Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22EACFD258BA11F0897E46EDDAE4EC9C.roa
File: 22EACFD258BA11F0897E46EDDAE4EC9C.roa (raw, json)
Hash identifier: RdoMQolcLqCnEyIlAPU+bFtARxkI94+nrK8/tE2lysM=
Subject key identifier: D1:EF:A1:C4:47:CA:C8:2D:50:2A:0F:77:AB:60:CF:3D:76:2E:B4:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22EACFD258BA11F0897E46EDDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 09:34:52 +0000
ROA not before: Fri 04 Jul 2025 09:34:48 +0000
ROA not after: Sun 03 Aug 2025 09:34:48 +0000
asID: 20326
IP address blocks: 45.207.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 04:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90303 (0x160bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 09:34:48 2025 GMT
Not After : Aug 3 09:34:48 2025 GMT
Subject: CN=6867a03c-a15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:62:15:fb:b4:2f:a3:bd:16:c2:b5:e0:7f:
c7:f4:4e:76:bd:53:6d:04:3c:30:dd:ce:4f:d4:bd:
6f:48:09:ba:96:f4:dd:da:59:67:cb:f0:e5:06:48:
bd:bb:e8:e5:91:59:db:f3:06:c8:b0:ca:7a:76:54:
95:5d:ce:ad:0b:06:f2:11:98:c4:26:25:5f:22:bc:
34:7b:1c:30:bb:9b:90:3b:1b:69:8b:0c:d5:e1:53:
93:13:8c:3f:92:91:1f:fd:92:c5:37:ff:b2:e9:2f:
89:b9:80:c9:c2:f7:94:bd:a6:8f:58:17:4a:da:9d:
ae:e8:5c:4c:f1:12:19:25:c2:22:78:da:7f:9d:d3:
5b:86:a7:d1:a0:c4:d1:dd:78:3f:d8:3a:d8:54:8b:
bd:36:62:c8:5e:4c:d1:2a:48:d3:9d:03:5b:40:31:
22:57:24:88:3a:24:2a:0e:98:a9:88:36:57:67:d4:
7c:3e:2a:04:fc:96:94:23:33:f5:8a:05:63:9c:8c:
1b:7b:3c:ea:23:af:36:28:d0:59:f8:46:ec:18:f5:
4d:b3:61:9e:2c:78:46:e3:0e:46:c0:79:07:c8:e5:
a4:8b:53:f6:61:09:34:7f:1c:a4:c6:eb:cc:4a:b7:
62:59:25:d1:3b:27:c8:e3:f9:f5:d2:96:b5:01:d1:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EF:A1:C4:47:CA:C8:2D:50:2A:0F:77:AB:60:CF:3D:76:2E:B4:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22EACFD258BA11F0897E46EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.164.0/23
Signature Algorithm: sha256WithRSAEncryption
30:65:ba:78:99:32:8c:42:42:db:e7:16:06:fb:00:fe:41:7b:
c5:b0:3e:e3:60:2f:a6:fa:00:bf:e7:72:03:a1:5e:ac:03:f4:
0d:2b:ec:0b:c3:94:78:5f:74:75:4a:fc:73:84:bf:46:ed:05:
fc:ce:26:b1:ef:31:ea:c7:1e:9c:73:9e:4d:ab:ac:a6:c4:6c:
71:46:ba:ef:db:35:c3:1d:2f:da:8a:86:92:40:fa:35:52:db:
4f:19:1b:b7:b5:f1:46:6e:8a:ca:b5:cc:30:ea:07:82:5e:c8:
64:91:9c:79:2c:13:5b:fc:dc:11:74:9d:92:0b:ae:14:8c:b9:
1f:60:50:c1:9f:0d:3b:99:b4:99:23:14:6f:03:0e:63:4f:f7:
e6:80:15:9e:b6:80:d7:4b:5b:93:71:e0:c0:20:a4:98:6a:30:
5e:a1:06:b9:d9:87:a8:23:21:d0:3b:4d:e3:27:9a:99:34:75:
91:b7:61:cf:e7:a4:eb:7e:52:10:47:5c:5d:89:39:52:b9:19:
62:cb:5b:a4:24:84:44:a6:14:89:85:fa:15:4f:2e:15:d2:95:
75:f1:ef:c7:36:cc:f4:a3:0d:f1:cc:52:cf:51:2f:4a:d6:02:
54:30:84:3d:96:92:41:72:76:1f:33:32:77:28:c0:dd:71:9f:
01:95:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:08:56 2025 by rpki-client