Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46AA6B6C62F611F0B11C83F5DAE4EC9C.roa
File: 46AA6B6C62F611F0B11C83F5DAE4EC9C.roa (raw, json)
Hash identifier: uvfYnxBJw0OQprCli6krp4+NXTar6hdZOGN3mzMUTso=
Subject key identifier: 31:2F:D0:BC:B7:6C:99:C5:41:38:DE:2F:EF:75:69:71:C3:F4:8C:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46AA6B6C62F611F0B11C83F5DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 10:10:34 +0000
ROA not before: Thu 17 Jul 2025 10:10:29 +0000
ROA not after: Sat 23 Aug 2025 10:10:29 +0000
asID: 62816
IP address blocks: 45.205.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91612 (0x165dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 10:10:29 2025 GMT
Not After : Aug 23 10:10:29 2025 GMT
Subject: CN=6878cc1a-248c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3b:26:b4:d8:c2:63:51:32:ef:fb:6f:e0:b1:
6d:39:46:1a:59:3f:2d:0e:a7:71:bd:77:b1:24:e9:
11:36:62:92:8f:84:f2:51:5b:b6:fb:62:55:0f:3e:
47:fa:04:44:83:ca:2d:f7:b6:b7:06:a8:29:60:f1:
71:26:12:c5:c8:5a:88:6e:5a:48:5a:33:ae:60:c9:
bc:f7:11:6e:0f:ff:33:50:4a:c7:06:3a:e9:ec:d7:
d1:4e:06:be:c4:56:bd:2d:ca:b3:7b:72:98:b7:b9:
f8:b9:b8:28:a0:62:62:f3:50:43:38:a2:43:79:d1:
8b:3a:28:bc:c2:b4:82:80:88:18:0b:c1:79:fe:01:
e6:c0:9d:89:2f:d6:e3:fa:41:39:8f:5d:a9:4e:e8:
e0:50:6e:3d:de:2b:f0:8b:2a:3e:36:9f:05:04:be:
d1:5d:b5:62:03:74:a6:f1:15:2d:f6:79:72:af:49:
7d:9a:21:12:03:57:5b:cc:93:60:95:e3:c0:94:ff:
6a:47:0d:ad:ec:f5:48:42:8a:65:93:9e:c2:73:66:
54:40:cb:72:c5:1b:29:1e:de:fd:33:a1:30:a6:58:
42:c6:4b:40:6e:b6:00:48:a5:9c:5a:85:17:54:22:
89:16:f2:41:ff:53:67:42:c0:da:71:96:ec:d8:87:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2F:D0:BC:B7:6C:99:C5:41:38:DE:2F:EF:75:69:71:C3:F4:8C:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46AA6B6C62F611F0B11C83F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.174.0/24
Signature Algorithm: sha256WithRSAEncryption
66:64:e9:6f:6b:ff:8d:3f:38:12:b4:54:f3:2a:77:74:81:7a:
4d:ea:fe:74:13:7d:c2:01:f6:41:76:e8:0d:4c:3a:5a:32:45:
6b:22:67:db:05:fa:24:24:d5:d7:5d:89:6d:09:f8:68:f2:1a:
3a:14:39:25:be:93:70:82:06:6a:58:a1:75:d3:16:cb:18:a4:
76:56:69:0d:b3:8a:7a:5f:16:bb:88:6a:cb:3e:53:c8:ec:1f:
5a:6f:f4:b4:19:3a:2b:b3:98:20:22:4f:51:1e:b8:33:ec:0f:
51:b9:03:87:f6:6f:80:ba:5f:58:14:e8:bc:0d:74:f4:33:25:
c7:5d:0d:6c:43:2a:2d:79:73:7d:37:3a:d5:13:be:8a:23:dd:
c8:98:a9:ec:29:34:84:96:36:35:6b:16:7f:8f:02:70:14:be:
c9:9a:81:f8:51:63:bb:1c:fb:a4:2e:6e:15:3c:8d:ac:13:3b:
40:54:23:c2:5d:f5:28:7b:db:3b:88:fb:41:34:08:5b:7f:c1:
d0:fb:f9:cd:79:c1:50:7f:70:54:42:fc:08:c4:d0:78:54:13:
c4:79:73:1e:b2:20:bf:0b:1c:02:f9:13:51:95:23:7e:54:04:
89:4f:10:06:21:d8:bb:60:26:ac:c1:7d:54:fe:6a:13:6e:33:
b4:d3:36:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:33:03 2025 by rpki-client