Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8666DD0A511F11F0A53FEAEFDAE4EC9C.roa
File: 8666DD0A511F11F0A53FEAEFDAE4EC9C.roa (raw, json)
Hash identifier: srkxKINqtUkXXYmz5w5yfRpZs6Kc4vnWekLQ9fu0ZuY=
Subject key identifier: 1F:60:9B:84:4D:47:1B:3B:2E:37:70:54:45:56:73:CB:90:CE:3F:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8666DD0A511F11F0A53FEAEFDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 17:20:29 +0000
ROA not before: Tue 24 Jun 2025 17:20:24 +0000
ROA not after: Sat 09 Aug 2025 17:20:24 +0000
asID: 63139
IP address blocks: 45.197.98.0/24 maxlen: 24
45.197.99.0/24 maxlen: 24
45.197.100.0/24 maxlen: 24
45.197.101.0/24 maxlen: 24
45.197.102.0/24 maxlen: 24
45.197.103.0/24 maxlen: 24
45.197.104.0/24 maxlen: 24
45.197.105.0/24 maxlen: 24
45.197.106.0/24 maxlen: 24
45.197.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89750 (0x15e96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 17:20:24 2025 GMT
Not After : Aug 9 17:20:24 2025 GMT
Subject: CN=685ade5d-99d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:36:51:c9:c1:af:eb:a5:71:91:fd:75:19:14:
e7:bc:bc:a4:a4:ff:4b:6c:a5:04:50:1e:6d:73:cd:
7d:c1:6d:bc:38:d3:e5:3c:6e:ff:be:d1:3c:59:b6:
25:cd:47:e3:af:9d:db:39:25:58:df:3a:c0:6c:6d:
96:f6:bf:80:7d:e7:4a:b6:4a:39:25:ef:c8:12:2c:
3b:59:55:14:5e:05:4d:83:7f:7f:bf:3d:97:79:b0:
9b:22:a3:78:8c:1b:17:e5:e5:fb:8e:63:05:54:c5:
73:c1:19:92:3e:04:d4:8d:34:a2:9a:99:95:e9:4d:
08:f9:f0:37:a9:cb:eb:9d:e5:10:c9:1c:24:77:3e:
64:a2:23:16:e4:ce:49:a2:3e:3e:65:ad:7f:7b:23:
d8:e6:14:52:32:60:b7:59:9a:2c:19:1a:99:9a:b7:
45:71:1e:7c:e7:24:a9:00:2d:db:8d:d3:d3:ba:3d:
f9:3a:71:e1:6b:74:87:eb:67:f9:47:fd:4b:f9:1b:
11:4c:30:61:77:9c:9a:d2:b7:02:4d:2a:3c:06:e5:
49:36:8b:e8:a6:13:82:ef:01:a5:37:41:a5:99:7d:
69:c5:14:af:40:a7:e4:cb:e7:14:2d:b7:01:29:36:
c6:c7:fd:fc:05:74:4b:c4:f2:6f:d4:67:97:a8:b2:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:60:9B:84:4D:47:1B:3B:2E:37:70:54:45:56:73:CB:90:CE:3F:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8666DD0A511F11F0A53FEAEFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.98.0-45.197.107.255
Signature Algorithm: sha256WithRSAEncryption
3d:e7:07:f1:e5:8c:bd:d9:8a:59:03:85:45:2e:ba:13:1e:4f:
e4:1c:97:83:09:c4:8d:63:0b:bb:58:23:ef:a0:12:20:ed:20:
82:c7:af:ad:c6:4e:04:af:3a:e3:7d:85:d7:f2:a1:e3:51:91:
0d:68:24:d6:50:cb:81:fe:fa:2d:2f:a0:c9:2e:62:ff:39:4a:
4b:8f:d8:57:0a:96:00:c7:db:6f:c8:ce:8f:52:c4:e2:26:60:
81:fd:ac:13:5e:b8:4b:2f:c3:6c:c3:8b:52:17:c3:88:f8:02:
5b:f1:ac:38:33:2e:d5:60:de:e4:82:22:c8:d2:44:25:8c:c2:
43:49:53:2f:a4:dc:45:14:2c:83:80:38:8a:b6:41:28:88:e6:
3d:bf:90:57:e0:5b:8e:41:7e:35:bf:3f:53:90:8f:02:41:ce:
cf:73:7c:45:6f:86:4c:50:90:96:59:d9:17:2b:4c:d2:67:02:
73:e5:fb:97:34:ca:99:f0:b3:2b:e5:b6:f5:52:24:fb:00:72:
54:48:81:b0:37:25:17:17:ef:f6:35:c6:fb:b0:6e:3c:16:30:
c9:4c:6f:f4:3d:b6:94:73:7e:b3:ce:ab:ca:14:56:9d:da:25:
fe:6d:41:b6:fc:82:7d:cb:28:1e:59:c1:29:d4:e9:ac:65:fb:
8b:35:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:50:15 2025 by rpki-client