Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6A137866C2911F0819BA4DCDAE4EC9C.roa
File: E6A137866C2911F0819BA4DCDAE4EC9C.roa (raw, json)
Hash identifier: UoLr673/ps7W2r1jPjb+kpCRorgrSAeKlZ/WANmN5T4=
Subject key identifier: E4:2F:08:87:F2:49:A9:47:67:11:8A:D5:76:6C:E6:76:DE:50:BA:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016801
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6A137866C2911F0819BA4DCDAE4EC9C.roa
Signing time: Tue 29 Jul 2025 03:12:47 +0000
ROA not before: Tue 29 Jul 2025 03:12:41 +0000
ROA not after: Wed 29 Oct 2025 03:12:41 +0000
asID: 9294
IP address blocks: 45.197.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92161 (0x16801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 29 03:12:41 2025 GMT
Not After : Oct 29 03:12:41 2025 GMT
Subject: CN=68883c2f-a1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ab:ec:e8:ed:43:c1:b7:a0:80:44:0a:d0:ff:
9e:e8:c7:34:26:96:0a:36:7a:e4:5c:50:90:41:b1:
0f:b3:6f:86:7d:59:96:b6:5c:00:35:cc:99:16:02:
8f:a1:05:a1:f1:f0:12:22:3e:2f:5b:9a:5f:52:2d:
f7:a7:e4:48:e8:a2:a2:72:a0:56:cc:f0:9b:2f:2b:
0a:00:e7:a4:ad:ab:61:de:c1:bf:c4:57:8b:b5:3a:
62:13:66:ee:7d:db:27:29:12:a7:de:f3:8c:ac:21:
b0:10:24:7f:91:93:2a:3b:0a:63:0c:59:6e:cf:17:
6b:e6:17:e2:37:69:ca:cc:c0:9a:59:55:c1:e8:dd:
f2:82:c8:e9:2f:a1:8d:45:a2:9a:b5:71:b9:2c:a2:
dd:43:63:22:f6:42:c5:43:c6:c7:aa:3d:9c:a2:a7:
4c:63:7f:1c:be:77:a9:df:d0:b9:e9:5c:b8:1f:09:
a6:da:86:25:c5:3b:f9:86:43:e8:80:d3:2d:8c:f5:
e1:73:6c:e3:d1:a0:e6:30:58:92:d0:46:92:b8:27:
94:5d:11:5a:32:fb:1d:0c:ee:58:87:1c:3d:3b:a7:
80:43:b7:fc:7d:a0:1a:dc:fa:ef:45:b8:66:e2:bb:
eb:7d:f8:fc:b6:c7:03:ec:25:3f:10:79:0f:e2:59:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2F:08:87:F2:49:A9:47:67:11:8A:D5:76:6C:E6:76:DE:50:BA:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6A137866C2911F0819BA4DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.32.0/19
Signature Algorithm: sha256WithRSAEncryption
27:a8:a6:1a:72:88:20:56:1f:c1:89:db:3f:cd:07:bb:d1:cc:
3b:8c:47:c1:e0:56:eb:2f:6c:c4:0c:20:92:49:26:b6:9a:72:
2d:a7:7e:5b:d5:82:e5:ab:fe:97:19:59:67:53:ea:3a:78:31:
8d:df:67:c8:39:5c:3a:15:2f:c6:c4:06:23:7a:ea:56:e7:c4:
fd:36:9e:36:43:68:cb:cd:d3:4e:4f:11:ea:35:35:da:59:c3:
80:58:bb:4e:f5:12:2f:29:fb:27:b6:19:01:46:2f:f6:db:8d:
07:c2:9d:75:a1:60:b0:6b:31:a4:a7:9e:dc:15:99:c9:a3:dc:
ba:46:18:57:fb:9c:89:27:20:4d:27:05:ee:56:62:4a:6a:10:
7d:b7:50:a8:cd:84:9f:a0:fd:ed:cb:ab:99:39:90:8f:0b:e2:
68:a2:80:b2:3f:57:61:f1:e4:cb:99:97:36:8e:bf:d8:46:86:
22:6a:51:97:22:57:a5:74:78:e1:78:ed:80:bd:9d:1a:59:6b:
a7:da:0e:05:84:18:45:56:53:3e:c6:58:ce:49:7e:a0:11:d9:
bf:1b:fb:68:be:62:6d:42:9a:40:a6:a1:ab:2d:d3:07:0a:ef:
de:81:dd:83:83:1e:78:36:c1:89:41:01:07:a6:d6:e3:07:65:
90:4a:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:01 2025 by rpki-client