Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE486EA5B3911F0991B9CAEDAE4EC9C.roa
File: 1EE486EA5B3911F0991B9CAEDAE4EC9C.roa (raw, json)
Hash identifier: 8FE3GivATh3EfYoCeyeidWOLo6aj+FPnkANA7lkMWUE=
Subject key identifier: 83:E9:F0:85:AF:5F:94:C2:9C:E1:CA:32:31:1E:DA:B5:D9:A0:79:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01630C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE486EA5B3911F0991B9CAEDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 13:48:54 +0000
ROA not before: Mon 07 Jul 2025 13:48:49 +0000
ROA not after: Tue 12 Aug 2025 13:48:49 +0000
asID: 8796
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90892 (0x1630c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 13:48:49 2025 GMT
Not After : Aug 12 13:48:49 2025 GMT
Subject: CN=686bd046-78e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:67:6c:80:79:7e:c9:20:ef:bf:cc:ee:e1:
b4:a9:3d:d2:6a:81:8b:b0:67:f4:fd:4e:42:09:41:
97:c6:a1:2a:45:71:52:8e:db:1d:16:5a:e1:f6:0c:
d2:68:f9:53:06:6f:ac:00:4b:64:c8:90:72:39:b2:
6a:2c:66:95:41:16:4d:61:d9:1c:5f:90:4e:c7:45:
67:03:65:e2:89:f5:27:1d:7e:a6:1a:5b:47:25:fb:
0b:90:5a:e7:1d:af:b8:06:07:f3:60:fb:9b:5b:b4:
7b:22:54:6a:99:56:d7:09:f9:35:0e:f8:54:c9:a2:
1c:05:08:9c:7e:e6:1d:7b:27:2a:8e:f1:bf:a2:97:
bc:1d:d3:d7:40:64:58:68:d1:dd:3b:4f:a5:7c:2a:
e3:b6:50:ca:af:b3:cc:89:74:ef:44:73:62:07:8c:
56:4e:84:0b:56:fd:98:62:c2:21:69:b5:e1:cf:37:
a0:1b:59:ee:40:a4:b0:47:f9:24:04:56:36:c1:ef:
ce:d0:d6:84:f0:e0:3b:15:26:9f:f9:ed:74:99:1b:
b1:93:40:4e:53:67:52:bf:23:60:7a:7c:81:ea:18:
e0:52:62:16:c4:a7:5f:e6:87:09:34:12:25:7e:2d:
77:3b:f4:11:62:bb:0d:04:7b:38:61:78:ef:d7:9d:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E9:F0:85:AF:5F:94:C2:9C:E1:CA:32:31:1E:DA:B5:D9:A0:79:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE486EA5B3911F0991B9CAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
50:67:bb:16:3d:e4:13:3e:63:01:60:5a:63:4d:27:fb:f0:67:
49:7f:a3:5f:8c:27:17:07:13:c6:c8:25:a0:6a:83:8d:44:90:
8c:c0:75:23:c7:ab:7d:b3:e6:17:a7:41:bb:89:03:1b:15:d1:
a9:3d:58:15:11:52:0b:c1:ef:c9:8f:0a:95:5a:28:da:dc:06:
72:68:f3:d2:64:f9:81:2d:f7:43:94:2a:f7:80:d5:20:06:ea:
14:b2:12:10:6d:70:60:72:12:33:37:34:1e:18:9f:9d:5a:eb:
7c:71:1c:66:34:59:11:93:36:c6:9b:1c:59:3b:79:93:58:79:
e8:c4:d8:44:d9:81:82:26:f6:e3:f8:7f:80:55:25:00:e1:09:
e0:3e:1e:a6:c2:86:53:99:77:c4:da:7f:33:42:64:43:1b:f5:
29:0c:94:20:d5:ad:80:52:38:b6:0e:cb:7c:54:a0:74:07:0d:
61:c0:aa:72:07:d4:fc:1c:77:32:49:c0:d3:f9:4a:5f:04:0c:
77:c6:ba:7e:1b:95:68:a7:ba:28:d8:c3:a5:97:a3:26:6e:30:
f6:ca:6d:3a:de:75:f4:a2:67:62:df:ae:cc:4b:e6:ba:85:bb:
da:e6:df:d4:23:a2:92:4e:f1:4a:74:07:fc:6b:b9:15:90:67:
d5:36:1f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:50 2025 by rpki-client