Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86D97F9E24D411F08D54E1E1DAE4EC9C.roa
File: 86D97F9E24D411F08D54E1E1DAE4EC9C.roa (raw, json)
Hash identifier: bhzDYuhWB15vwm6i1qvG2GutrX+eUzOzWSFMdeyaz8s=
Subject key identifier: A2:A7:74:C2:7A:A1:9D:77:C4:08:15:5D:E4:3F:02:02:50:43:61:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015033
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86D97F9E24D411F08D54E1E1DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 08:32:47 +0000
ROA not before: Tue 29 Apr 2025 08:32:41 +0000
ROA not after: Wed 29 Oct 2025 08:32:41 +0000
asID: 141109
IP address blocks: 45.198.6.0/23 maxlen: 24
45.198.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86067 (0x15033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 08:32:41 2025 GMT
Not After : Oct 29 08:32:41 2025 GMT
Subject: CN=68108eae-ee09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:51:5c:29:9b:b6:f8:4a:c2:0c:1f:32:a0:
12:2c:f7:0d:7a:77:08:a1:97:10:bd:c8:ff:8d:3d:
ba:6f:13:6b:56:23:dc:b6:13:ab:c8:e0:e9:89:8e:
d4:9b:e7:e9:18:71:4e:76:6c:21:32:0d:a1:20:92:
a7:7b:b2:6f:f9:a3:4f:7c:62:8e:e9:22:d8:4d:16:
cc:db:3f:6c:e8:00:95:0d:5d:77:b5:34:1a:76:69:
06:bf:35:6a:88:2f:eb:78:67:49:97:1c:2e:02:43:
28:18:b6:91:1e:f1:4d:87:bb:2f:3a:9a:cf:61:dd:
06:47:53:70:52:f7:c0:ca:3d:4b:64:bb:0c:60:1a:
df:4a:54:a9:ef:d1:59:9f:cc:0a:7b:33:1c:a3:4a:
ce:be:cf:c6:5e:af:2f:ea:54:30:dc:ca:c0:20:65:
cc:8e:47:35:35:cd:e6:a8:23:0a:f4:6a:a4:81:68:
64:e6:8c:21:51:04:73:d1:01:ca:56:87:92:39:71:
fc:ec:9c:7c:d3:a6:23:2f:2e:00:8d:25:41:fa:c7:
88:fd:f0:ac:41:86:b5:d7:5b:c1:23:3a:87:86:57:
21:cb:32:5a:5b:41:bc:38:b7:85:30:d0:a5:2c:3d:
87:33:0f:50:c1:1b:8a:a6:2e:b8:28:4d:49:ed:cc:
8c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:74:C2:7A:A1:9D:77:C4:08:15:5D:E4:3F:02:02:50:43:61:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86D97F9E24D411F08D54E1E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.6.0/23
Signature Algorithm: sha256WithRSAEncryption
82:0c:4e:c5:67:63:df:77:0d:7e:96:91:36:a0:f2:65:74:6a:
63:76:d0:98:42:3b:f3:2e:a3:aa:7c:75:ef:41:ab:ff:cb:cd:
72:78:10:d4:2e:7e:f1:9a:6b:53:a9:ab:d9:15:25:8b:c8:6d:
f6:dc:c6:bf:e3:37:99:9a:5a:e4:aa:b0:0f:33:1a:23:e5:34:
9e:f1:aa:4a:00:ff:7d:7b:19:71:c1:c7:92:a8:a0:cd:cb:87:
b4:01:3b:d2:b9:9d:8c:67:84:02:c5:90:c0:b4:38:e2:23:fd:
36:fa:60:41:fa:68:70:e7:9d:69:02:12:8d:0e:d8:de:34:b3:
5d:fa:b0:98:44:87:29:cb:5d:cb:a7:3d:8f:74:18:89:c0:f6:
aa:9a:14:22:4a:2e:48:86:45:35:2e:04:a2:92:0d:5b:28:d4:
99:bc:49:b6:cd:07:e2:80:60:3f:fc:12:2b:a1:3d:9c:b0:86:
28:80:38:d6:b9:a4:23:c5:dc:cf:66:9d:76:7c:e0:6b:69:dd:
14:20:76:07:18:8d:3b:8e:78:ac:c3:a4:c9:4c:07:04:77:3d:
8a:a6:42:b0:79:b4:33:54:fd:9a:75:16:aa:95:e1:73:c6:6c:
ff:95:06:57:06:8e:0e:5b:26:39:cb:f1:7c:52:23:3a:b0:a1:
03:d4:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:08:02 2025 by rpki-client