Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E17EAD84CFD11F0946F1D97DAE4EC9C.roa
File: 3E17EAD84CFD11F0946F1D97DAE4EC9C.roa (raw, json)
Hash identifier: wUqk8nF4FuUF/0Rym3hQgMFddIS9aNd98BLn2+jChdk=
Subject key identifier: 0E:4B:78:A8:B6:8B:4E:8A:93:E3:FA:26:99:B1:D5:51:3F:84:C4:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E17EAD84CFD11F0946F1D97DAE4EC9C.roa
Signing time: Thu 19 Jun 2025 11:05:00 +0000
ROA not before: Thu 19 Jun 2025 11:04:55 +0000
ROA not after: Wed 23 Jul 2025 11:04:55 +0000
asID: 274089
IP address blocks: 45.195.15.0/24 maxlen: 24
45.195.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89398 (0x15d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 19 11:04:55 2025 GMT
Not After : Jul 23 11:04:55 2025 GMT
Subject: CN=6853eedc-9218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:79:b8:49:63:3a:ee:79:3d:9f:b3:c6:31:ee:
f2:08:8b:6d:a4:91:97:a6:7f:b4:a8:24:1a:e9:03:
bf:82:ff:2c:2b:b1:5b:43:8c:98:a7:5a:77:a3:8d:
76:fe:58:97:d1:af:dc:1e:34:cf:90:88:01:11:a5:
89:8b:be:f2:13:ee:07:3a:15:80:b3:78:3e:04:f6:
58:9a:d2:ff:d8:20:85:d1:7e:b7:c5:76:94:c1:e2:
70:df:e4:2c:4e:79:3b:ee:7b:cd:f9:71:3f:dc:43:
9a:04:a3:dd:78:24:d9:8b:6f:6a:c6:9b:8c:2b:64:
e4:2b:9e:65:b9:8a:a1:be:7e:52:9e:36:ba:df:a8:
eb:10:3e:f0:6f:92:57:f6:54:cf:65:19:b3:8e:75:
96:1a:c2:68:8f:30:0f:24:c6:61:da:a8:db:b2:29:
5d:55:c0:1d:2c:18:b3:2f:84:8b:8e:e1:c8:a0:7f:
1d:7c:d9:95:22:57:50:10:f0:24:a9:c6:57:02:28:
0a:e3:ab:ce:2a:52:fb:27:25:60:29:62:f7:1f:c8:
3d:0d:49:7d:75:52:7d:d4:16:d0:ca:d2:e1:0a:af:
af:0f:94:4a:04:03:cb:6d:7b:03:60:e4:0f:ac:70:
ea:85:14:f6:b2:11:f0:08:60:f4:21:64:33:0d:e4:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4B:78:A8:B6:8B:4E:8A:93:E3:FA:26:99:B1:D5:51:3F:84:C4:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E17EAD84CFD11F0946F1D97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.15.0/24
45.195.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:44:00:8b:e1:dd:c8:4d:76:c2:80:80:00:ec:56:9a:11:0c:
1f:40:8b:63:28:6d:b7:23:fd:68:62:d5:0a:23:56:92:3d:29:
e2:6e:2d:9e:b6:74:5d:f2:1e:85:ac:e1:3f:88:23:da:c5:5e:
e5:db:43:f1:18:2d:59:79:01:12:ee:3c:f8:f2:c4:e4:9d:87:
31:ee:5b:8d:df:2c:4e:64:34:9b:90:ef:16:73:9b:e7:dc:1a:
45:56:6c:67:e1:86:1f:8c:97:36:5d:dd:e8:4e:11:46:0e:da:
bf:40:17:a1:23:ca:06:d9:b2:1f:15:5f:f6:19:c6:36:bd:df:
16:33:f4:dd:6b:64:cd:56:46:54:dc:dd:4d:b2:6a:8f:2e:9d:
2d:7b:42:d3:24:bf:f2:2b:53:82:42:d6:4f:a2:5e:e7:d7:91:
93:c8:fa:55:c5:eb:db:c4:10:0e:58:33:10:ef:0b:82:0d:2a:
46:ab:fa:0c:22:f5:a8:bd:f4:a3:98:27:e0:9d:f0:32:32:eb:
70:3e:b7:8a:41:1c:31:4a:26:ad:e8:3c:9a:9e:4c:8c:6a:ef:
db:9c:c2:d9:19:14:11:b8:a1:e7:f4:18:3f:b6:4b:24:6a:f4:
7b:c2:d4:15:ea:41:aa:8a:8b:cd:13:e1:d8:0e:8f:dc:73:18:
e4:91:1d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:03:45 2025 by rpki-client