Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5496D4B4211411F0BB4451BFDAE4EC9C.roa
File: 5496D4B4211411F0BB4451BFDAE4EC9C.roa (raw, json)
Hash identifier: pbpmJR57LS8eX2DmzMjxl7+05NOt1l/vTn1IiNXzQec=
Subject key identifier: 05:BA:6C:9C:FD:3A:64:48:E3:CF:8C:3D:3A:62:3C:48:FA:09:FA:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5496D4B4211411F0BB4451BFDAE4EC9C.roa
Signing time: Thu 24 Apr 2025 13:59:25 +0000
ROA not before: Thu 24 Apr 2025 13:59:20 +0000
ROA not after: Fri 30 May 2025 13:59:20 +0000
asID: 2914
IP address blocks: 45.196.70.0/24 maxlen: 24
45.196.71.0/24 maxlen: 24
45.196.72.0/24 maxlen: 24
45.196.73.0/24 maxlen: 24
45.196.74.0/24 maxlen: 24
45.196.75.0/24 maxlen: 24
45.196.76.0/24 maxlen: 24
45.196.77.0/24 maxlen: 24
45.196.78.0/24 maxlen: 24
45.196.79.0/24 maxlen: 24
45.196.80.0/24 maxlen: 24
45.196.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85638 (0x14e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 13:59:20 2025 GMT
Not After : May 30 13:59:20 2025 GMT
Subject: CN=680a43bd-c31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:0f:ee:6c:cf:7c:1c:06:56:30:2d:85:29:
51:f7:3d:de:56:e7:62:b9:3e:3c:67:11:29:6d:e7:
f5:74:66:5f:28:ca:e6:75:1f:cf:04:8b:d9:d4:21:
3b:14:fb:48:23:3e:66:94:a3:5a:9b:cd:f0:6f:45:
7b:69:ca:d0:d7:ac:21:c5:f4:c1:57:8c:e1:af:fd:
fc:3d:99:dd:5a:d5:94:73:a9:dc:0e:35:58:49:10:
c0:94:a9:0c:23:19:d0:b1:a4:69:4a:9c:51:aa:f8:
18:6d:28:a7:e2:cc:79:35:6e:00:34:14:27:65:fe:
5a:3b:96:f6:b4:30:1e:f1:ff:b2:98:58:04:58:c4:
15:c8:b9:26:ee:98:ce:de:d9:53:bd:18:5e:0c:40:
08:ee:35:30:a2:c5:42:bb:28:9a:8d:1c:14:1c:e5:
37:75:67:46:14:5e:17:27:51:03:18:5c:10:a2:4d:
cf:94:e7:33:a1:13:5c:98:e9:f9:66:1e:da:e4:d7:
8b:a4:f8:1a:e6:d4:ad:27:e4:e6:10:99:de:e6:74:
29:ce:35:3b:14:d2:de:99:32:e5:ce:6d:6f:a4:81:
56:83:87:8a:9c:d3:57:cf:f6:9c:84:81:e2:4c:a5:
f8:d9:65:6a:41:ad:d1:33:49:5f:d8:00:8b:7e:b2:
2b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:6C:9C:FD:3A:64:48:E3:CF:8C:3D:3A:62:3C:48:FA:09:FA:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5496D4B4211411F0BB4451BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.70.0-45.196.81.255
Signature Algorithm: sha256WithRSAEncryption
33:d2:6f:9c:22:ef:91:fc:a4:10:b3:13:9f:62:18:52:63:d5:
a4:4b:0c:eb:be:a5:da:c4:9d:da:4a:15:02:d3:57:63:4b:35:
ad:0f:49:b4:8c:e6:ab:b4:a3:23:d0:f0:52:a2:99:ef:5e:62:
ad:20:92:f9:ce:e7:a1:14:90:a3:d1:44:fa:52:ea:26:86:56:
b9:4d:10:09:c8:67:f5:a9:24:c7:7c:27:e9:16:50:f6:3b:89:
74:8c:67:4f:14:fa:13:3b:92:f7:00:eb:97:da:ad:75:00:6b:
61:d1:81:66:b5:8f:d4:a3:08:18:98:81:af:0c:d5:56:2c:5b:
79:e7:5a:8c:5c:8f:ce:25:bd:65:bc:53:80:8c:20:55:71:cb:
64:90:0d:08:cc:a2:90:ee:46:ad:d6:d1:48:d9:2b:a4:af:0f:
9c:47:1a:8b:32:d1:16:9d:d1:e8:bd:f0:26:8b:ed:d1:68:f4:
81:5d:6e:80:93:84:a4:09:5c:0d:70:07:b2:66:bf:bc:58:e1:
cf:de:35:2b:95:03:00:fb:1e:b4:7b:09:69:d8:36:ea:fe:10:
20:29:fd:76:f6:74:cf:a4:bb:87:ff:c9:71:fe:f1:2e:23:52:
e0:9c:f3:0e:cf:f1:1e:a8:6f:6e:48:f6:7d:6f:e3:00:e8:4c:
84:9c:f2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:19 2025 by rpki-client