Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F52B81242DA11F08DD7FF86DAE4EC9C.roa
File: 6F52B81242DA11F08DD7FF86DAE4EC9C.roa (raw, json)
Hash identifier: CHMsnTyowbP2BZv63opmbV6EMLzlFw1prVKrSa4OOWs=
Subject key identifier: A0:DB:DF:7C:8E:4C:FE:74:90:BE:4F:16:C0:D5:80:72:06:56:68:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F52B81242DA11F08DD7FF86DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 13:30:39 +0000
ROA not before: Fri 06 Jun 2025 13:30:34 +0000
ROA not after: Sun 13 Jul 2025 13:30:34 +0000
asID: 23470
IP address blocks: 45.199.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88590 (0x15a0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 13:30:34 2025 GMT
Not After : Jul 13 13:30:34 2025 GMT
Subject: CN=6842ed7f-d323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:f6:e6:1a:7f:97:46:e8:66:4c:64:13:5c:
93:51:73:1f:69:fd:03:f7:d8:aa:f7:68:3a:17:d8:
41:d5:0f:fa:cc:c3:4d:a1:6e:42:85:e6:a1:3f:b6:
b4:83:20:38:36:15:56:b4:be:41:13:c2:74:59:41:
7c:cf:b1:f9:9d:46:5e:ed:83:21:92:40:bd:38:61:
ab:1e:73:d6:b3:68:99:eb:56:08:4a:dd:f4:73:8e:
bd:69:13:fa:fa:a4:b0:73:b4:e1:fe:c7:c6:65:b5:
3c:44:cb:81:5b:ae:e2:8e:d8:26:e3:99:3b:da:7f:
df:52:6e:58:08:77:44:7e:63:ad:81:25:de:af:08:
10:94:8f:06:03:eb:8c:9f:e9:c8:3c:e5:aa:f9:c8:
c5:6c:ac:9f:7f:15:99:ee:fc:20:fc:1c:0a:3c:ff:
29:ee:18:69:b4:94:cb:78:6f:74:b8:81:77:37:30:
66:87:1c:12:c9:99:9a:30:65:e6:cf:9f:ca:1a:f5:
c6:39:11:03:1d:6c:e0:21:37:8e:55:12:31:b9:2a:
ab:20:e5:dc:bf:9b:36:42:8f:95:e3:4a:20:9c:5a:
e5:aa:34:59:27:83:d7:f1:07:29:0b:3b:c8:ec:bf:
8d:ee:a8:64:bd:0c:43:d4:35:ff:a0:3a:ec:b5:62:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DB:DF:7C:8E:4C:FE:74:90:BE:4F:16:C0:D5:80:72:06:56:68:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F52B81242DA11F08DD7FF86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.189.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1c:98:ec:2b:8e:9d:82:52:2f:b9:81:3c:55:ee:8e:72:d6:
dd:18:01:bb:9a:bf:84:ae:fc:73:23:98:c8:83:4b:9f:5f:47:
5f:16:71:67:5e:df:d7:02:38:35:0c:21:af:ec:9b:08:1e:aa:
2d:f9:15:d8:d6:d5:20:07:59:64:17:68:18:1e:c4:25:51:e4:
a9:7a:7a:ff:17:6c:80:e6:5e:06:39:b7:db:33:12:7c:dc:07:
99:8b:44:f9:29:7f:28:46:6e:ab:1d:42:90:84:34:3e:f5:47:
d3:8d:72:61:d9:b4:34:97:06:9d:eb:d3:00:4e:e2:72:81:78:
89:d1:61:91:ef:7e:00:f3:01:56:7d:61:78:4e:7f:cc:13:ed:
b8:74:3c:19:6a:5d:3a:20:91:de:f2:9c:2c:79:a9:56:be:6f:
e5:7d:6c:5d:64:a4:4c:39:6a:0c:dc:cd:94:a5:37:1a:bb:f5:
b9:d1:77:d3:ed:71:76:0e:bb:41:85:ff:9c:fb:d5:03:91:a3:
a9:dd:d8:33:4e:8b:41:d7:68:2d:b3:c1:a1:5c:6f:16:08:c5:
ef:94:72:f9:f3:56:65:17:8e:95:74:cb:22:92:f2:57:5a:6f:
bc:d3:26:75:64:a8:e7:fd:fb:f2:78:cc:e6:3e:f7:66:3e:76:
7b:5b:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:20:09 2025 by rpki-client