Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5C647F8244711F0B5A7B2AADAE4EC9C.roa
File: F5C647F8244711F0B5A7B2AADAE4EC9C.roa (raw, json)
Hash identifier: 18R2jKJBrXCMaMo7weiTDeKicUEjoXSLa+4UzybjGUw=
Subject key identifier: AD:D7:F2:99:00:73:01:3D:88:DF:83:B8:5E:12:1A:F1:74:30:EC:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5C647F8244711F0B5A7B2AADAE4EC9C.roa
Signing time: Mon 28 Apr 2025 15:46:34 +0000
ROA not before: Mon 28 Apr 2025 15:46:29 +0000
ROA not after: Tue 28 Apr 2026 15:46:29 +0000
asID: 984
IP address blocks: 45.194.134.0/24 maxlen: 24
45.194.135.0/24 maxlen: 24
45.194.136.0/24 maxlen: 24
45.194.137.0/24 maxlen: 24
45.194.138.0/24 maxlen: 24
45.194.139.0/24 maxlen: 24
45.194.140.0/24 maxlen: 24
45.194.141.0/24 maxlen: 24
45.194.142.0/24 maxlen: 24
45.194.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85929 (0x14fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 15:46:29 2025 GMT
Not After : Apr 28 15:46:29 2026 GMT
Subject: CN=680fa2da-ca7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:9c:40:5c:2d:95:80:ee:e2:92:81:f6:f9:
8d:4c:1f:b8:1d:33:36:55:33:39:26:1c:63:88:f1:
42:8b:40:6f:55:35:40:0b:99:2a:77:f9:a0:d7:24:
54:c7:96:35:2b:df:3d:23:99:d6:89:e0:49:c8:e7:
8d:12:e8:d7:e9:65:87:4c:e6:f6:11:5b:86:e2:29:
64:78:9c:59:d7:d2:c7:ea:97:1b:0e:53:e7:c7:a8:
9b:d8:99:84:c2:e0:88:43:d9:ca:25:2d:7b:b6:ce:
3c:cd:10:86:6a:19:9d:d8:74:5a:73:d4:d0:db:38:
92:85:a0:7d:82:c4:60:04:ed:90:1e:47:26:14:fd:
f1:35:ee:39:72:0a:e5:36:29:55:69:4e:ba:58:c9:
2a:4f:fe:59:09:ab:6b:7d:80:34:ff:9e:a2:cf:e9:
3f:6c:74:0c:97:91:43:55:3d:39:f4:28:30:8d:90:
ef:64:57:71:4b:f4:14:66:30:03:0e:31:f0:07:fa:
f5:ec:05:b7:3e:66:11:4f:94:a5:b7:d0:e4:dc:6e:
49:f8:dc:b1:2f:b0:00:d3:08:19:ed:ff:72:16:48:
7a:2c:f0:02:05:d7:c2:d3:4b:71:1d:b0:ac:9d:fe:
cb:1c:75:5b:78:32:cd:9e:22:b0:b4:46:be:57:9f:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D7:F2:99:00:73:01:3D:88:DF:83:B8:5E:12:1A:F1:74:30:EC:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5C647F8244711F0B5A7B2AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.134.0-45.194.143.255
Signature Algorithm: sha256WithRSAEncryption
73:4f:f3:d6:48:bb:aa:db:84:5a:e7:74:02:97:a7:1b:9c:a5:
79:54:5b:d7:36:af:48:19:d4:8b:2c:62:a2:21:77:54:c4:60:
7e:68:71:f4:48:c3:e9:2d:19:9b:f1:0b:97:5e:76:0f:91:7d:
e8:6d:2f:16:4e:39:20:36:bd:7a:cf:16:81:1e:64:a3:df:58:
ed:d4:c6:2a:ce:af:b3:63:a0:24:ef:0b:ba:eb:d2:48:b5:75:
57:3c:0a:bd:82:6d:f2:d5:a1:84:85:31:99:46:86:a9:1b:1e:
69:c1:70:ea:2e:de:4c:21:6c:86:bd:f9:9f:c7:69:0e:b4:91:
e8:62:b3:5b:72:29:33:26:76:82:7a:be:5a:c2:41:ba:50:ff:
68:23:53:18:b1:8c:71:0a:ae:1c:6c:72:84:53:a5:2f:68:07:
57:9f:d8:e7:ad:33:17:e3:32:a5:aa:fa:b4:14:03:fb:3b:77:
e0:09:5d:28:cd:fe:35:e4:69:77:f8:86:d1:fc:1c:9d:6c:04:
9b:4f:ec:fe:6e:41:83:9b:66:ec:d6:c0:8c:38:19:84:76:eb:
80:f5:bf:85:f4:d3:fc:b1:f0:66:ba:45:7f:cd:de:a5:41:31:
fd:c4:97:e2:c2:22:7a:6a:77:eb:77:76:ba:73:71:18:cb:fb:
9b:24:39:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:04:54 2025 by rpki-client