Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26CD98DA45ED11F0AF79C482DAE4EC9C.roa
File: 26CD98DA45ED11F0AF79C482DAE4EC9C.roa (raw, json)
Hash identifier: Yk/0Q3Fit4u0kseF2pRNwCmGNeK9G1PjpcQe588WGSE=
Subject key identifier: F4:10:86:34:C3:A0:C8:DF:D3:34:BD:AC:C3:C2:1F:FE:6C:A2:44:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26CD98DA45ED11F0AF79C482DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 11:22:11 +0000
ROA not before: Tue 10 Jun 2025 11:22:06 +0000
ROA not after: Sat 12 Jul 2025 11:22:06 +0000
asID: 137899
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88750 (0x15aae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 11:22:06 2025 GMT
Not After : Jul 12 11:22:06 2025 GMT
Subject: CN=68481563-d301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:84:18:2a:5f:5b:27:8a:14:a7:12:03:c8:
d9:3d:f4:37:a3:4a:a0:ab:9f:4c:65:c4:b6:53:b1:
20:f7:ca:5b:e6:6c:13:25:d1:f0:9c:4a:da:09:35:
20:d9:8d:db:a9:1e:05:db:4d:a7:c2:a5:d5:2d:c6:
27:4f:7b:f6:1f:82:93:28:2e:ff:c5:59:2f:7f:f0:
7a:5b:ce:30:fb:f7:41:b2:c9:80:c1:09:03:71:22:
45:1f:4c:a5:b6:e2:dd:97:76:c4:35:fc:89:9b:fb:
63:6d:1d:ed:c9:cb:a7:a8:e0:b8:56:19:6f:03:ea:
40:4c:2f:14:90:62:e0:c7:b1:53:34:4a:00:65:0a:
08:37:0e:15:45:33:fe:25:9a:40:8a:82:e1:2a:25:
c6:b1:43:b6:9d:d2:fd:67:15:76:0e:21:56:6b:cb:
e8:49:4a:c8:87:48:9e:4f:1b:9d:6d:f8:60:6e:26:
79:c0:b3:bf:c5:a1:52:31:41:28:8b:7c:ad:47:73:
cb:44:1f:3b:06:44:ff:0c:e7:7d:ab:06:b3:ce:7d:
1b:70:d2:71:9b:88:c7:cb:8b:85:9d:f5:57:2c:1b:
af:dc:2d:e7:fb:59:28:86:5f:03:05:a8:95:bd:d8:
96:de:3b:d4:32:80:dc:78:da:69:d8:1e:ff:c6:02:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:10:86:34:C3:A0:C8:DF:D3:34:BD:AC:C3:C2:1F:FE:6C:A2:44:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26CD98DA45ED11F0AF79C482DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
19:68:bc:fd:10:24:79:6b:ba:43:c7:eb:8d:85:b3:98:06:95:
2b:0c:a8:6e:13:8e:62:16:a5:f3:ea:92:93:3e:d6:21:f8:07:
a0:57:e6:b7:e1:f4:a0:04:46:b3:a7:af:92:7c:3f:d4:98:28:
43:9f:03:67:09:bf:af:0f:0e:ba:80:1b:c9:0a:1d:34:d9:59:
01:37:89:6b:8a:8d:93:f6:f2:8e:e8:b1:46:ac:11:2a:18:1f:
23:7c:17:ad:38:c1:ce:65:52:1a:39:57:c2:23:cb:2e:30:80:
1a:b5:45:9e:be:ea:49:1c:e1:c3:20:d7:49:4c:3a:f5:46:10:
81:52:35:a8:c7:c9:4a:a3:1f:f8:fd:ed:90:81:ae:75:b6:89:
b4:0b:3b:68:6a:3c:6c:24:cc:73:f9:40:59:45:b6:57:79:ac:
6e:e5:92:f1:a9:53:e4:6c:79:ce:4b:ce:1f:94:f9:70:60:c3:
42:ef:a6:a7:cd:fa:e7:13:4e:e2:1a:e5:50:bc:eb:61:3e:3b:
37:22:f0:ff:1c:9d:e0:aa:9d:4b:fe:fd:d3:55:ba:2c:db:f4:
1c:2d:ad:4d:c4:f4:e2:3b:b0:01:6c:3f:42:e5:77:ee:8f:f9:
ec:a4:d7:2d:de:34:c6:86:b0:2a:98:d5:c7:01:fe:26:4e:2c:
3f:e3:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:39:13 2025 by rpki-client