Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25A4C2705A8911F0821E7BAEDAE4EC9C.roa
File: 25A4C2705A8911F0821E7BAEDAE4EC9C.roa (raw, json)
Hash identifier: jxpYS2/kgtinjkUUx5wPkp1a6JgkoOx+Rt/1aQxee70=
Subject key identifier: A0:60:79:C6:0F:DB:25:4E:D9:08:38:A3:CE:84:19:9C:04:E9:D6:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01625B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25A4C2705A8911F0821E7BAEDAE4EC9C.roa
Signing time: Sun 06 Jul 2025 16:49:14 +0000
ROA not before: Sun 06 Jul 2025 16:49:09 +0000
ROA not after: Tue 12 Aug 2025 16:49:09 +0000
asID: 8796
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90715 (0x1625b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 16:49:09 2025 GMT
Not After : Aug 12 16:49:09 2025 GMT
Subject: CN=686aa90a-47d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:0a:1e:fb:ab:74:cd:8d:cf:90:84:30:e0:
7d:ee:a9:45:4a:e9:d6:c1:cd:de:ff:43:b7:1f:d6:
d9:5b:90:7f:36:06:35:ee:73:4d:1b:72:98:0a:32:
65:a2:93:61:98:97:f4:28:65:39:13:44:88:0d:d1:
bc:6a:59:5c:c6:0d:36:98:5e:fb:69:97:7c:2e:16:
99:b8:71:69:7b:34:fb:ed:d9:86:76:8b:bd:54:66:
50:07:37:7f:2c:c9:d2:24:1c:ed:11:cf:36:11:3a:
6e:d2:1e:05:b2:34:32:f1:2f:f8:e8:9d:42:75:16:
47:fd:de:1e:f6:d1:9a:1f:85:0c:cf:4d:20:a8:be:
f2:cc:3b:84:26:5e:6f:52:fa:77:11:3b:96:72:ff:
d9:8c:12:9b:0a:f8:e5:fc:7f:50:80:17:2f:1c:97:
65:e7:a8:7e:1e:df:6d:c2:27:5f:0b:72:74:47:0e:
51:57:46:90:3b:8c:7c:14:85:7e:d5:07:91:18:00:
94:43:5f:f6:73:36:64:94:35:1e:83:ff:c2:ae:90:
4c:fa:16:67:06:6d:47:12:3e:bb:d2:60:1d:a8:7d:
06:09:3c:e5:bc:ac:62:c5:94:24:29:cf:b8:5a:db:
62:47:85:af:6b:5d:50:56:da:4c:a7:cc:c3:0b:3f:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:60:79:C6:0F:DB:25:4E:D9:08:38:A3:CE:84:19:9C:04:E9:D6:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25A4C2705A8911F0821E7BAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:6a:37:ca:13:fa:76:cb:cb:40:2c:84:57:aa:e8:7c:ae:9b:
3e:9c:d7:02:cc:a5:3f:a2:0f:ea:bb:f2:e4:1f:6f:82:cd:42:
6a:42:9c:64:05:c6:c4:41:7e:5d:a9:99:51:f7:b5:88:b1:bb:
56:14:2f:ff:24:5e:ce:d2:6f:d5:6f:c6:b7:3d:28:33:a1:3c:
0c:70:b4:5d:01:9a:8c:ba:69:bc:8b:c4:00:c5:75:20:50:1f:
0f:fb:e1:5d:dd:58:a2:7e:be:ff:24:e6:eb:1f:d6:3d:02:2f:
a1:e8:2c:03:91:05:0c:45:c6:05:fb:49:1e:56:27:ae:85:e7:
2e:6a:f4:39:66:ee:8f:f8:3e:0e:2e:0c:b2:fc:5b:c8:38:95:
42:d4:73:6e:a9:b0:a2:30:33:0b:d7:fd:cb:23:76:f1:48:35:
c6:8e:6f:92:72:cb:88:6c:65:eb:01:72:71:32:61:47:f6:c6:
43:9f:66:30:7d:94:82:56:2f:4a:7d:31:3d:d7:0f:63:f8:78:
91:81:29:d5:41:90:0e:27:7c:f6:90:d9:00:9e:91:b1:56:93:
41:df:f3:d9:ee:04:fa:10:8c:91:2c:f4:2e:be:59:cf:e6:b0:
d9:a7:d6:93:dc:6c:65:fd:41:c1:7d:54:07:be:5b:0c:ff:5d:
c2:cb:7b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:21 2025 by rpki-client