Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA96201A6FD911F0AE93C4DEDAE4EC9C.roa
File: DA96201A6FD911F0AE93C4DEDAE4EC9C.roa (raw, json)
Hash identifier: DfOvaJeIU7hkpp2CYWpE/fB2prukNNzicIa7EGI65U8=
Subject key identifier: D0:CE:FC:F8:2B:2B:00:DC:2F:22:16:26:97:4E:4F:13:5B:80:25:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA96201A6FD911F0AE93C4DEDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 19:49:52 +0000
ROA not before: Sat 02 Aug 2025 19:49:47 +0000
ROA not after: Wed 03 Sep 2025 19:49:47 +0000
asID: 401783
IP address blocks: 45.192.227.0/24 maxlen: 24
45.192.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92380 (0x168dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 19:49:47 2025 GMT
Not After : Sep 3 19:49:47 2025 GMT
Subject: CN=688e6be0-2a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:ce:de:88:f5:ab:f4:8c:c1:12:ac:be:4e:
a8:65:ef:d5:79:4e:5d:26:f2:0c:b6:a8:5d:6c:72:
2f:9a:d6:db:e5:27:7d:be:41:0b:29:25:19:ea:25:
cd:cb:d7:ef:9a:59:17:db:f3:9b:10:18:f8:fb:93:
08:be:98:7e:6c:d0:8a:61:1a:a4:3f:f9:8f:2c:39:
dc:14:49:de:64:ba:dd:82:c5:54:19:7c:ec:f3:3c:
e7:37:72:6f:9e:e5:f1:43:40:09:db:fd:43:23:12:
9b:71:a2:45:7a:63:17:0f:11:7e:e8:fb:53:a5:7a:
db:ca:1b:d5:35:e2:49:88:65:e6:a5:73:f0:f1:dc:
7b:30:6c:fb:69:6b:21:ae:ec:b2:5d:41:04:99:d7:
c3:0b:7f:fa:94:2d:c8:64:96:5e:91:9a:bd:4c:ca:
a9:3e:af:39:14:8e:9f:91:3f:7f:17:a2:5c:72:82:
46:9f:39:b2:ef:28:1c:ef:1b:4b:8f:e8:4f:e2:e8:
d5:62:e7:0b:cc:46:2f:08:06:0c:07:11:a3:4e:dc:
ce:60:98:5f:5d:b2:3e:86:77:23:2d:d5:8d:bc:23:
c4:92:1e:25:88:4d:c6:75:55:bf:03:54:a7:3b:5e:
1d:1e:cc:af:38:7c:36:26:92:22:a4:28:0e:5f:8b:
e3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CE:FC:F8:2B:2B:00:DC:2F:22:16:26:97:4E:4F:13:5B:80:25:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA96201A6FD911F0AE93C4DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.227.0/24
45.192.235.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7e:84:ac:a7:92:8e:8b:e7:32:7b:3e:c0:44:1d:4e:28:53:
c8:55:3d:e2:d5:c7:25:9a:4a:bf:1d:4e:dc:19:9a:c9:8f:1e:
c4:5e:e7:a8:ea:1e:d2:98:73:50:66:03:bb:9f:b1:37:39:58:
f1:5b:51:1d:b1:2d:31:5d:17:7e:41:c6:0c:5a:a4:a2:c1:44:
2f:66:c1:5e:ad:d3:ad:4f:82:3c:27:f5:fd:e0:5e:1e:00:67:
1d:92:2e:e1:bb:7d:ff:5f:f1:ed:a4:43:11:c7:c0:45:fd:22:
a2:c9:0b:96:3f:28:f3:e1:24:91:3d:a8:19:78:8e:6b:bf:bb:
d3:34:00:3c:4b:4d:a9:56:4f:a1:b5:9e:43:7e:64:b2:5b:21:
ce:8e:d5:a9:25:b0:b0:25:88:9d:a5:88:87:0a:ea:0c:cd:a9:
cb:06:a7:ad:b6:c1:59:3b:51:05:6f:20:8a:14:2a:5a:09:d7:
e5:ad:26:e5:db:a9:1c:9b:54:aa:ae:e1:d7:40:58:01:95:45:
1f:85:df:e7:38:05:7f:59:ff:30:b0:d1:e6:cf:6a:4b:de:05:
f1:92:1b:66:a0:6e:b6:8b:91:28:ea:47:f8:eb:44:28:65:e6:
6c:11:9f:c1:31:1c:09:c6:7a:63:dc:ca:4b:74:7d:78:93:b0:
68:eb:d0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:18 2025 by rpki-client