Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F8014A6479511F084A52FC8DAE4EC9C.roa
File: 5F8014A6479511F084A52FC8DAE4EC9C.roa (raw, json)
Hash identifier: JW6AuVkJo1BILkc5+aYCxWL1q3ihh8Wfqqhntg4ktpk=
Subject key identifier: D5:7C:37:23:BA:1C:FF:EE:58:53:9E:81:AB:16:3A:E3:A8:19:56:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F8014A6479511F084A52FC8DAE4EC9C.roa
Signing time: Thu 12 Jun 2025 13:58:53 +0000
ROA not before: Thu 12 Jun 2025 13:58:48 +0000
ROA not after: Fri 05 Sep 2025 13:58:48 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88987 (0x15b9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 13:58:48 2025 GMT
Not After : Sep 5 13:58:48 2025 GMT
Subject: CN=684add1d-c8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:ca:db:ad:ef:98:14:61:49:f9:f9:06:10:
fd:a2:32:6a:19:9a:c4:fb:90:65:6b:45:2f:76:ba:
db:bb:ca:9d:86:1f:fa:f4:c6:43:1e:11:66:cd:25:
98:f3:6f:05:0d:ab:d7:ec:17:d9:94:00:67:c3:c3:
8a:a9:37:78:ff:b4:0d:f1:17:9e:8d:39:60:4c:29:
22:7d:b6:8c:c0:7b:7f:8f:d6:dc:a5:db:88:7b:70:
7c:f0:a0:26:8a:24:7f:37:c8:53:4e:4a:b5:9e:d9:
f2:16:b9:70:61:74:15:a7:ef:36:59:e4:ea:39:ae:
3b:22:f1:04:64:c9:f9:7a:c1:6c:80:84:0d:4f:8e:
56:d3:78:a2:99:0b:9e:8e:9a:c0:64:6f:37:7c:00:
d8:ab:9c:f7:dd:da:30:d9:fd:02:7a:a0:0a:b0:f9:
d0:d4:8a:0e:b7:85:75:d4:20:28:47:0f:ab:79:eb:
78:b9:1f:e2:ba:4c:77:15:b4:86:87:38:32:fa:00:
85:ed:d5:2a:3c:0e:13:f6:79:80:ba:c8:37:6b:fa:
d0:4d:f0:3e:ab:c0:88:3e:55:6b:08:60:36:0f:7a:
38:79:2a:17:c5:fb:71:0f:c0:98:cc:5b:65:89:ab:
b0:15:b3:40:31:bd:62:4b:a3:ea:cf:cb:51:e1:81:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7C:37:23:BA:1C:FF:EE:58:53:9E:81:AB:16:3A:E3:A8:19:56:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F8014A6479511F084A52FC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:51:4a:18:c0:75:9c:9f:e0:3a:21:6e:22:59:68:85:06:ca:
71:31:5c:f6:30:d7:35:6b:46:31:9d:aa:8a:ea:ae:49:44:78:
c5:c1:f0:b9:35:09:fe:62:a0:6f:a6:d5:b4:e3:0f:84:0f:e0:
c4:62:5b:9e:ae:61:91:aa:1f:4e:c6:60:0e:1d:1b:19:a1:3a:
90:00:39:16:fe:73:4e:4f:ca:96:5c:ae:f3:03:ce:de:eb:ac:
c6:16:61:a7:04:37:83:8b:fb:7b:e9:b1:58:95:23:6a:5b:90:
04:cc:43:5c:36:56:1f:dc:16:9d:8d:2f:36:75:b1:6a:ba:8a:
6b:4b:1c:8a:f5:4f:c6:bb:87:39:b7:1c:f5:b5:e8:36:39:81:
c7:37:6f:26:fb:68:b4:f9:ec:bb:db:00:fa:21:91:d1:6e:14:
e3:00:44:5e:ba:7f:3e:aa:91:eb:a4:9b:f8:f7:aa:6b:4f:da:
f4:3a:e2:bb:1d:af:b7:53:f4:45:39:7c:a8:30:2a:cc:40:25:
70:7f:64:84:1f:93:9f:f5:a1:79:76:ac:a0:c6:99:96:1b:2b:
4d:65:6b:27:87:5f:57:45:46:bb:47:52:6b:36:b7:3e:aa:b2:
91:4d:2a:e1:2f:db:82:04:5e:e9:13:f7:97:89:ed:5a:1c:3b:
47:c0:b3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:55:22 2025 by rpki-client