Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DAB327A542E11F08381D1D2DAE4EC9C.roa
File: 3DAB327A542E11F08381D1D2DAE4EC9C.roa (raw, json)
Hash identifier: XM3+CagHkska5HPI5u1zvlNvSkJIhdjoig7UB8HQePw=
Subject key identifier: 13:28:84:F9:34:20:A9:FA:27:EE:B5:3D:F8:D3:22:81:8F:DA:BB:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DAB327A542E11F08381D1D2DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 14:43:23 +0000
ROA not before: Sat 28 Jun 2025 14:43:18 +0000
ROA not after: Sat 02 Aug 2025 14:43:18 +0000
asID: 151407
IP address blocks: 45.196.220.0/23 maxlen: 24
45.207.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89919 (0x15f3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 14:43:18 2025 GMT
Not After : Aug 2 14:43:18 2025 GMT
Subject: CN=685fff8b-2c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:4d:98:15:40:6d:85:f3:c5:4d:64:ab:46:
2a:2d:60:16:b8:ef:ab:b1:b9:56:7f:e7:a5:24:dc:
4f:a0:2f:18:e2:53:d4:44:d6:6f:fb:3c:87:bd:70:
e6:f9:9e:3e:5e:13:f6:6d:bd:d0:4a:66:be:f7:91:
cf:c0:ab:ba:ca:f1:30:87:d8:8f:f0:d0:88:4e:a5:
c7:42:c2:ae:f5:b6:ff:f5:04:88:db:94:37:3a:f7:
73:5e:66:cb:0f:10:5c:48:97:96:5e:bc:75:e4:af:
ff:16:50:51:b9:61:71:c6:ca:77:b8:27:5a:f9:11:
9c:c2:a0:db:b7:58:a0:9b:cc:04:37:21:8f:7d:52:
94:d4:e0:ba:e3:9b:70:1a:05:91:e5:88:eb:04:c2:
d7:47:f8:63:cc:2a:33:b5:11:4c:6d:87:8f:1a:e2:
6a:e0:af:50:aa:bc:d3:83:e4:9a:75:44:a6:e4:38:
e6:88:8f:bc:9c:42:38:c1:35:4c:39:90:6b:88:86:
b3:c5:e7:de:27:19:0e:46:90:04:39:34:99:89:4e:
5c:2f:ab:97:a9:a4:04:f0:e9:91:d9:a6:5f:e8:d5:
eb:4f:bf:4a:d2:52:85:65:11:32:47:67:c7:f1:23:
49:f1:a1:74:6c:77:5f:fb:93:b4:cc:ea:ae:29:4e:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:28:84:F9:34:20:A9:FA:27:EE:B5:3D:F8:D3:22:81:8F:DA:BB:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DAB327A542E11F08381D1D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.220.0/23
45.207.152.0/23
Signature Algorithm: sha256WithRSAEncryption
84:c8:bc:f7:f3:2b:99:42:c1:0a:8f:00:6e:28:ff:70:3e:e1:
cc:b9:40:f6:c9:da:fa:46:9c:d0:56:b3:2a:21:b0:1f:0c:64:
b3:c2:d7:ee:19:3d:49:58:76:5d:20:16:97:4b:eb:d4:42:80:
7b:db:9e:bd:65:9d:21:2c:c1:1a:19:82:d5:95:16:f0:66:30:
f3:f9:55:03:dd:40:8e:7a:d1:80:2d:7a:a4:d9:06:c6:06:a7:
0f:1f:e5:ee:3b:dd:64:ca:8d:c6:3e:da:c5:16:62:b7:06:6f:
27:04:9d:7c:54:ca:5e:00:eb:94:01:7e:47:3d:5a:85:78:c5:
a4:5b:73:36:fd:4c:bc:f1:60:f8:33:da:46:4b:02:2c:60:32:
f4:ca:bf:24:b6:ec:37:c0:c0:e1:b6:c3:c4:34:a5:5f:1e:76:
58:50:15:75:52:92:52:13:c8:52:32:b7:d0:be:b8:b9:ea:87:
04:b0:9d:16:86:1d:29:86:68:03:3c:86:dc:1b:31:bf:64:53:
72:75:c0:58:59:2e:96:8c:bd:49:2e:86:d2:b8:a1:bc:47:fc:
32:bb:00:de:f6:5b:4e:7b:0f:ec:77:27:83:ee:44:bd:1a:f2:
92:31:9d:5a:50:57:05:22:7a:f1:dc:b9:42:49:0a:a7:60:5e:
d9:1e:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:20 2025 by rpki-client