Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20395F22624E11F08DE06B9DDAE4EC9C.roa
File: 20395F22624E11F08DE06B9DDAE4EC9C.roa (raw, json)
Hash identifier: uKHGI7fIoHAVftdYFmOAcm0zNxxMVkqIdhbK05zVh6E=
Subject key identifier: 4E:0A:93:42:0E:DA:6D:B2:3E:91:0F:7E:4B:85:6A:64:E6:AB:91:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016599
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20395F22624E11F08DE06B9DDAE4EC9C.roa
Signing time: Wed 16 Jul 2025 14:06:54 +0000
ROA not before: Wed 16 Jul 2025 14:06:42 +0000
ROA not after: Fri 25 Jul 2025 14:06:42 +0000
asID: 7029
IP address blocks: 45.196.32.0/22 maxlen: 24
45.196.40.0/22 maxlen: 24
45.196.48.0/22 maxlen: 24
45.196.52.0/22 maxlen: 24
45.196.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91545 (0x16599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 14:06:42 2025 GMT
Not After : Jul 25 14:06:42 2025 GMT
Subject: CN=6877b1fe-4b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8d:d4:e1:27:9d:6d:24:74:6d:d8:a5:f4:b4:
a7:d1:d2:9d:64:dc:90:40:76:28:1f:77:f5:c4:f8:
a4:97:90:c9:34:7f:2e:b4:38:b7:25:81:61:21:2a:
0e:f5:94:8e:eb:20:10:42:f2:66:75:1c:0c:20:ef:
4c:61:1c:98:fb:d8:e9:29:ca:be:62:89:1d:4a:db:
19:a0:a8:35:ec:95:83:f9:57:72:6e:08:03:0b:7b:
32:6f:d3:b4:4a:4f:9c:e6:fd:b9:44:1b:00:c2:ca:
a4:3b:87:4d:4a:4d:03:ee:fa:76:ab:ed:84:b3:70:
c8:47:ee:88:85:ba:6d:4c:42:8d:e9:fa:a5:26:9b:
9f:0b:ec:bb:7f:e4:34:7e:df:a5:5a:8c:a3:04:f7:
28:bb:c5:cc:8d:b6:a3:21:50:c4:17:9d:ef:79:8c:
df:84:7e:65:3f:55:a7:00:58:ed:8e:7d:a0:c0:2c:
67:de:8d:5c:86:36:49:c6:97:23:a9:be:09:8d:e5:
4a:87:e0:81:bf:13:af:7b:f4:6b:b3:c7:75:02:a6:
56:9d:62:23:99:b6:01:74:60:d4:85:f5:4a:37:2c:
c6:04:a2:ae:2e:e9:d7:17:f1:d4:14:2a:91:3c:da:
2d:a4:83:cc:9d:bf:9a:3c:9f:ec:ea:0c:16:25:f8:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:93:42:0E:DA:6D:B2:3E:91:0F:7E:4B:85:6A:64:E6:AB:91:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20395F22624E11F08DE06B9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.32.0/22
45.196.40.0/22
45.196.48.0/21
45.196.60.0/22
Signature Algorithm: sha256WithRSAEncryption
94:0b:b1:e4:25:c9:f9:ed:c8:7e:89:91:14:a9:a6:bd:6a:bd:
45:43:07:f3:fa:21:67:5e:4d:0d:6a:7e:bb:2d:6b:42:b6:ec:
1d:9a:81:45:d4:e3:5b:3d:95:27:5c:43:9c:49:ac:42:06:47:
be:ae:85:3b:d4:a8:ef:62:ac:b0:9d:ee:1f:40:ae:16:6c:97:
71:71:b1:85:cb:53:ff:f2:08:7c:12:27:f2:50:0c:6a:10:da:
f5:d2:2e:2d:fb:99:f0:32:69:c2:70:e5:d3:d5:ae:ea:c0:00:
01:b0:c4:0a:6d:59:6d:22:d4:13:6a:57:ae:71:20:47:ae:05:
a1:9c:72:50:21:c9:98:9e:6a:a6:a7:c9:22:e9:d5:90:ca:08:
11:f8:cf:50:cb:23:6f:73:ec:11:18:62:5c:69:27:ac:1a:de:
db:0d:a1:3c:27:66:d2:48:6b:6d:43:4b:96:29:63:b7:53:8e:
6e:da:17:c7:81:44:55:3c:cf:d6:d7:99:2c:61:40:c7:00:50:
9e:0a:63:cd:84:ae:36:f4:11:9a:ae:6d:c4:f2:15:5b:b9:9e:
6e:10:71:9e:ca:db:29:22:d7:4b:5c:6c:de:c0:cf:9f:38:0b:
07:28:02:e1:a7:4e:ea:bf:89:58:63:4c:b0:22:be:18:94:4a:
88:5c:f5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:34:30 2025 by rpki-client