Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52FD78AA453211F0A4354BC2DAE4EC9C.roa
File: 52FD78AA453211F0A4354BC2DAE4EC9C.roa (raw, json)
Hash identifier: P7iXoBaq7DCpRUtcNlyyZAhPRvYU5QQ9IY04TBQA4lw=
Subject key identifier: 27:DA:41:4D:F2:CC:1A:D8:F2:20:70:CC:1F:F0:51:A9:2B:9C:51:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52FD78AA453211F0A4354BC2DAE4EC9C.roa
Signing time: Mon 09 Jun 2025 13:04:49 +0000
ROA not before: Mon 09 Jun 2025 13:04:45 +0000
ROA not after: Tue 11 Nov 2025 13:04:45 +0000
asID: 152849
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 08:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88731 (0x15a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 9 13:04:45 2025 GMT
Not After : Nov 11 13:04:45 2025 GMT
Subject: CN=6846dbf1-98ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:5d:22:ff:2d:27:7c:92:a7:73:d9:8f:45:
ab:7f:33:8e:cc:fd:f7:de:8c:ce:b5:90:4a:53:85:
e7:5c:8b:9e:8b:5e:13:a4:60:2e:21:e8:74:80:6a:
d7:a8:28:66:51:67:1d:7f:86:3c:89:a4:d2:ff:dd:
2f:78:1b:49:9a:22:7c:a6:fe:73:20:69:d7:76:73:
68:e9:a5:ea:be:9f:4b:20:5e:21:3d:62:b9:4a:2b:
93:23:29:d3:1e:f6:42:cb:f8:85:48:c1:e0:2a:df:
3c:5f:eb:72:ca:dd:41:cf:fa:63:23:7a:1c:a6:24:
d8:81:31:91:fb:63:5f:19:01:e4:1a:cc:04:3d:f2:
dc:41:f2:2f:c1:c1:c7:fb:ff:8b:53:66:d4:2d:8b:
d1:e4:41:0b:2d:4e:09:fe:90:f1:6a:32:50:28:8d:
47:8a:23:71:aa:18:dd:54:d3:0e:71:58:27:6c:09:
e2:b4:54:c6:a6:af:c6:2d:78:c9:2d:e3:88:6e:27:
dd:7f:9a:81:43:94:28:13:1f:9b:a1:7e:0d:e5:85:
98:0f:8a:a1:60:9b:3a:27:68:ae:c0:61:83:58:d5:
bf:fe:cb:9a:39:3d:f9:17:6e:36:af:8f:a9:70:8c:
7c:02:2f:a5:6d:f1:b3:9a:e3:ad:f9:e7:ab:50:cf:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DA:41:4D:F2:CC:1A:D8:F2:20:70:CC:1F:F0:51:A9:2B:9C:51:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52FD78AA453211F0A4354BC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:1a:98:76:ad:2c:1c:75:ae:1a:c9:c6:35:a7:e1:1f:d4:1a:
92:04:3c:8b:67:c6:c4:48:5c:2b:ce:a5:64:37:65:ef:67:39:
0a:6e:70:a1:3a:62:a2:c6:f0:8d:31:1c:a0:a6:ea:bb:68:06:
89:e0:d6:23:82:ad:d3:2b:bc:5e:3c:b1:61:84:a7:df:b6:e4:
70:f6:96:97:b0:06:17:35:31:78:d1:ec:d6:be:9b:ce:e3:ea:
e4:f3:3a:ca:05:98:a5:75:6b:10:6b:6b:ac:05:1a:fc:fc:be:
f3:f6:45:a6:82:8a:8f:6e:33:fa:5d:91:81:59:d7:b1:1a:2b:
32:ac:7a:1b:f8:97:4f:5e:2d:e8:d1:9e:a4:56:07:15:8c:a9:
29:2d:22:a6:51:62:45:2c:92:e0:df:c0:27:bc:5e:8e:c0:c0:
1f:f5:c9:5f:54:a5:e9:a3:a9:30:92:64:49:c3:49:b6:e6:d2:
df:cd:d7:9a:5e:ce:ed:34:c8:80:ca:68:5e:77:8e:6b:39:53:
12:19:ee:70:19:91:e9:3a:75:58:f3:11:55:21:dd:79:b0:49:
4c:35:36:1f:63:af:6a:32:f8:19:cf:a7:a5:89:08:33:61:bf:
88:f4:ec:9b:2a:ab:7d:8b:5f:2d:d1:9a:dc:a2:30:e2:48:b8:
d3:4c:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:08:55 2025 by rpki-client