Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00A78EEA6B9011F0A1E1ED7CDAE4EC9C.roa
File: 00A78EEA6B9011F0A1E1ED7CDAE4EC9C.roa (raw, json)
Hash identifier: uZ9prF1Ah2TyAaPEqoHMFIEdKK9V9yV79EVRH5dN/T0=
Subject key identifier: 6A:EC:D6:46:8B:24:73:87:20:F5:CA:F4:A9:90:26:61:B5:8A:56:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00A78EEA6B9011F0A1E1ED7CDAE4EC9C.roa
Signing time: Mon 28 Jul 2025 08:51:08 +0000
ROA not before: Mon 28 Jul 2025 08:51:03 +0000
ROA not after: Sun 31 Aug 2025 08:51:03 +0000
asID: 202656
IP address blocks: 45.195.208.0/24 maxlen: 24
45.195.209.0/24 maxlen: 24
45.199.135.0/24 maxlen: 24
45.199.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92130 (0x167e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 08:51:03 2025 GMT
Not After : Aug 31 08:51:03 2025 GMT
Subject: CN=688739fc-34ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:8b:b6:07:4b:50:09:96:3f:5b:06:b6:c5:
37:4c:d1:6f:eb:90:d3:38:f3:35:ab:74:4f:33:83:
f7:4d:d3:55:12:b6:ce:6c:18:65:3c:03:ba:5d:e5:
d7:7a:3b:8f:af:7f:f4:87:7c:97:53:43:34:c8:66:
78:c1:95:45:c8:2e:d2:db:be:f2:78:47:fe:9c:8a:
35:f0:56:5b:11:48:3a:65:55:59:a2:ec:f5:69:3a:
39:c9:50:01:00:ba:2b:45:5f:28:99:4a:23:ac:3a:
f9:ca:94:e2:52:fe:fd:37:2b:b3:c4:64:c5:44:a9:
0d:11:01:ca:a8:d0:fe:0c:6e:ec:22:cb:d7:6d:af:
a1:32:bb:d8:15:d7:3f:dc:21:9a:28:47:6e:04:d1:
64:fd:14:61:75:f3:07:24:85:53:d5:5b:cc:5a:9b:
3e:9a:32:d6:32:6c:58:78:fc:7c:3c:8e:e8:6e:39:
db:35:2e:a8:6c:28:df:8f:49:42:82:b6:7d:70:fd:
8f:ce:5d:89:20:a5:09:b9:d0:c9:ad:c7:f4:32:e7:
f1:09:b5:f5:1f:49:33:df:47:e7:8e:f7:c0:65:4d:
7b:aa:df:38:fb:0b:ed:6f:1c:27:2b:0b:3d:46:66:
f7:08:bc:0e:a0:6e:f9:29:f1:b6:67:8a:c0:45:2b:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EC:D6:46:8B:24:73:87:20:F5:CA:F4:A9:90:26:61:B5:8A:56:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00A78EEA6B9011F0A1E1ED7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.208.0/23
45.199.135.0-45.199.136.255
Signature Algorithm: sha256WithRSAEncryption
4f:fd:44:e6:47:d8:83:0d:fe:a7:5f:77:c2:15:f7:1a:41:ca:
84:e2:12:b9:aa:9e:d0:23:31:19:40:fc:51:6a:e1:22:38:9f:
7f:64:6f:3e:ba:42:8c:c2:e2:f4:45:c9:c1:a4:50:8d:ec:c9:
79:88:f8:e3:25:36:d0:6d:11:10:5b:96:c6:98:77:31:6a:8b:
8e:23:20:ff:78:52:7c:b7:b7:d5:cd:05:c6:39:a6:68:0c:7f:
2f:6e:d4:4b:b5:70:ae:b9:c1:24:ee:18:c8:4b:80:59:1e:c8:
c1:ef:16:d5:57:d0:06:03:bc:a4:8c:ca:42:e0:f1:42:22:d4:
28:b5:72:c5:3c:ec:20:b2:de:4a:2b:6a:8c:22:ab:c8:65:dc:
8f:cc:93:46:1d:9e:7b:80:14:d8:40:29:04:64:b6:c4:b5:1f:
13:d0:12:23:70:18:67:3f:4e:0b:ef:59:5e:f5:9c:71:09:96:
86:b6:14:6c:e2:a6:d1:3e:82:fd:13:af:03:b8:7d:4b:60:ce:
2f:32:54:94:70:64:65:e7:c1:e9:a1:64:67:27:6b:46:75:45:
91:da:d6:58:15:68:e6:09:c1:cb:1a:b8:64:45:36:f2:3a:3f:
8a:4f:94:ab:c1:08:81:b5:66:cc:78:cc:1d:b3:85:6c:a6:cf:
da:60:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:05:31 2025 by rpki-client