Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48FDFE6C665011F0AA3BB9C0DAE4EC9C.roa
File: 48FDFE6C665011F0AA3BB9C0DAE4EC9C.roa (raw, json)
Hash identifier: IQFwOtHhkcwlQ0rgFYApGH6CFCesHvM7WVNWIo7iRx8=
Subject key identifier: F3:76:8A:10:AD:4F:2D:B7:0C:2E:0E:6A:87:EB:FE:99:6C:55:FF:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016642
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48FDFE6C665011F0AA3BB9C0DAE4EC9C.roa
Signing time: Mon 21 Jul 2025 16:32:26 +0000
ROA not before: Mon 21 Jul 2025 16:32:21 +0000
ROA not after: Wed 27 Aug 2025 16:32:21 +0000
asID: 27951
IP address blocks: 45.192.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91714 (0x16642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 16:32:21 2025 GMT
Not After : Aug 27 16:32:21 2025 GMT
Subject: CN=687e6b9a-5507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:1b:d1:76:5d:f9:25:9a:4e:01:d9:fe:77:
a4:f3:b5:67:a2:46:75:06:4c:93:b0:ff:91:14:ce:
21:d3:65:2c:9a:41:dc:3d:ad:98:08:80:4e:e7:c3:
4c:c7:5a:b5:a4:ec:3c:1c:66:35:c9:64:de:4e:48:
27:ef:c9:f6:0f:12:5c:9b:34:1e:77:06:5e:81:bf:
be:03:39:10:ec:51:54:85:36:cb:56:c7:03:18:36:
bf:b8:8d:c5:ec:67:2a:df:87:d1:e6:27:66:9c:33:
60:81:c8:d4:06:8f:b4:79:aa:60:87:c6:3f:f5:2e:
f0:23:81:f8:b9:fc:3f:06:52:0c:c6:53:76:d6:fd:
d9:0c:4b:3c:2b:12:0d:cf:fb:b9:a2:72:29:69:40:
ac:e2:96:c1:f9:2f:67:16:10:95:ed:20:34:e5:43:
64:d4:b5:03:87:95:4a:55:c5:d9:2d:d8:b4:8d:68:
09:c0:11:d7:79:f3:58:76:29:84:f1:5b:85:13:d7:
59:17:61:46:52:01:a1:bb:05:08:91:52:55:57:da:
3e:13:4f:54:54:7e:80:a0:d8:22:76:cb:80:a9:b8:
3c:1f:05:54:ff:84:e9:ce:45:8b:1f:7f:df:2f:5b:
c7:b5:48:17:e2:4d:47:0f:1c:a1:92:72:c2:c7:f5:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:76:8A:10:AD:4F:2D:B7:0C:2E:0E:6A:87:EB:FE:99:6C:55:FF:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48FDFE6C665011F0AA3BB9C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
29:29:12:c4:eb:03:97:e0:08:50:61:4b:f8:73:65:23:53:61:
e6:8b:b3:48:ed:ee:99:3a:f6:f3:84:f1:47:49:11:3b:df:77:
85:9e:dc:30:ec:7a:d3:b2:ff:50:78:70:6c:06:e4:2e:fb:13:
68:93:c7:6b:79:4c:de:5f:73:54:05:c8:ce:1a:2e:8f:56:ab:
d5:6a:d7:80:1e:56:e6:34:32:39:06:10:d5:cc:ab:43:ed:db:
5b:22:ec:3f:c0:de:4f:0d:9d:e2:06:d8:0b:17:45:b4:41:63:
8e:13:f3:e8:34:68:87:08:4a:70:c5:87:4e:1d:0c:6a:9b:fb:
c6:c5:87:fb:45:90:16:88:0b:45:e1:ad:1e:fb:4f:bf:d1:b7:
85:2c:d2:37:a4:f9:be:96:85:98:7e:57:c1:2b:a8:c6:b2:ce:
8c:e7:58:89:5e:c4:02:35:66:84:74:b6:8b:14:8c:64:5e:6f:
34:c2:a6:c5:8e:b4:95:81:9e:4d:bb:6e:4b:b8:d0:6e:38:24:
d7:94:86:56:a9:a0:35:59:0e:05:22:4c:73:f3:93:a4:4b:58:
0e:e6:1c:b3:1e:99:7b:ca:2b:b2:01:56:2a:91:18:68:3d:25:
b1:87:f9:bd:a4:9a:f6:ab:04:14:68:a4:3f:13:7d:f1:2c:49:
2a:5e:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:33:22 2025 by rpki-client