19:05 2025 GMT
Not After : Jun 13 21:19:05 2025 GMT
Subject: CN=680ff0cd-abb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d7:7d:a9:49:97:9c:c5:e8:88:f6:70:71:39:
1c:82:64:37:a6:1b:35:45:2f:ab:42:88:ed:80:6c:
8b:94:c4:26:19:0d:d6:1d:b7:39:26:0f:2f:02:4b:
c0:0a:8d:51:20:ce:cc:d4:20:f1:4a:23:44:07:6b:
2d:30:f2:3d:44:25:d5:ff:ca:65:c1:3a:20:71:30:
51:7d:7e:61:ff:a5:a3:2c:f7:07:be:37:dd:3f:56:
98:50:12:f8:a5:ef:ba:57:0d:a5:78:ed:23:12:54:
46:1e:5a:79:ea:ec:77:4a:ee:89:d7:8e:47:37:db:
23:74:c2:bb:54:59:f6:33:8b:33:c4:56:2e:59:86:
f3:6d:7f:f9:03:a5:76:25:5a:7a:81:8a:3e:eb:1d:
04:90:43:d7:eb:f3:96:30:a7:c4:7b:14:2f:45:6f:
a2:33:59:d0:50:13:0c:50:6c:29:ea:9c:4b:9c:db:
8b:39:f6:8f:43:b5:53:b4:39:9c:ba:c7:52:ac:48:
98:62:1c:d6:48:cb:54:4b:8e:54:57:33:be:ac:c4:
32:d4:92:59:51:cc:c8:80:e6:34:a5:5d:15:cc:21:
87:6a:8a:75:d8:4a:f2:99:5e:74:af:5a:c2:c8:87:
fc:3e:43:04:f7:a8:20:16:9d:35:62:e7:c6:90:45:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E8:47:49:B3:F8:67:6D:CA:DD:CC:B3:93:76:79:93:75:89:CB:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6B730A247611F0A9FF42DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.85.0-45.197.94.255
Signature Algorithm: sha256WithRSAEncryption
02:01:d9:8e:d2:c2:80:cf:38:a1:7d:21:42:26:69:71:60:d5:
4f:96:2a:77:2b:c7:4e:a4:80:fa:a7:29:89:3b:cd:a9:61:a7:
ee:00:78:96:c7:67:38:7b:0b:62:ea:4b:9e:0c:78:dd:9e:53:
f5:46:0f:87:d8:de:2d:d6:8d:8f:9a:58:ff:02:72:c6:2c:06:
0e:61:b1:b9:e6:ca:42:b4:46:53:5d:f9:57:95:30:b9:c4:58:
69:00:a2:aa:56:88:cd:93:42:72:49:97:b8:50:14:6a:6e:eb:
ce:3f:94:86:2e:6f:c0:a4:0c:4c:55:6b:45:06:d6:ee:71:e3:
c2:cb:33:35:80:ee:db:5f:da:f6:b8:2f:54:7d:02:79:33:2d:
4a:21:18:c6:16:8e:4d:5c:29:26:41:6f:0f:52:35:71:3f:39:
c7:5f:7f:b6:91:d4:60:92:b7:76:0f:1c:56:0e:f7:a8:2b:4c:
01:9f:60:0a:e4:83:21:ce:bd:e5:8c:08:29:34:6f:0b:0f:c5:
57:1f:34:e5:ad:b3:39:cf:f3:8d:bc:28:de:9a:27:15:9c:48:
68:c4:6d:3b:e4:76:5d:f1:b9:2d:4f:b1:c9:98:dd:b3:31:0e:
9e:b2:6a:bb:8f:d0:5d:78:4b:fb:76:2a:dc:fb:b0:7d:fa:16:
f5:77:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:40:48 2025 by rpki-client