Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89B0E06867C811F0AF4787DADAE4EC9C.roa
File: 89B0E06867C811F0AF4787DADAE4EC9C.roa (raw, json)
Hash identifier: VDANuE6ffJtps2et8ZpuheZNreaJZoldh7mBqcfrVNg=
Subject key identifier: 8B:6A:FA:54:F9:15:8D:62:BE:E1:FD:60:47:AC:36:72:D7:C8:4C:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016702
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89B0E06867C811F0AF4787DADAE4EC9C.roa
Signing time: Wed 23 Jul 2025 13:25:45 +0000
ROA not before: Wed 23 Jul 2025 13:25:40 +0000
ROA not after: Tue 09 Sep 2025 13:25:40 +0000
asID: 63139
IP address blocks: 45.197.67.0/24 maxlen: 24
45.197.68.0/23 maxlen: 24
45.197.70.0/24 maxlen: 24
45.197.71.0/24 maxlen: 24
45.197.72.0/24 maxlen: 24
45.197.73.0/24 maxlen: 24
45.197.74.0/24 maxlen: 24
45.197.75.0/24 maxlen: 24
45.197.76.0/24 maxlen: 24
45.197.77.0/24 maxlen: 24
45.197.78.0/24 maxlen: 24
45.197.79.0/24 maxlen: 24
45.197.80.0/24 maxlen: 24
45.197.81.0/24 maxlen: 24
45.197.82.0/24 maxlen: 24
45.197.83.0/24 maxlen: 24
45.197.84.0/24 maxlen: 24
45.197.85.0/24 maxlen: 24
45.197.86.0/24 maxlen: 24
45.197.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91906 (0x16702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 13:25:40 2025 GMT
Not After : Sep 9 13:25:40 2025 GMT
Subject: CN=6880e2d9-8ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:40:24:93:a3:dd:04:af:4d:b7:12:b3:4b:
5a:82:5a:be:3e:9c:fa:10:8b:09:08:95:0a:c4:da:
a0:57:b8:02:ce:1f:ee:8d:b9:aa:f6:87:b4:c9:59:
a6:03:89:02:07:94:6c:1a:90:cd:82:ae:c3:33:d7:
97:fd:c1:6c:d3:8c:9b:b5:58:d4:0e:a0:bf:a7:47:
15:ca:b2:8c:ab:10:1f:b1:6a:39:37:a0:42:e7:e6:
45:2a:88:3e:ce:e3:2c:07:a1:a8:0f:a0:fa:d4:b7:
40:3a:b5:56:59:dc:f1:89:7a:2f:50:78:32:47:a1:
f4:b8:ee:34:e1:e0:f2:3d:cb:0b:f0:40:1c:96:cf:
f3:12:80:2f:50:36:4a:2d:8b:03:ad:bc:11:09:49:
ed:50:53:1a:e3:e0:ae:b9:26:b5:17:f8:b6:24:cd:
84:cf:e9:e0:25:01:06:b6:66:84:d6:76:70:02:1c:
25:18:7e:2e:d7:e7:40:db:ed:54:81:3b:ee:9c:00:
9a:ba:1a:c9:1e:97:50:81:da:cc:93:33:f2:35:d9:
32:b5:39:91:97:77:27:59:d3:5a:98:bd:5c:fc:3b:
ea:14:06:d6:18:cd:a2:c9:6d:91:59:9f:ba:15:aa:
6f:4c:fc:b9:cf:5f:56:b0:6b:9f:03:a6:99:e1:fa:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6A:FA:54:F9:15:8D:62:BE:E1:FD:60:47:AC:36:72:D7:C8:4C:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89B0E06867C811F0AF4787DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.67.0-45.197.87.255
Signature Algorithm: sha256WithRSAEncryption
ab:f1:a4:1c:0a:17:a5:31:e5:2a:74:da:9e:fa:3a:35:12:31:
a5:ae:f3:1f:3c:46:b0:bb:cd:e6:93:61:d7:fb:08:59:17:50:
f6:41:df:31:9f:b1:44:b2:f5:c5:d1:e6:b9:ad:be:dc:ce:1a:
e5:02:55:dc:be:a8:ea:22:00:d5:2d:c0:da:b5:26:0e:3c:fb:
4f:c8:76:24:29:5c:63:f6:a3:05:47:33:a8:33:bd:04:1b:be:
7b:39:48:0c:46:b6:95:7b:37:d6:72:cf:c6:8a:09:e3:6d:4b:
b9:d5:19:69:2b:d8:f7:46:3e:80:ad:43:e7:5b:81:6f:fa:02:
cd:82:bd:8b:c4:3f:ce:4e:30:6b:fa:4b:8f:af:c9:51:f2:b7:
33:53:5e:e7:b3:1d:55:b1:60:76:83:1c:f2:2e:af:df:3e:9b:
cd:c9:be:55:4b:43:5b:eb:65:d8:02:25:25:a9:63:00:91:a9:
2f:2e:c4:49:e9:e5:37:c1:7b:9d:0a:89:a6:0f:63:6e:0f:87:
d8:fe:5d:c9:78:9c:53:2a:56:94:d5:d9:ec:e4:a4:a8:fe:83:
74:7d:df:17:95:39:f6:2f:92:9b:02:a9:74:21:e5:97:bc:ec:
0d:91:d5:2f:c5:9f:b1:71:dc:56:dc:91:27:34:90:ca:18:99:
49:78:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:23 2025 by rpki-client