Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F08E8E2C45ED11F0947F3587DAE4EC9C.roa
File: F08E8E2C45ED11F0947F3587DAE4EC9C.roa (raw, json)
Hash identifier: Cuv1kNucVrK19XUIZpjaVjpUbLm/6qzn4CxCoBuXbZk=
Subject key identifier: FF:BE:26:67:34:4C:DC:E7:8E:D5:B9:5D:82:18:4A:F4:58:BD:04:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F08E8E2C45ED11F0947F3587DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 11:27:50 +0000
ROA not before: Tue 10 Jun 2025 11:27:44 +0000
ROA not after: Sat 12 Jul 2025 11:27:44 +0000
asID: 395886
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 08:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88754 (0x15ab2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 11:27:44 2025 GMT
Not After : Jul 12 11:27:44 2025 GMT
Subject: CN=684816b6-e9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:b7:7a:1a:31:b8:d1:b4:e8:66:32:7a:c6:
93:cb:48:7b:32:26:33:ce:44:28:53:00:49:be:53:
e9:68:1c:0a:7d:0e:04:47:d2:e6:bd:98:33:74:f4:
fc:c2:69:e2:32:00:77:c5:e1:21:4f:80:9e:7d:7e:
e6:4f:c8:0d:58:62:1e:09:02:5d:09:f0:9c:58:6d:
7a:c1:df:64:a2:9f:f2:95:7b:8c:7f:85:31:bf:a8:
b0:6b:01:7c:4a:af:48:aa:c6:06:ad:1d:76:82:35:
40:80:89:6c:00:57:97:27:93:af:52:08:6b:94:c0:
28:bb:03:69:33:b0:18:d6:a7:20:ec:f2:9b:1e:28:
9a:0d:4d:da:4e:17:e3:e9:69:a3:a1:cf:77:3e:36:
fa:cb:1e:0d:fa:3a:e1:ca:54:fb:11:bb:c3:03:8e:
14:87:7f:18:5e:e0:bc:de:c8:a6:bc:5d:24:84:04:
2f:c0:ae:bd:a8:75:71:fe:cd:82:91:8b:09:5f:6d:
1c:c9:22:2e:b9:6c:a1:af:2c:07:4c:9b:b5:ce:ba:
bb:69:36:80:05:43:e5:52:a2:1e:85:ef:0b:25:83:
3a:5a:1f:34:ca:93:89:a9:ff:57:b9:91:60:a8:75:
ef:0b:45:ba:ef:78:04:8f:5e:de:fa:68:06:be:4b:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:26:67:34:4C:DC:E7:8E:D5:B9:5D:82:18:4A:F4:58:BD:04:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F08E8E2C45ED11F0947F3587DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
21:98:c8:94:c4:89:02:b7:2b:29:4d:c1:2f:37:08:db:c1:ec:
08:63:f9:71:c9:86:c8:50:81:8e:68:b1:20:72:bb:4a:8c:40:
2b:5a:db:f2:9b:93:de:f9:4a:ae:58:d9:27:27:1e:09:08:16:
25:2b:5d:61:0e:5f:dc:18:c5:08:09:5c:ad:2a:c4:1e:09:87:
a6:2a:97:7d:ff:a8:82:58:73:93:27:0e:6a:63:b6:7a:66:f1:
80:44:64:8c:90:b4:9b:28:4c:70:1e:57:a1:27:da:ce:c0:68:
1d:2b:6f:21:cf:b3:ea:29:1a:1e:94:f2:84:b5:ea:56:74:f7:
a4:1d:a1:bb:e5:6c:37:73:84:eb:20:66:0b:eb:49:f0:95:16:
2b:71:c0:95:f5:72:6c:5e:a7:3b:79:95:da:5b:ab:d5:fa:9b:
3a:a7:95:a8:51:c8:b8:d7:77:47:67:d8:68:d9:a2:02:43:06:
c1:10:dd:cb:42:8c:e6:17:66:55:81:a7:24:c2:5c:02:55:a1:
8b:cf:3b:6d:77:87:e8:48:4d:2b:32:c5:72:46:6c:40:9f:dc:
2b:ee:69:6c:88:0c:58:45:4c:91:cc:1a:1c:4d:9b:a7:10:94:
da:3a:62:e8:8a:82:36:1e:aa:41:f3:c7:55:bb:07:ad:09:8a:
7e:ca:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:47:40 2025 by rpki-client