Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9882A234460311F0873DFC91DAE4EC9C.roa
File: 9882A234460311F0873DFC91DAE4EC9C.roa (raw, json)
Hash identifier: h04755wl+U8MkUhLfwVtNDgrLmzYgxO8yRTQwIGzY8k=
Subject key identifier: 42:15:98:48:98:68:1E:41:70:CD:4C:CB:62:2E:82:13:5B:39:D4:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9882A234460311F0873DFC91DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 14:02:51 +0000
ROA not before: Tue 10 Jun 2025 14:02:45 +0000
ROA not after: Wed 05 Nov 2025 14:02:45 +0000
asID: 148994
IP address blocks: 45.200.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 08:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88825 (0x15af9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 14:02:45 2025 GMT
Not After : Nov 5 14:02:45 2025 GMT
Subject: CN=68483b0b-b5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e3:f9:b6:63:32:da:9f:de:8f:8a:85:16:a7:
b4:9d:7c:b3:30:8a:e0:bb:1f:ab:5a:9c:fc:da:9c:
03:15:dd:da:6d:81:12:57:b2:70:50:1b:63:1a:43:
a3:0f:9a:dc:a5:ae:4a:46:a5:4e:de:29:ea:0d:04:
61:aa:fa:25:9b:8a:c7:5d:57:68:75:7a:48:5d:ab:
bc:12:30:8a:3d:ac:ae:f2:3e:ae:90:cf:a1:45:be:
44:6e:d0:fe:9c:27:c7:9d:41:1e:f2:3a:fe:84:13:
30:35:ea:bb:ce:aa:4d:65:9f:e3:07:3c:63:54:6a:
60:3b:f6:1f:9b:09:25:0e:2b:da:5f:98:2e:e7:ee:
3f:a9:48:44:62:2a:0c:72:1f:cf:55:d6:17:b1:a7:
fe:1a:19:73:9b:9a:25:a7:d8:cd:62:2c:05:53:e6:
5f:c5:6d:ce:02:46:5c:20:e5:d1:89:01:87:52:ce:
f7:2b:de:48:c2:a3:60:bd:fb:4e:ed:2f:71:82:c7:
0e:b3:fd:61:65:62:ce:2a:17:f8:e9:dc:22:25:95:
fe:42:d8:b4:85:15:15:c4:f0:14:90:a6:6e:85:a1:
06:aa:a4:8b:64:bc:a2:2f:70:0c:20:ac:1f:07:19:
3d:ae:b7:28:ac:4b:25:d6:33:a7:98:c0:82:5d:7b:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:15:98:48:98:68:1E:41:70:CD:4C:CB:62:2E:82:13:5B:39:D4:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9882A234460311F0873DFC91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.64.0/19
Signature Algorithm: sha256WithRSAEncryption
81:2d:36:67:18:35:d9:86:40:85:5a:d0:b3:87:60:27:67:63:
b1:e0:9c:a7:7e:c3:72:b1:55:59:02:7d:a9:91:9b:10:e8:bf:
f9:9d:e2:84:a4:31:1f:22:5e:43:94:f5:49:fd:4b:e4:46:82:
b3:0b:a2:d1:7f:5d:14:c7:41:cd:52:5f:b2:45:e5:c3:62:2b:
49:9c:dc:59:cb:30:1e:f5:fb:f3:9c:a7:51:58:88:c7:cd:b5:
4d:bf:19:9e:1e:24:83:9a:dd:86:ad:1c:83:a9:4a:19:90:2e:
e2:c5:3d:fc:cc:f7:1c:37:e2:6d:72:48:bb:b4:eb:26:b8:84:
1b:d5:1b:03:0a:57:45:b1:62:9e:8b:ee:cf:5b:18:48:25:3f:
d3:2b:a5:f3:ad:84:c3:cc:64:0e:86:6e:d0:8c:6d:2c:48:0e:
ef:44:5a:bb:13:97:55:24:60:5a:e9:e0:99:56:c7:9b:77:30:
e9:ef:e8:55:73:29:f2:fa:58:81:e7:1d:14:36:5c:6a:89:34:
44:08:2e:a1:03:b7:9e:49:aa:f9:8b:17:e1:fb:a9:a2:75:dc:
a7:90:ad:9d:31:67:bf:24:91:e2:10:a1:96:78:28:71:1c:7f:
58:1b:df:97:c5:88:5f:52:97:2c:28:45:48:8e:c3:da:9b:68:
4c:6b:b7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:24:01 2025 by rpki-client