Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1648DFCE406611F0A81A3E95DAE4EC9C.roa
File: 1648DFCE406611F0A81A3E95DAE4EC9C.roa (raw, json)
Hash identifier: ZgsONDbvUGsptQDSskTMGWaHq9IzznyuF7cT4ZmGf4E=
Subject key identifier: 62:C3:4E:C0:D8:00:78:F4:EC:3E:C8:6B:B6:14:2A:1A:08:29:DD:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01597A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1648DFCE406611F0A81A3E95DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 10:32:46 +0000
ROA not before: Tue 03 Jun 2025 10:32:41 +0000
ROA not after: Sun 06 Jul 2025 10:32:41 +0000
asID: 147176
IP address blocks: 45.201.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88442 (0x1597a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 10:32:41 2025 GMT
Not After : Jul 6 10:32:41 2025 GMT
Subject: CN=683ecf4e-1386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:9b:ab:22:a2:31:d9:68:72:fb:41:19:0f:
0b:9e:0b:9f:ea:4b:4b:41:bc:c0:21:f0:b8:da:53:
79:f5:ab:93:1a:5e:9a:ef:81:4c:dd:03:f2:0a:10:
c3:cf:49:6d:67:28:af:48:76:80:c1:0c:11:a7:68:
4d:fe:fb:4d:31:60:5d:a7:11:89:e6:6d:90:a2:38:
15:84:d8:42:05:53:4f:d5:9b:a9:c0:5f:1b:41:23:
81:5c:31:b2:1c:e7:9c:a1:6e:d4:6f:54:5c:29:a3:
8a:38:b8:16:1d:2f:fb:27:a3:d2:fa:ae:90:0c:d9:
bc:30:bd:46:a5:f4:29:1f:79:2e:02:b5:cd:9e:7f:
39:a8:9b:6a:7a:29:d0:b1:65:f1:b6:91:f8:6b:44:
14:57:86:5a:ae:8d:14:6b:09:27:4c:b3:ed:2f:30:
1e:b0:f3:bc:c0:95:1a:45:78:f8:38:4e:71:28:ea:
5e:f0:cd:f9:40:7a:41:24:f7:3b:c2:b5:7a:48:21:
85:2a:7b:2f:45:17:e8:8d:cb:94:ec:71:9d:73:3e:
0a:3e:d8:23:17:1c:55:6c:7a:94:e1:3d:f4:22:a4:
97:cb:63:d5:2d:b9:7e:27:b5:3f:07:e1:23:26:ab:
55:74:0b:5a:1e:93:02:29:f1:39:ba:37:f1:92:1d:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C3:4E:C0:D8:00:78:F4:EC:3E:C8:6B:B6:14:2A:1A:08:29:DD:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1648DFCE406611F0A81A3E95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ae:9d:7e:8b:c2:ba:d0:90:01:56:50:ae:20:d9:be:9f:f1:
0c:e2:2f:8b:dc:fb:c1:8a:cc:f6:b4:e6:18:79:3a:85:f1:85:
9f:88:9e:9a:19:c6:7a:58:14:83:26:fb:92:2b:81:da:38:6f:
d0:57:5b:ac:03:63:02:10:22:04:de:aa:63:2d:af:47:bf:8d:
a7:c6:aa:db:6c:4f:b5:a3:86:97:a2:db:19:28:d5:83:2f:e5:
ac:3d:82:43:31:96:67:0c:14:b0:6f:af:ce:00:30:aa:a2:4a:
e8:43:3c:2e:7b:a5:21:b0:40:55:11:b1:9c:16:f6:50:a4:7b:
71:2c:0e:fe:8a:9c:22:53:7d:89:94:5f:89:49:63:2a:b6:f2:
4f:b8:72:2a:4f:d8:f6:65:27:09:61:1b:5f:11:ab:2c:94:ae:
09:69:83:6b:49:fb:e1:de:50:58:9e:46:ee:22:92:bd:ba:fc:
85:19:8e:7b:b4:91:75:7b:d2:b1:c0:8a:0e:af:ba:df:51:f3:
d1:2d:43:e1:7a:d7:45:b7:0c:af:57:54:48:e0:2d:b8:5e:48:
64:ac:a5:d2:fa:da:a6:1d:81:83:93:c6:fa:35:61:72:e0:16:
20:79:62:60:50:16:d2:1c:41:28:a8:76:02:52:75:8c:1d:90:
3b:45:99:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:33:40 2025 by rpki-client