Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/198D2C4E572C11F0AF4776D0DAE4EC9C.roa
File: 198D2C4E572C11F0AF4776D0DAE4EC9C.roa (raw, json)
Hash identifier: CorqXcufsjiiINzNqbaO8a9hJ41o8GYL/agyJ59/m9I=
Subject key identifier: DC:1C:DA:80:00:D6:E2:71:AC:04:83:AF:FD:4A:3E:F8:23:41:4A:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016006
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/198D2C4E572C11F0AF4776D0DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 10:05:37 +0000
ROA not before: Wed 02 Jul 2025 10:05:32 +0000
ROA not after: Mon 04 Aug 2025 10:05:32 +0000
asID: 204741
IP address blocks: 45.194.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90118 (0x16006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 10:05:32 2025 GMT
Not After : Aug 4 10:05:32 2025 GMT
Subject: CN=68650471-db97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:72:fc:a7:f9:e5:65:c1:f2:10:49:17:d9:
55:a6:23:cb:6a:56:b8:29:5f:0d:47:f8:1a:0a:34:
4b:f9:96:16:75:e0:a1:e0:ed:6f:c4:81:31:d6:87:
17:f4:30:f2:cd:13:bb:97:08:6c:ba:10:ce:59:75:
43:14:40:d0:90:c3:f8:b8:20:f6:af:34:fb:20:b8:
91:9f:d1:76:f9:93:00:fd:fe:87:d5:f6:67:39:95:
c8:8e:1c:b5:2b:11:da:83:f1:c4:8a:95:dc:91:68:
4a:8a:4c:f7:e7:21:53:c6:fc:57:4e:55:6d:53:3b:
0e:8d:c3:82:82:12:05:6e:d2:32:e2:42:37:7b:65:
f4:10:66:8e:bc:b5:31:8e:79:23:af:52:28:9b:5a:
cb:86:54:33:3b:c6:75:5b:a2:3e:b2:a5:6f:4b:1e:
23:2d:95:e1:6b:7b:11:75:76:a6:bf:a8:cc:9a:5e:
2a:09:4b:0c:ff:0b:0a:f2:f4:38:aa:d8:25:ce:87:
2a:0d:76:cf:8d:5a:1e:dd:cc:18:2d:10:fe:33:12:
ae:1b:99:71:bf:e0:fa:43:85:90:99:12:25:95:5e:
60:1c:4d:dd:dd:81:40:ea:22:ae:b6:e3:66:e8:7a:
d1:13:5c:90:32:7b:3e:13:a7:0c:8c:fe:91:49:99:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1C:DA:80:00:D6:E2:71:AC:04:83:AF:FD:4A:3E:F8:23:41:4A:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/198D2C4E572C11F0AF4776D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.65.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a2:dd:85:90:53:bc:ba:39:11:29:be:c7:bc:f6:92:92:65:
9b:bd:23:7f:16:27:0d:c0:2d:4e:49:72:3b:a0:53:93:98:05:
eb:a1:ff:fe:f3:6e:31:cd:7e:50:62:fe:87:51:5d:24:7e:ba:
ba:3a:a7:3c:58:2b:e3:ff:de:e0:84:1e:a1:95:c8:5a:4e:1d:
15:5d:09:e8:ae:37:35:17:f7:1b:94:69:c7:c4:dc:b0:da:a8:
1f:cf:90:b7:ec:d8:a8:4d:c3:fe:64:51:05:3d:8d:f7:27:46:
be:f5:54:e1:f9:0c:9c:b4:30:fd:da:d5:cf:77:da:35:96:96:
0e:e5:3b:c7:35:e4:c9:2f:9f:ca:60:40:69:29:56:7e:3f:fd:
33:44:6e:43:9f:b8:1f:51:0b:09:30:95:d9:6a:d0:2d:66:8c:
51:72:ea:1c:f6:f8:a5:bd:c6:93:47:cb:e8:f9:ed:04:41:22:
38:da:34:23:fa:70:bf:1c:ae:bc:d8:b1:ed:41:88:6b:21:6c:
a5:29:0a:7d:60:40:9b:cb:1b:dc:fc:85:bc:5d:4b:88:0c:3e:
ca:e7:68:4c:14:1d:10:16:90:4c:9d:e9:17:21:c7:f9:9c:f4:
2e:f5:cf:17:c6:b5:c6:ff:74:78:ce:74:7e:12:ff:f1:cb:aa:
ba:8f:49:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:33 2025 by rpki-client