Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77605708450F11F0AC1403E3DAE4EC9C.roa
File: 77605708450F11F0AC1403E3DAE4EC9C.roa (raw, json)
Hash identifier: Aa/QE9syiC25V/2TglVIGwW9qAVq1rg5tFIbhk7/9t0=
Subject key identifier: 11:0C:1B:4A:91:4E:F1:75:C9:E6:C1:E7:14:10:6F:B9:66:E1:BA:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77605708450F11F0AC1403E3DAE4EC9C.roa
Signing time: Mon 09 Jun 2025 08:55:18 +0000
ROA not before: Mon 09 Jun 2025 08:55:13 +0000
ROA not after: Wed 16 Jul 2025 08:55:13 +0000
asID: 202736
IP address blocks: 45.192.113.0/24 maxlen: 24
45.192.114.0/24 maxlen: 24
45.192.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 00:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88703 (0x15a7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 9 08:55:13 2025 GMT
Not After : Jul 16 08:55:13 2025 GMT
Subject: CN=6846a176-1043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:33:c9:4d:cb:4f:e6:ed:75:75:71:64:9d:07:
0b:51:0b:82:4d:98:12:1e:74:b2:31:06:5f:f1:64:
d6:9c:96:17:34:ac:c6:a4:9c:29:6b:32:e7:ca:67:
9f:ca:1d:1c:66:b1:f7:61:97:5e:5e:9a:74:3c:5d:
e1:37:40:47:6e:ad:fa:3e:95:df:1f:d5:0f:18:9a:
63:b9:a4:3e:1f:96:53:49:dc:ca:4e:92:35:b1:a3:
2f:79:d4:e2:f8:35:2c:56:e5:93:6c:63:a9:8b:bc:
fa:39:9c:dc:ec:df:68:3c:be:76:a5:09:39:aa:5d:
fe:4d:c7:be:18:67:b1:6e:f4:29:84:58:81:b1:53:
57:86:72:99:8d:04:52:3e:ec:65:37:91:5d:32:0b:
90:9d:99:db:7a:ff:3a:e6:40:d1:de:1e:20:8e:18:
8c:fd:da:01:6a:75:15:82:17:d2:3f:09:8a:10:0b:
4d:bc:07:d9:be:4c:a9:52:37:98:28:b0:84:b1:37:
df:00:b4:f0:a8:6d:dc:6b:ce:c1:dd:95:7c:0f:af:
73:74:31:7a:dc:f1:7d:a2:2a:f6:b3:29:d7:5a:d0:
38:0d:7f:3d:b0:b7:82:ff:fd:f2:0a:53:3f:75:34:
3e:ba:ee:33:2d:3b:98:11:bf:c9:8f:d1:47:fc:3d:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:1B:4A:91:4E:F1:75:C9:E6:C1:E7:14:10:6F:B9:66:E1:BA:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77605708450F11F0AC1403E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.113.0-45.192.114.255
45.192.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:41:5d:06:65:b5:ac:43:99:8b:89:03:8e:d4:b5:96:d3:f9:
2f:67:d1:d5:21:16:d1:6a:d3:0c:c0:da:df:ca:8c:5b:d2:4d:
8d:be:57:d6:ae:ac:1c:89:45:32:fb:d5:52:a8:44:04:a0:aa:
f0:69:da:41:e2:2d:85:3f:63:d6:77:54:99:b5:27:29:b1:7c:
31:62:00:8e:ed:9c:10:80:23:dc:cb:de:f3:3b:6c:9d:79:1d:
d0:26:83:26:f0:f2:04:b3:00:f8:b2:34:55:e5:09:87:31:82:
5b:80:92:64:48:25:a7:38:6b:5f:34:df:e6:b8:a0:8e:6c:15:
19:df:85:73:80:df:f7:63:c8:76:26:e6:98:a9:1d:8b:9a:36:
2f:a5:e8:f8:37:9b:01:d6:d3:de:d7:01:bf:4d:f6:9e:e2:12:
a1:c3:b7:73:d9:8e:61:fb:4d:9b:0a:b5:1e:ff:0b:e3:6b:99:
97:52:64:04:47:14:5a:d3:43:4c:c5:48:81:c4:a5:9c:1c:a9:
30:f8:9e:ed:08:da:f0:a1:af:c3:59:0b:31:bf:1e:90:c0:40:
3e:e7:81:29:c1:c7:d6:4b:e1:46:30:56:bf:40:9c:87:71:e6:
9b:71:48:11:e0:a0:86:cc:1b:29:de:3e:94:17:4b:b7:c3:79:
82:46:fa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:46:43 2025 by rpki-client