Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/059049CE57FE11F0875DD4A2DAE4EC9C.roa
File: 059049CE57FE11F0875DD4A2DAE4EC9C.roa (raw, json)
Hash identifier: fVY4qfMF6ATWlCl6czg98G241dZ9nWNn/eVZ22XGACQ=
Subject key identifier: F8:BC:13:4F:F1:9B:16:E6:3C:42:E2:E4:35:5B:57:B1:E2:5A:6B:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016050
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/059049CE57FE11F0875DD4A2DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 11:08:18 +0000
ROA not before: Thu 03 Jul 2025 11:08:13 +0000
ROA not after: Mon 04 Aug 2025 11:08:13 +0000
asID: 204741
IP address blocks: 45.194.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 04:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90192 (0x16050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 11:08:13 2025 GMT
Not After : Aug 4 11:08:13 2025 GMT
Subject: CN=686664a2-0413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:1e:cf:ea:44:91:a2:0a:91:36:2b:0e:42:
a3:4a:90:59:0e:90:c9:18:5e:36:dd:88:45:15:02:
16:f8:93:1c:c3:b1:b8:0c:fb:68:22:f2:48:d9:cf:
0d:99:6f:3b:90:23:e7:d0:ee:e4:b6:a0:da:38:ca:
63:97:bf:42:34:50:8f:15:0a:22:fc:40:fa:7d:62:
3d:e1:d4:58:90:e0:1f:9d:c4:0a:73:1c:c9:48:4f:
62:6a:73:5a:8d:a6:37:1b:32:31:ef:45:f9:97:d1:
15:05:df:a4:3a:5b:1c:d6:62:90:58:24:77:cb:9b:
5f:6b:5b:fa:0b:d5:d7:77:fa:a4:5d:6d:56:0e:69:
95:37:8e:b3:09:36:c6:00:c0:75:7c:0f:5b:8f:31:
1c:5c:c4:5d:3e:9b:b3:0d:7f:77:b8:4c:dc:39:5a:
a4:d6:cf:bf:b7:a1:da:f8:44:48:cc:5f:d0:ea:94:
94:7d:45:04:58:69:08:13:17:8a:c3:73:d2:94:dc:
23:e5:75:1e:87:e9:db:c3:1f:e1:6b:97:11:bc:97:
b1:6f:da:ee:45:2d:14:89:5e:2a:81:5c:88:7c:e6:
36:88:91:7a:4b:5e:ba:b6:01:80:ff:73:ca:46:cb:
fd:a9:7a:bb:31:ac:85:70:cc:b2:99:ca:06:07:7c:
d5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BC:13:4F:F1:9B:16:E6:3C:42:E2:E4:35:5B:57:B1:E2:5A:6B:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/059049CE57FE11F0875DD4A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.65.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d7:0a:c4:f1:6f:ea:b0:8f:56:91:25:20:e2:25:ee:96:71:
0d:67:4d:11:ba:97:7b:8a:4b:61:11:4e:49:e0:f2:5d:e0:90:
52:5c:e7:3f:b0:16:d6:96:75:4a:0e:d6:d3:dc:d2:07:9a:ca:
7f:d1:18:48:57:14:64:b8:ad:58:0d:d7:3b:30:af:7e:4f:1b:
dd:25:aa:e6:3b:1d:7d:a5:43:cc:97:71:6b:34:08:8d:ce:e2:
7e:99:3c:15:96:f2:8a:aa:b4:20:7a:bc:21:bd:b2:32:db:b0:
e2:24:a8:81:22:5b:67:28:46:21:af:4f:eb:64:78:59:e2:ec:
8c:2c:4c:0e:3d:30:6b:fd:a9:be:6d:6d:24:ff:fc:00:36:b1:
fb:ac:23:27:bd:a2:b0:85:6a:13:05:03:56:d0:cf:cb:b8:ee:
77:86:7b:2f:69:9e:cc:6b:16:59:bb:25:35:f6:9b:fc:9d:ad:
e9:8f:9b:79:23:3b:c0:7d:6f:fe:ce:56:d9:cf:8d:f9:84:0e:
fe:e4:6e:2d:06:f0:eb:e8:3c:a1:01:9a:3c:81:44:6d:87:ae:
f3:9e:e1:c1:98:9f:55:79:23:ca:b9:7e:74:8d:a6:13:14:f8:
19:94:31:9b:46:7b:0a:48:d9:ff:b1:5f:8b:ac:8e:74:da:c2:
7c:14:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:21:36 2025 by rpki-client