Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6932092266011F0BD8B5EC2DAE4EC9C.roa
File: E6932092266011F0BD8B5EC2DAE4EC9C.roa (raw, json)
Hash identifier: Fu07ZmarzcyfZajZ/9oZ5v8KA4919qWEteD2v+WXPO0=
Subject key identifier: 78:6B:9F:B1:55:19:39:04:DD:33:34:6C:B4:3E:76:AD:59:8D:EF:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015120
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6932092266011F0BD8B5EC2DAE4EC9C.roa
Signing time: Thu 01 May 2025 07:50:08 +0000
ROA not before: Thu 01 May 2025 07:50:03 +0000
ROA not after: Tue 11 Apr 2028 07:50:03 +0000
asID: 17561
IP address blocks: 45.198.87.0/24 maxlen: 24
45.198.88.0/24 maxlen: 24
45.198.91.0/24 maxlen: 24
45.198.92.0/24 maxlen: 24
45.198.95.0/24 maxlen: 24
45.198.96.0/24 maxlen: 24
45.198.97.0/24 maxlen: 24
45.198.100.0/24 maxlen: 24
45.198.101.0/24 maxlen: 24
45.198.102.0/24 maxlen: 24
45.198.103.0/24 maxlen: 24
45.198.106.0/24 maxlen: 24
45.198.107.0/24 maxlen: 24
45.198.108.0/24 maxlen: 24
45.198.109.0/24 maxlen: 24
45.198.110.0/24 maxlen: 24
45.198.111.0/24 maxlen: 24
45.198.113.0/24 maxlen: 24
45.198.114.0/24 maxlen: 24
45.198.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86304 (0x15120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 07:50:03 2025 GMT
Not After : Apr 11 07:50:03 2028 GMT
Subject: CN=681327b0-cb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:10:5f:c8:e6:eb:25:9c:16:57:15:1d:77:41:
7f:de:28:13:25:61:90:ef:17:0b:67:b3:85:17:bd:
dd:cd:03:cc:28:8e:ce:2f:d6:e7:78:b7:51:46:6e:
09:c9:d2:db:ee:b4:9c:de:00:4c:56:74:de:fb:c7:
a5:42:79:f0:26:06:4e:f3:12:3a:94:26:27:72:f5:
4e:9f:cf:42:5b:31:f8:16:88:f7:56:24:65:fc:aa:
3d:13:a0:56:46:86:8b:87:ef:2a:e8:9f:f1:06:6c:
dd:c2:ff:0c:b4:c9:44:01:9d:1d:6d:73:bd:52:2a:
95:04:7f:dc:d1:cd:5b:69:8c:f5:f0:e9:41:df:50:
04:27:e1:72:2c:0e:9f:cd:5b:5e:28:4f:e7:b8:83:
3c:dd:67:0b:ce:74:03:b1:11:48:95:10:b9:b9:8f:
03:10:8f:7b:b4:32:6b:7e:3e:7a:de:d7:05:c1:ce:
35:01:78:99:ad:5c:ce:b9:dd:c5:44:b4:66:22:33:
c3:6e:40:86:bb:c3:4a:b0:79:7b:8a:bd:71:0d:f3:
9a:a7:56:8e:79:5b:51:44:bb:d8:f6:dd:00:76:ef:
d8:98:d9:83:ad:71:73:1f:44:ad:7e:32:bb:7d:6d:
8d:8e:f4:59:7e:ce:f5:48:c1:e4:fb:e1:f2:89:bf:
14:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6B:9F:B1:55:19:39:04:DD:33:34:6C:B4:3E:76:AD:59:8D:EF:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6932092266011F0BD8B5EC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.87.0-45.198.88.255
45.198.91.0-45.198.92.255
45.198.95.0-45.198.97.255
45.198.100.0/22
45.198.106.0-45.198.111.255
45.198.113.0-45.198.115.255
Signature Algorithm: sha256WithRSAEncryption
4a:94:10:e2:34:2e:dc:4c:fe:59:d1:26:19:4a:24:cb:1d:b3:
a5:86:47:63:6a:46:f7:b5:02:5c:b3:c6:79:b4:e9:ea:5e:cb:
26:23:46:4d:e8:ff:7b:59:3c:1c:2e:4b:67:08:4c:9f:4d:0e:
39:fb:90:99:63:8a:7f:12:ec:39:05:3d:0b:ec:5a:dd:02:9b:
81:92:09:5a:8f:4f:c2:45:e2:b7:f8:0e:ad:41:51:14:6b:70:
32:7d:fe:0c:c1:54:a2:3f:ad:20:59:7e:d4:ae:e0:82:17:82:
ef:9a:7f:e3:ae:04:ed:e5:d0:7a:f3:01:5d:b3:2e:39:f5:47:
79:dd:46:f6:70:42:e3:b3:0b:3e:c9:a1:f5:3a:68:c7:8d:57:
b0:ff:f9:6d:1d:00:46:dc:6d:a5:6e:61:f7:9a:9a:db:90:b2:
9f:e8:11:dd:e8:0f:b0:85:db:48:42:20:20:7c:ee:a0:d5:ec:
0d:08:ee:a2:8a:2e:09:31:09:9e:db:d7:0c:75:d8:d5:49:02:
0a:10:a5:c9:30:6e:ec:0a:0d:c8:69:0c:88:e9:49:97:ac:b2:
2b:c3:bb:25:2a:3a:2e:64:95:ce:27:c4:7f:be:26:b0:c8:8f:
e4:cb:95:20:93:39:23:7e:0a:bb:06:8f:6e:aa:07:22:8c:11:
00:d1:3f:70
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIDAVEgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTAxMDc1MDAzWhcNMjgwNDExMDc1MDAzWjAYMRYw
FAYDVQQDEw02ODEzMjdiMC1jYjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7hBfyObrJZwWVxUdd0F/3igTJWGQ7xcLZ7OFF73dzQPMKI7OL9bneLdR
Rm4JydLb7rSc3gBMVnTe+8elQnnwJgZO8xI6lCYncvVOn89CWzH4Foj3ViRl/Ko9
E6BWRoaLh+8q6J/xBmzdwv8MtMlEAZ0dbXO9UiqVBH/c0c1baYz18OlB31AEJ+Fy
LA6fzVteKE/nuIM83WcLznQDsRFIlRC5uY8DEI97tDJrfj563tcFwc41AXiZrVzO
ud3FRLRmIjPDbkCGu8NKsHl7ir1xDfOap1aOeVtRRLvY9t0Adu/YmNmDrXFzH0St
fjK7fW2NjvRZfs71SMHk++Hyib8UdwIDAQABo4IC6DCCAuQwHQYDVR0OBBYEFHhr
n7FVGTkE3TM0bLQ+dq1Zje8vMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNjkzMjA5MjI2NjAxMUYwQkQ4QjVFQzJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMMAwDBAAtxlcDBAAtxlgwDAMEAC3G
WwMEAC3GXDAMAwQALcZfAwQBLcZgAwQCLcZkMAwDBAEtxmoDBAQtxmAwDAMEAC3G
cQMEAi3GcDANBgkqhkiG9w0BAQsFAAOCAQEASpQQ4jQu3Ez+WdEmGUokyx2zpYZH
Y2pG97UCXLPGebTp6l7LJiNGTej/e1k8HC5LZwhMn00OOfuQmWOKfxLsOQU9C+xa
3QKbgZIJWo9PwkXit/gOrUFRFGtwMn3+DMFUoj+tIFl+1K7ggheC75p/464E7eXQ
evMBXbMuOfVHed1G9nBC47MLPsmh9Tpox41XsP/5bR0ARtxtpW5h95qa25Cyn+gR
3egPsIXbSEIgIHzuoNXsDQjuooouCTEJntvXDHXY1UkCChClyTBu7AoNyGkMiOlJ
l6yyK8O7JSo6LmSVzifEf74msMiP5MuVIJM5I34KuwaPbqoHIowRANE/cA==
-----END CERTIFICATE-----
Generated at Sun May 11 12:35:35 2025 by rpki-client