Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8C01D2A408211F0A9AFFACADAE4EC9C.roa
File: E8C01D2A408211F0A9AFFACADAE4EC9C.roa (raw, json)
Hash identifier: Le7stD6xMoRL1nHTIYM0NC2AWALMYOXYBPhbnc0NxuI=
Subject key identifier: 81:E3:B1:19:DC:96:BD:B3:0C:3B:F7:38:93:67:FE:EC:82:50:99:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015994
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8C01D2A408211F0A9AFFACADAE4EC9C.roa
Signing time: Tue 03 Jun 2025 13:59:05 +0000
ROA not before: Tue 03 Jun 2025 13:59:00 +0000
ROA not after: Mon 30 Jun 2025 13:59:00 +0000
asID: 27951
IP address blocks: 45.194.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88468 (0x15994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 13:59:00 2025 GMT
Not After : Jun 30 13:59:00 2025 GMT
Subject: CN=683effa9-18ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:10:99:df:c7:55:3d:b0:ac:2c:f9:d7:97:
4e:f3:62:b3:bc:15:b9:22:19:4f:10:7b:fc:68:99:
20:40:d3:99:ac:2c:da:35:f5:67:ff:f0:05:7c:63:
84:3a:36:34:f5:54:72:c7:f9:b8:47:87:f2:fc:49:
e3:63:c0:b6:40:8b:f5:bc:6e:4d:99:a5:f1:1c:90:
46:72:a3:97:70:0c:6f:c0:a2:a9:eb:fb:71:b5:18:
23:b9:56:a0:30:f1:3d:5d:15:43:94:93:7c:33:dc:
49:fc:83:29:f7:52:ee:68:cd:58:15:1e:fe:8d:9d:
90:e6:67:5a:22:80:ab:33:71:24:c7:91:3f:cd:25:
1a:9c:68:71:17:4f:4a:bf:33:93:27:5c:14:de:84:
ff:be:40:4b:35:ef:9e:46:14:3d:e2:b8:ac:ea:4a:
0c:02:67:d9:bc:e2:f6:59:a4:e3:fb:db:9b:4e:60:
3e:f3:5f:36:cc:9c:72:df:6f:3e:2a:8f:b4:a1:99:
4e:cf:3f:85:78:20:4c:00:a9:79:3e:45:5d:07:5c:
3e:8b:39:61:97:e3:0f:26:a5:b7:9a:e5:d4:48:b2:
03:f8:9a:e6:79:c5:6a:3a:21:d2:ed:eb:30:bc:7c:
7c:3f:60:8a:d3:10:dd:6b:c4:96:6b:33:be:2c:16:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E3:B1:19:DC:96:BD:B3:0C:3B:F7:38:93:67:FE:EC:82:50:99:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8C01D2A408211F0A9AFFACADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.67.0/24
Signature Algorithm: sha256WithRSAEncryption
63:dd:70:69:7f:2e:1d:46:f6:5b:dc:3c:26:9e:c4:61:8d:af:
23:15:ed:18:36:c1:8c:61:28:a1:24:b8:49:a1:5d:b6:7c:13:
c6:9b:a9:2c:26:af:20:1a:36:cb:5a:ee:8e:5c:ea:d3:01:0b:
a3:c1:32:42:e7:27:0d:ed:fb:f0:82:94:c6:00:d8:68:0e:1f:
11:f3:5b:cd:ce:4c:26:5e:64:2a:22:ba:ac:8d:43:7c:89:88:
4b:be:bb:ba:52:1d:cf:9c:5c:b4:17:db:b6:aa:51:89:39:3a:
d1:e2:3d:fd:11:c1:60:fc:21:8c:3a:b6:08:66:f5:0b:1b:8a:
6e:68:ad:8b:88:1c:62:37:09:28:e3:d6:e2:95:46:3e:b2:92:
49:43:67:c0:b5:79:4a:f5:a6:7d:a1:f8:4f:e7:95:fd:47:15:
57:1a:7c:ca:d0:99:76:4b:84:69:56:e3:7c:ca:76:c1:2e:0b:
93:c9:75:d3:21:0d:d3:eb:d0:70:c5:f3:81:60:5f:bf:62:17:
e4:a4:2a:f4:62:10:b7:41:0b:29:51:f3:60:34:9a:d2:28:e5:
c4:39:33:92:95:74:d2:e6:f0:a8:6e:20:dc:43:bc:ff:98:20:
d5:02:72:e6:71:59:d9:6f:c9:49:ef:fd:8b:4a:cc:ff:29:72:
c2:75:35:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:17:31 2025 by rpki-client