Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8F4093A259511F0967145F1DAE4EC9C.roa
File: E8F4093A259511F0967145F1DAE4EC9C.roa (raw, json)
Hash identifier: VQQAu99MbVeM/oW+rGR8azHpDblMfhdA8udO45ohuak=
Subject key identifier: 8A:D7:51:66:EB:6D:41:A6:F2:D7:94:0D:C1:90:AB:AC:2D:13:0F:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01506D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8F4093A259511F0967145F1DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 07:37:04 +0000
ROA not before: Wed 30 Apr 2025 07:37:00 +0000
ROA not after: Sat 30 May 2026 07:37:00 +0000
asID: 63199
IP address blocks: 45.196.16.0/23 maxlen: 24
45.196.18.0/23 maxlen: 24
45.196.20.0/23 maxlen: 24
45.196.22.0/24 maxlen: 24
45.196.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86125 (0x1506d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 07:37:00 2025 GMT
Not After : May 30 07:37:00 2026 GMT
Subject: CN=6811d320-630f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:d6:13:98:60:c9:5b:8a:8b:48:38:6a:f3:
d5:74:66:e2:b3:76:fe:60:6c:be:a2:ce:c7:19:c0:
53:30:75:38:49:46:3a:ca:95:c0:83:5e:62:a3:14:
18:9e:ba:28:d2:5d:e4:92:8e:09:46:59:4a:fd:f6:
7d:85:f7:42:5f:82:c9:e9:a2:fc:7c:d4:db:ed:bf:
5e:55:ff:6e:ff:34:24:78:1f:23:6d:4f:68:73:e0:
4e:dd:7c:1d:97:8e:fb:4d:4f:87:94:7e:73:1c:73:
a1:e5:f8:ad:66:29:48:1e:17:d2:26:dc:df:b3:c9:
43:6b:d1:2f:ba:9f:42:2f:82:b4:24:80:32:87:71:
03:00:ed:27:95:e7:81:a6:63:78:34:43:a8:2e:1d:
f7:de:bd:35:78:9a:57:e9:ba:cc:99:f5:f2:dc:79:
3f:e2:77:64:0c:ec:dc:90:36:8d:dd:4a:5c:32:5a:
5d:29:07:2f:f6:ff:36:98:13:82:f9:37:3c:f5:85:
6f:d5:89:37:a9:32:2b:b9:aa:26:94:d4:54:88:3d:
b8:a5:f5:66:78:67:3e:bb:d7:f2:90:5c:cb:54:a3:
a6:3a:ec:13:81:ea:35:fb:d1:02:69:b1:ca:9e:cd:
96:ca:5f:43:08:c5:fa:7a:b7:40:23:31:e2:8c:ef:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D7:51:66:EB:6D:41:A6:F2:D7:94:0D:C1:90:AB:AC:2D:13:0F:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8F4093A259511F0967145F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.16.0/21
Signature Algorithm: sha256WithRSAEncryption
74:96:03:ac:b3:52:23:b6:59:96:a0:85:cc:36:63:e4:d1:bc:
c1:3b:bb:16:93:79:89:65:a7:e4:5b:03:53:71:ff:f3:06:f5:
d5:33:55:cd:ff:6e:95:1d:c0:d1:c0:35:6c:5e:c8:c4:87:ef:
cb:d6:34:1a:52:88:1e:c9:60:cc:06:61:4e:ea:e0:58:b9:56:
7f:2f:e1:da:cd:7c:8a:a8:f7:b3:20:f8:f6:51:46:a2:f0:c7:
db:1d:2f:da:21:5e:c7:4f:a9:3f:2e:7c:f2:b4:bd:7b:c1:16:
cd:30:d7:23:e8:6f:f5:9c:6d:f5:4b:5e:7c:3f:eb:90:20:35:
eb:0c:25:d1:a9:69:aa:41:57:10:37:2f:07:38:c4:fa:f8:77:
a2:75:1b:2e:01:db:f5:ba:fc:cd:04:08:0d:c6:5c:ae:f6:4f:
9d:91:2c:12:6f:0d:3c:51:0e:86:70:50:13:25:c0:f1:98:f0:
9c:54:1d:49:4f:3a:cd:8c:5d:3e:0e:93:d0:e8:f0:08:a1:d2:
21:4a:e7:19:f2:49:b8:d3:7d:ed:1a:5a:87:e3:00:b0:06:85:
04:4f:54:f5:e9:0e:85:5b:78:35:92:0d:1d:f9:7d:a5:02:6e:
5f:3e:29:f6:76:bf:ad:3b:07:56:5b:3c:93:ad:6f:ea:e0:c7:
d2:6d:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:05:23 2025 by rpki-client