Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/623A1C1067C911F0B9C5FFDEDAE4EC9C.roa
File: 623A1C1067C911F0B9C5FFDEDAE4EC9C.roa (raw, json)
Hash identifier: U9FAb/vVeLW5v7JOk8MECN2yZE7YCZfKoTtNuZNn6NA=
Subject key identifier: EC:6C:DF:41:E3:E8:F3:18:0D:64:0C:5B:46:29:B5:AC:69:2F:95:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016704
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/623A1C1067C911F0B9C5FFDEDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 13:31:49 +0000
ROA not before: Wed 23 Jul 2025 13:31:42 +0000
ROA not after: Tue 09 Sep 2025 13:31:42 +0000
asID: 63139
IP address blocks: 45.197.64.0/24 maxlen: 24
45.197.65.0/24 maxlen: 24
45.197.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91908 (0x16704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 13:31:42 2025 GMT
Not After : Sep 9 13:31:42 2025 GMT
Subject: CN=6880e444-66a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:2d:f3:3c:f4:14:45:c0:7b:6e:f6:13:fa:
37:5c:a9:c2:a2:5f:61:e3:e5:20:4e:01:df:01:c8:
8d:cb:3b:6a:ac:8b:38:25:46:3c:31:da:7b:aa:85:
fa:8f:d4:0a:91:2e:e5:f4:a9:79:c6:ab:57:6a:e5:
8e:d7:58:8b:e3:bd:2c:3e:eb:70:b4:71:59:0d:f5:
72:e2:c0:e8:01:7a:50:ea:bb:71:77:47:09:4b:f8:
50:5e:ea:a6:c9:e1:fa:eb:d6:8a:c2:24:4c:06:47:
dc:0d:64:bd:b2:e5:b6:02:58:7d:02:71:0c:d2:42:
c4:29:5c:24:f6:4d:c8:67:1b:20:22:87:97:35:b7:
3c:fa:c5:6f:8e:87:5d:35:3c:ea:54:1b:18:c5:eb:
ee:30:14:87:ff:35:7b:73:f9:b5:e1:e3:f8:fa:c0:
8e:d0:df:70:fd:06:e9:9a:71:62:3d:7b:27:b6:d0:
be:f0:29:06:76:8f:40:95:be:9f:0f:bf:6f:f2:27:
78:3e:5c:4c:55:93:b1:81:b3:a8:32:1a:09:2f:9e:
8a:5c:c7:04:22:7f:ce:24:50:d2:09:a7:86:09:42:
d4:fe:d7:4d:c7:35:5f:81:37:0e:a9:2f:09:ed:0f:
45:8f:56:3c:2e:73:75:e5:83:91:8f:19:94:cd:c2:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6C:DF:41:E3:E8:F3:18:0D:64:0C:5B:46:29:B5:AC:69:2F:95:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/623A1C1067C911F0B9C5FFDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.64.0-45.197.66.255
Signature Algorithm: sha256WithRSAEncryption
21:84:86:56:35:0f:c8:10:e1:f8:cc:ae:76:f1:1a:0d:f4:e8:
ea:e5:f9:95:54:bf:66:07:56:87:72:4d:63:e4:1d:a9:0e:48:
4e:29:8a:90:68:c9:c2:a1:d8:57:f0:11:95:99:ad:9a:0e:00:
df:51:f9:b8:65:c9:0a:72:cb:94:2b:fd:f0:19:cf:6b:5b:fc:
5e:c8:e4:0f:11:f9:9a:50:de:f8:0e:24:f3:85:e0:24:4e:0f:
b5:f9:dd:cb:96:ff:ef:59:44:82:6b:20:99:bf:f7:43:0f:ab:
8f:d9:7a:ea:5c:d3:09:da:64:c2:f0:82:24:61:3b:9c:64:f7:
69:95:cc:67:4d:8e:74:44:91:e8:ca:44:7d:f3:41:14:30:5b:
23:46:db:6f:2c:23:73:f6:a7:b2:92:2d:f2:4e:94:11:6e:a7:
04:95:cf:34:c3:b0:25:d4:b9:93:1d:33:c5:c6:94:ab:f0:fb:
23:e0:cf:8a:f2:5c:b4:e7:e7:d4:19:f0:54:c1:0a:cc:94:ac:
ab:58:3c:71:57:bc:c8:26:5e:8c:bc:b3:73:eb:30:35:30:05:
81:52:3f:f0:83:e3:38:e8:ea:ac:40:a3:61:a7:1b:b4:dd:31:
b9:2a:13:07:34:6d:53:c2:06:be:b5:e1:a9:4f:b8:62:e5:02:
91:89:76:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:46:42 2025 by rpki-client