Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14F22426624111F0A81183C9DAE4EC9C.roa
File: 14F22426624111F0A81183C9DAE4EC9C.roa (raw, json)
Hash identifier: yBe8dSmaI6u9cL6UpD+jq6rXYhP0JGl3fAubkHeKHCk=
Subject key identifier: 9B:84:06:10:1A:4C:D1:98:97:69:A1:CC:FC:6D:56:02:8F:5A:71:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016589
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14F22426624111F0A81183C9DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 12:33:32 +0000
ROA not before: Wed 16 Jul 2025 12:33:27 +0000
ROA not after: Tue 22 Jul 2025 12:33:27 +0000
asID: 399989
IP address blocks: 45.196.32.0/22 maxlen: 24
45.196.40.0/22 maxlen: 24
45.196.48.0/22 maxlen: 24
45.196.52.0/22 maxlen: 24
45.196.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 12:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91529 (0x16589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 12:33:27 2025 GMT
Not After : Jul 22 12:33:27 2025 GMT
Subject: CN=68779c1b-029d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d6:96:c1:72:8c:be:ea:86:d3:59:ad:6d:fb:
ce:d2:34:e6:0a:06:51:af:32:99:4a:c6:b3:6c:1b:
15:f7:5d:04:03:5c:94:f9:96:48:bc:23:49:1e:b8:
ca:7a:78:51:a7:bc:f5:42:fc:24:b9:64:19:75:bb:
e9:dc:73:6e:60:6e:cb:24:2f:c9:ae:28:a4:39:4f:
1d:53:ad:2a:4d:f7:85:76:94:66:a5:70:a6:8b:7d:
3f:a1:b8:da:ca:1e:62:8a:f1:88:2c:e9:9f:dc:de:
a2:50:95:92:c7:13:cb:f3:2f:4e:8e:20:96:c2:7d:
6b:e7:02:b3:d8:89:6b:00:1a:b7:14:c2:7b:bf:b7:
86:00:89:98:a2:2f:10:2b:70:9b:79:de:e9:ca:ed:
01:2e:48:61:7b:09:7e:36:30:79:11:55:b0:f9:bf:
92:88:d5:93:10:2f:b8:1b:ed:6b:5b:b8:58:fa:26:
46:d6:cc:71:bd:ed:86:0b:c6:7f:b6:df:6d:ad:ff:
13:ef:41:fc:ee:3c:e0:aa:b9:51:d3:98:ea:77:7a:
95:17:24:a5:f3:a4:1b:a3:87:d1:3f:21:d0:ea:42:
ba:7e:a5:72:d5:d4:51:38:3b:a9:f0:89:a0:24:da:
c2:f8:0f:df:a9:4f:7f:c9:a8:23:30:2b:40:88:27:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:84:06:10:1A:4C:D1:98:97:69:A1:CC:FC:6D:56:02:8F:5A:71:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14F22426624111F0A81183C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.32.0/22
45.196.40.0/22
45.196.48.0/21
45.196.60.0/22
Signature Algorithm: sha256WithRSAEncryption
81:ce:67:22:88:52:38:78:b2:3a:57:43:e0:5d:43:17:34:d7:
aa:1d:00:d8:9a:25:99:38:bc:ff:fa:f7:b0:9c:1a:77:4e:ff:
45:46:3d:4c:c0:14:33:31:cc:e6:a6:e3:e2:34:0e:ca:b1:7a:
3c:d8:3c:1b:e4:98:e8:4e:99:75:1a:4d:8b:d5:60:87:7a:85:
23:ee:c8:14:23:40:eb:b5:bf:cd:ae:06:01:68:4e:33:8b:68:
a1:1a:b3:33:d6:f1:08:03:79:57:f7:43:96:a3:76:65:c0:18:
e5:dc:a8:a4:00:2f:3e:7b:59:33:a6:59:f6:9b:8d:08:73:10:
32:e7:e0:9f:a1:fe:11:3e:d3:dc:30:07:c9:a4:9e:af:1a:45:
42:88:7f:cd:82:0e:46:cf:b8:32:29:44:44:d2:2d:40:39:75:
c8:95:03:29:43:41:31:cf:f8:88:91:10:3d:85:ad:98:90:e7:
2c:aa:5a:79:f3:93:88:f1:b4:32:1e:e9:10:96:63:fb:c4:03:
20:b7:2b:1d:85:7b:27:6b:7b:56:eb:79:f6:c0:e4:8a:7e:13:
e8:ab:6c:fe:ad:16:03:25:2b:c9:e6:ca:10:08:29:60:96:cd:
42:de:cb:16:2a:4b:db:04:15:aa:d9:b8:dd:77:5a:21:30:d2:
24:4f:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:31:22 2025 by rpki-client