Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60D0CB5C460511F0B953ED9CDAE4EC9C.roa
File: 60D0CB5C460511F0B953ED9CDAE4EC9C.roa (raw, json)
Hash identifier: 5F8V4+3D1rl9dWmG73i44S+FonQRWhj7/yJmxx315go=
Subject key identifier: EC:3B:80:12:01:EE:C1:4C:EB:7F:F9:60:D4:CA:47:5A:D3:34:30:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60D0CB5C460511F0B953ED9CDAE4EC9C.roa
Signing time: Tue 10 Jun 2025 14:15:36 +0000
ROA not before: Tue 10 Jun 2025 14:15:31 +0000
ROA not after: Fri 20 Jun 2025 14:15:31 +0000
asID: 137263
IP address blocks: 45.195.16.0/21 maxlen: 24
45.195.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88831 (0x15aff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 14:15:31 2025 GMT
Not After : Jun 20 14:15:31 2025 GMT
Subject: CN=68483e08-0722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:0b:ad:6b:73:57:3d:eb:26:45:38:5a:2e:
8d:4d:e5:03:68:45:69:4d:1a:c5:3e:18:6b:f2:2a:
cc:8c:ee:48:0c:e6:0a:27:7c:ea:f6:d9:7d:59:26:
da:a4:cb:ea:e6:0c:4c:91:32:03:f5:c3:d5:68:2c:
85:93:24:b3:cc:5b:6f:a5:12:da:69:fd:04:86:99:
a8:7d:3f:12:ff:13:83:76:fa:21:18:45:6e:db:d3:
d6:23:d8:31:93:ab:a9:36:b4:d9:d4:c0:1f:1a:08:
06:26:03:51:cd:5a:77:0b:ce:5f:fa:a0:b2:06:95:
6f:8f:5c:31:c3:3d:24:9b:da:75:02:7d:40:a4:4a:
1f:5b:cd:e2:cd:c4:03:15:05:4a:18:9a:9b:bf:58:
56:24:0b:b0:85:45:47:59:a3:50:0d:a6:d7:9f:11:
d1:1c:33:84:84:85:10:c7:86:d1:87:16:69:6c:c1:
df:d2:ca:b7:09:a5:04:45:dd:f9:a4:94:40:5a:12:
c1:fb:b5:89:86:bd:00:93:3a:4d:f3:ea:68:d2:c3:
7e:99:59:78:3d:71:e4:2b:6b:d6:eb:08:56:f7:f3:
ff:b7:e1:dc:46:ee:93:7f:61:b6:ce:5f:43:19:85:
a8:ff:9d:f0:ee:ed:d6:cc:4d:ac:bb:84:ce:ba:f6:
36:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3B:80:12:01:EE:C1:4C:EB:7F:F9:60:D4:CA:47:5A:D3:34:30:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60D0CB5C460511F0B953ED9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.16.0-45.195.24.255
Signature Algorithm: sha256WithRSAEncryption
88:33:0a:db:61:46:05:14:94:46:74:7b:b6:b0:aa:c4:d4:b7:
23:24:85:28:1f:8b:f5:d8:bd:64:7d:5f:80:c5:50:8f:d3:04:
01:ca:bb:bb:f4:40:02:31:e1:bf:3d:96:de:ef:f4:cd:7e:e1:
09:a9:5c:29:40:f0:05:b5:0f:53:ea:09:95:36:f3:75:9a:c5:
02:27:29:d8:2c:e8:c4:7c:99:4b:e7:e3:4d:db:eb:e1:2e:7c:
90:10:c0:9b:78:6e:78:5a:ca:cf:15:57:45:aa:42:30:a0:f4:
19:65:40:d4:67:dd:2a:e0:1d:c4:fe:55:8b:e3:ae:50:e7:00:
d9:f4:f8:35:4e:23:29:20:0d:3a:9c:c8:98:45:9f:44:70:be:
41:e7:60:52:b9:3d:6a:44:59:76:45:a0:24:14:fe:ea:1d:7a:
51:c9:d4:51:c8:a6:5c:e8:ed:fc:da:17:01:7d:9a:60:a5:d1:
c6:de:13:33:3a:65:a0:7e:34:6b:29:1c:33:58:80:9f:db:e2:
d7:56:a6:5d:77:f3:3f:18:18:90:d9:e4:a9:aa:3a:6a:96:e2:
57:46:5d:58:1c:9d:4a:eb:11:09:a5:1b:91:28:16:1c:9c:c1:
24:71:6a:9c:a7:42:19:a9:62:6c:53:e3:2b:cc:45:c3:8a:07:
c9:75:cb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:56:02 2025 by rpki-client