Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01FE5EAE62F311F085FDC7DEDAE4EC9C.roa
File: 01FE5EAE62F311F085FDC7DEDAE4EC9C.roa (raw, json)
Hash identifier: pFUFkClUDWd9hhGiaoVqteLvMMq3dsJeqxdq3AcKflI=
Subject key identifier: D4:9E:4C:A4:FE:88:EE:E6:20:26:FE:4C:1A:E7:2D:90:51:89:28:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01FE5EAE62F311F085FDC7DEDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 09:47:10 +0000
ROA not before: Thu 17 Jul 2025 09:47:04 +0000
ROA not after: Fri 22 Aug 2025 09:47:04 +0000
asID: 40779
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91604 (0x165d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 09:47:04 2025 GMT
Not After : Aug 22 09:47:04 2025 GMT
Subject: CN=6878c69e-a119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:71:ee:af:9f:2d:22:fc:14:02:a0:2a:22:35:
68:ae:73:f3:21:2c:a6:79:a0:d1:95:81:78:ef:41:
67:31:93:b5:66:0f:e5:91:46:7a:c9:02:f7:4b:16:
ea:12:54:6d:99:32:b8:bd:3a:4d:2e:44:e3:e8:f0:
c9:31:b2:1c:94:13:45:c6:3a:25:71:0d:00:e4:7a:
ee:ae:3a:e9:e5:1c:f3:ba:e5:f3:65:cb:c1:39:39:
e5:56:81:02:75:57:94:2f:65:03:79:a7:1c:64:51:
61:9a:f3:2b:ed:39:63:59:48:ef:26:b5:2c:35:0e:
5a:31:b4:04:34:bb:a4:ea:f2:cd:2b:20:df:11:16:
25:a2:37:e7:08:8d:4b:a0:da:a4:f5:a5:75:2c:e1:
f1:55:b8:3f:af:ca:d3:ac:ef:70:1b:b2:6d:9a:17:
f4:da:ea:7c:b0:3d:ac:55:46:59:68:bf:24:3e:da:
dd:7d:f3:89:53:29:61:55:0a:5a:93:9e:8c:0a:33:
8d:94:0b:26:8c:9e:31:f9:a5:87:84:53:86:f3:ce:
3e:b3:64:e2:4c:f3:e2:3b:32:d1:4c:00:30:d9:8b:
cf:29:d0:7c:75:c6:b5:0b:7d:78:2a:0b:a5:da:70:
5e:77:a0:f0:3c:a7:ee:33:a2:a5:0c:e5:ba:ae:68:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9E:4C:A4:FE:88:EE:E6:20:26:FE:4C:1A:E7:2D:90:51:89:28:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01FE5EAE62F311F085FDC7DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:e3:6e:d3:2f:11:86:db:1d:33:b9:d4:56:e7:4b:3e:ab:c3:
d9:8a:f4:9f:76:d4:80:35:c7:3c:82:fd:9a:0e:2e:4c:fe:b8:
b9:c0:4b:be:07:f3:92:6e:db:d5:ed:cd:7a:02:02:f6:12:6d:
e7:27:b8:2d:59:1c:b6:d7:09:d5:f2:bc:5f:1c:7f:7e:76:37:
98:2e:43:42:31:08:0b:f8:4e:4c:a5:9c:ce:9e:26:63:aa:5e:
d3:7f:22:42:ca:6e:cd:2b:74:b3:d8:d1:24:4c:99:50:c1:88:
9f:e6:fc:b6:96:15:87:ab:ee:88:fa:d1:06:59:52:28:d8:a2:
1d:ee:17:c6:f5:ed:23:ed:81:f8:68:51:44:70:c3:07:16:c1:
21:41:6c:28:0d:e4:f1:b6:a7:30:cd:b5:5c:25:99:85:c7:91:
31:74:71:61:35:c8:e3:54:0c:c4:07:c2:ed:c4:34:e4:97:e7:
ed:78:69:12:3b:a4:c0:2a:7b:de:de:04:49:50:e5:24:c1:df:
5e:a4:ec:a8:be:af:a5:e9:cd:51:75:8d:cf:05:ed:76:99:b0:
c4:66:df:c9:a6:3d:54:1c:c7:b4:93:59:8a:6c:29:73:93:a6:
f6:93:a4:1b:69:58:13:1c:a2:ef:6a:80:0e:c7:36:40:c5:79:
7f:73:64:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:40 2025 by rpki-client