Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE6D3BB86EE411F0BBD205A7DAE4EC9C.roa
File: AE6D3BB86EE411F0BBD205A7DAE4EC9C.roa (raw, json)
Hash identifier: oglWY/B519bZpyItZshbDmQLR+OHnFEz73IPtGhprP8=
Subject key identifier: A3:7C:18:8C:7D:09:3E:26:A3:21:D9:32:2F:A7:9E:1E:06:F4:73:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01686A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE6D3BB86EE411F0BBD205A7DAE4EC9C.roa
Signing time: Fri 01 Aug 2025 14:34:51 +0000
ROA not before: Fri 01 Aug 2025 14:34:43 +0000
ROA not after: Sat 30 Aug 2025 14:34:43 +0000
asID: 20326
IP address blocks: 45.192.251.0/24 maxlen: 24
45.194.90.0/24 maxlen: 24
45.195.82.0/23 maxlen: 24
45.195.90.0/24 maxlen: 24
45.195.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92266 (0x1686a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 1 14:34:43 2025 GMT
Not After : Aug 30 14:34:43 2025 GMT
Subject: CN=688cd08b-6fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:c6:02:63:07:eb:18:d2:cc:78:f4:15:38:
87:91:e6:78:bc:06:03:eb:0e:19:17:84:9a:c7:5b:
71:6e:ff:99:6e:99:36:f4:2a:77:52:06:e9:34:01:
33:42:b0:92:c5:c7:ab:45:42:68:d0:51:d5:8b:9d:
27:92:11:44:9d:84:9b:38:07:38:2c:e8:0a:ee:d1:
44:b4:73:7d:4e:95:6c:3b:bc:49:d4:1e:93:ce:af:
05:a6:03:c9:7a:dd:e1:a4:f0:d4:52:ab:fa:59:c8:
40:09:d7:69:2a:4c:0d:2e:0c:3e:bd:fe:31:31:68:
a2:89:c6:76:e1:70:57:ef:57:6b:f9:af:0f:a2:2e:
71:87:5d:13:97:c8:2a:a3:d9:90:30:26:ca:10:2b:
24:d5:4b:1d:f2:ad:a3:86:d7:5d:5f:ff:8b:b2:d3:
9a:5c:97:84:2c:9c:ad:e6:3b:74:1c:e7:c7:60:9e:
ba:ab:45:9f:85:cd:47:ad:7d:8b:e4:2f:e8:88:18:
5c:21:ac:d1:6e:20:7e:bc:0b:d4:d7:96:9e:1a:39:
f7:e2:a3:4d:47:c7:57:c4:55:7a:b0:17:f1:bb:48:
a7:6a:5f:f3:82:3d:67:ec:16:f0:d4:77:1f:16:8d:
55:0e:24:13:f8:b2:00:f2:39:33:24:0d:e4:1c:5e:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7C:18:8C:7D:09:3E:26:A3:21:D9:32:2F:A7:9E:1E:06:F4:73:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE6D3BB86EE411F0BBD205A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.251.0/24
45.194.90.0/24
45.195.82.0/23
45.195.90.0/24
45.195.106.0/23
Signature Algorithm: sha256WithRSAEncryption
24:bf:d7:cc:c8:55:50:0a:3a:94:65:69:2b:60:e8:0b:01:57:
f2:8a:c8:f9:55:5a:e7:8f:21:d9:ec:71:62:74:a5:c1:6a:5a:
04:0a:0a:1a:d8:f3:96:7d:3f:2b:40:1e:f4:4a:39:dd:20:ae:
c4:0f:2e:aa:4e:28:46:47:fd:6b:9e:89:3e:fd:7a:0e:f3:90:
12:ca:38:50:07:e8:9f:fc:92:aa:3f:c0:a3:01:62:39:51:29:
11:27:60:3b:b4:06:05:9d:46:37:ce:f9:c9:68:a7:93:bd:8e:
ff:f5:98:9b:f4:0f:9d:09:f1:67:b1:28:5c:ae:40:98:33:3a:
ca:95:de:d8:14:89:59:04:48:56:ca:29:61:eb:19:19:04:04:
d7:a3:51:3e:a1:b0:85:04:d9:e2:fd:e3:34:20:73:35:dc:8a:
1c:26:22:4c:b6:9d:7f:7d:18:4b:ca:a6:31:ac:3e:9c:40:b4:
70:20:6f:73:53:bf:cf:b6:f4:69:7c:36:1f:ed:60:d0:0a:ac:
68:28:7a:5a:57:4d:67:93:db:c7:01:f7:01:42:36:bd:98:78:
ee:59:ee:50:47:b3:ef:c6:3f:d3:bf:41:ba:2b:b2:1b:c5:cf:
83:59:92:ca:03:d2:ea:42:db:d3:77:b5:65:8d:0d:c6:1a:22:
d4:14:e0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:16 2025 by rpki-client