Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01C3C62C2F4A11F09F8461D2DAE4EC9C.roa
File: 01C3C62C2F4A11F09F8461D2DAE4EC9C.roa (raw, json)
Hash identifier: cXi2cZ+kyEloDyfNdLLhaUAYuHDJZ0wI8j6VRbncFT4=
Subject key identifier: 78:4D:84:A3:02:B5:C5:69:37:64:31:62:09:20:E5:9C:29:39:3D:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0153B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01C3C62C2F4A11F09F8461D2DAE4EC9C.roa
Signing time: Mon 12 May 2025 15:58:56 +0000
ROA not before: Mon 12 May 2025 15:58:50 +0000
ROA not after: Sat 05 Jul 2025 15:58:50 +0000
asID: 398823
IP address blocks: 45.205.112.0/20 maxlen: 24
45.205.176.0/20 maxlen: 24
45.205.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 11:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86967 (0x153b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 15:58:50 2025 GMT
Not After : Jul 5 15:58:50 2025 GMT
Subject: CN=68221abf-3881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:8d:7e:f9:44:86:19:f5:e5:c2:1c:93:dc:
f8:97:36:f4:6b:29:71:e4:8c:a2:7a:e9:38:98:2c:
3e:37:ce:93:eb:0e:b8:8e:f5:d5:d8:87:78:be:c9:
58:99:6a:f5:fd:64:9a:c3:a7:94:c7:bb:97:48:cc:
9d:87:24:c3:1d:a0:31:cd:64:bb:85:c8:9c:28:94:
32:d0:bd:d8:c1:b0:b2:37:c7:04:8d:ea:62:76:af:
1f:be:f2:dc:67:30:c2:a1:8e:da:ad:08:f6:d5:91:
4d:3f:36:05:64:55:13:61:e7:73:8f:1f:a6:69:03:
54:92:2e:0d:78:01:ce:04:90:dd:16:e7:e4:5b:81:
aa:b6:9b:d0:ef:b8:38:07:bc:81:da:c1:04:85:6b:
a9:9d:32:3d:96:69:b3:34:18:3b:2f:39:8f:62:12:
90:2b:a5:3e:7b:b3:44:fe:9f:24:23:34:36:1a:0a:
fb:ea:b8:2d:b0:26:9c:7c:04:6d:a9:91:64:f4:fc:
f9:7f:d1:30:23:c8:ab:c1:23:6f:5d:23:ff:df:0d:
f7:9f:76:85:13:dd:fe:87:12:d9:c0:6f:24:69:03:
48:5f:5b:b2:75:fb:4b:d2:04:78:f6:e5:9d:15:03:
c5:5c:6c:36:eb:29:66:77:a6:94:c1:b1:c1:3e:73:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4D:84:A3:02:B5:C5:69:37:64:31:62:09:20:E5:9C:29:39:3D:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01C3C62C2F4A11F09F8461D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.112.0/20
45.205.176.0/20
45.205.240.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:ef:11:46:40:0e:da:e1:44:5a:c8:b3:9b:1e:0d:cf:c6:47:
1d:38:33:39:2f:b7:3b:28:98:e8:1b:ff:40:c4:65:bd:a7:76:
66:8f:52:3b:66:19:93:17:41:d8:b5:a7:68:0e:a2:89:f7:69:
7c:17:24:88:46:9e:73:65:14:4d:5f:85:53:79:09:7f:4b:a2:
e3:10:82:30:8b:68:65:21:54:d8:ee:b6:d4:2b:e9:46:f4:92:
d6:8d:8b:dc:8d:13:15:eb:9a:d1:ec:dc:e2:23:79:d1:a0:61:
55:8a:fd:e5:98:3e:02:b1:19:77:86:91:72:37:c0:55:28:3d:
71:ac:a5:0b:fa:5a:49:15:7d:dd:d9:2e:f1:28:75:71:d6:1c:
fa:2a:2c:6e:e7:c5:7a:73:e8:e1:0b:64:cb:21:e2:d4:9d:68:
1e:3d:5b:d4:72:22:ce:b4:f2:96:a0:63:0d:54:11:55:a8:30:
c3:66:b7:37:56:e0:26:c5:ca:0c:2f:28:16:5b:f9:f8:f2:7f:
03:57:31:7d:f8:e7:87:4e:b8:58:1c:48:9b:61:e6:c0:a1:90:
69:49:c6:f1:db:97:03:65:4b:22:76:c3:4e:64:ec:6a:3f:cd:
78:ee:fa:cd:9c:82:ab:d6:dc:41:87:8f:ec:6b:1e:49:72:b7:
a9:e2:1a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:10:33 2025 by rpki-client