Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC9E3CDE49DA11F0A67401A1DAE4EC9C.roa
File: BC9E3CDE49DA11F0A67401A1DAE4EC9C.roa (raw, json)
Hash identifier: vtPK9uH8FskCnLY/L9KHYZ/qu/ll9ZTQxDTlYw3GCqA=
Subject key identifier: 1A:39:17:C2:68:02:68:E3:55:46:92:29:AF:75:D1:C6:DB:56:F7:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC9E3CDE49DA11F0A67401A1DAE4EC9C.roa
Signing time: Sun 15 Jun 2025 11:20:27 +0000
ROA not before: Sun 15 Jun 2025 11:20:21 +0000
ROA not after: Sat 13 Sep 2025 11:20:21 +0000
asID: 152711
IP address blocks: 45.202.64.0/24 maxlen: 24
45.202.65.0/24 maxlen: 24
45.202.66.0/24 maxlen: 24
45.202.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89182 (0x15c5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 11:20:21 2025 GMT
Not After : Sep 13 11:20:21 2025 GMT
Subject: CN=684eac7b-d623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:b6:c3:16:e7:53:75:f0:ee:68:f6:12:65:
cc:8f:73:1a:02:d1:75:d4:5b:6d:8c:06:80:ce:b0:
d8:4e:5f:1b:1f:e2:a7:1e:64:8a:73:f4:91:77:ce:
ad:11:d9:35:1b:58:8a:4f:25:6d:d2:fd:36:03:c5:
d2:ed:67:f8:45:cd:fd:e2:6a:bd:5f:9a:b9:ab:e2:
8e:33:cb:33:08:ac:e4:ef:8e:2c:c2:34:27:ab:c8:
01:d4:87:c4:5b:a9:5f:a7:06:3c:fd:43:b6:c8:8f:
10:8b:65:5f:ac:54:44:9f:d0:ac:0e:cb:68:04:1c:
b7:b9:76:9f:f8:d5:05:80:f7:1d:16:2b:51:44:c9:
fd:94:19:e2:64:c7:13:a3:33:2f:a6:a6:d3:10:ef:
e3:b6:77:74:a3:d5:3f:49:32:ae:13:cb:70:bc:8b:
71:e5:cd:ee:08:54:4c:4e:dd:fe:4d:24:5e:40:f3:
c7:50:94:cf:c5:f7:9e:8d:6a:fa:84:af:d6:ab:22:
91:11:46:48:3f:42:6d:12:50:c9:71:10:ce:3d:c7:
c3:a8:eb:f9:f6:8a:9b:3e:1c:b6:6c:b5:50:1a:e7:
5c:9b:fa:08:b3:4d:68:37:4e:99:e9:6c:c7:9f:2e:
03:5a:46:49:40:db:38:24:5e:36:30:4f:d1:5d:1e:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:39:17:C2:68:02:68:E3:55:46:92:29:AF:75:D1:C6:DB:56:F7:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC9E3CDE49DA11F0A67401A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:78:58:5c:a0:70:8f:ff:53:46:5f:21:9d:c2:85:06:d5:cb:
01:3f:2a:ee:aa:3e:6d:6e:b0:6a:8c:56:4d:ff:88:11:df:dd:
bc:50:87:9c:b3:84:56:c9:44:2e:a8:71:06:ef:25:d1:d3:3d:
aa:64:87:b9:da:55:96:73:55:80:25:ce:d7:e7:0b:3a:b0:83:
bf:ae:50:ef:24:e9:27:7d:1c:0b:e1:24:5f:3a:3f:67:28:f9:
60:aa:6f:a2:71:61:11:49:87:0e:b3:1b:d3:8b:47:ba:7e:e1:
38:18:6a:eb:d4:26:6f:39:bf:80:44:de:50:95:00:6b:12:d1:
73:e4:ae:3a:f2:b4:88:6c:3d:7e:a9:31:f9:e3:bf:7f:eb:ea:
46:dd:6d:4d:ab:a2:45:ec:2c:bc:5b:5a:e6:5a:21:2a:09:d3:
e5:6a:f7:e7:1f:81:f4:06:4e:e9:29:d3:1b:6f:b5:b3:95:a9:
54:9a:7b:f8:46:b2:0c:ca:e2:19:6f:00:48:5f:9c:a0:a9:7c:
3e:00:4f:0c:c1:e5:34:46:1e:98:98:62:4d:e9:88:80:47:58:
d3:ea:13:72:4b:03:d9:77:6e:3e:31:c4:5c:4b:ab:ff:f0:c4:
cb:f5:43:a3:1b:6e:97:ff:7a:69:65:db:03:9a:85:e4:80:e9:
28:6a:97:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:13:53 2025 by rpki-client