Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51C107425B3811F08EA5A6A6DAE4EC9C.roa
File: 51C107425B3811F08EA5A6A6DAE4EC9C.roa (raw, json)
Hash identifier: Klk4j8JL/isQS0KSX0b5rEY2LhrQfO+FD9yPGuevRoA=
Subject key identifier: F9:F8:F2:C4:70:E2:26:3D:6D:59:DE:55:06:F6:E3:37:54:08:AF:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01630A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51C107425B3811F08EA5A6A6DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 13:43:10 +0000
ROA not before: Mon 07 Jul 2025 13:43:05 +0000
ROA not after: Tue 12 Aug 2025 13:43:05 +0000
asID: 27951
IP address blocks: 45.195.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90890 (0x1630a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 13:43:05 2025 GMT
Not After : Aug 12 13:43:05 2025 GMT
Subject: CN=686bceee-4ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:45:f0:8f:86:01:6b:32:fc:9f:5b:de:9b:
37:8f:33:9a:bc:72:11:87:ca:92:0f:04:5f:15:f8:
97:70:2e:bd:86:77:84:18:d8:d5:31:cb:2b:c2:91:
15:a0:8f:21:d0:fe:b4:8f:f2:1d:4d:d5:e5:be:e8:
82:36:ca:b7:83:3a:c4:e8:d8:76:95:4a:53:12:4f:
66:8c:9d:83:1e:05:2d:e0:cf:d8:05:89:e6:1b:9b:
b2:ee:60:ad:01:6a:5e:97:ee:cf:a2:20:cc:6b:89:
57:9d:31:e0:91:b7:86:4a:07:94:0f:fb:f8:3d:eb:
7f:6b:40:a1:be:35:34:d7:5a:57:f5:78:c3:90:2d:
2e:ae:56:be:a3:2d:78:cd:70:0a:93:fc:48:b2:60:
d5:a5:b2:a1:d3:5c:81:64:4d:31:6f:b9:a4:c6:91:
04:4f:f8:d9:06:4c:7e:cf:35:0c:4c:58:46:27:b9:
3e:64:1f:10:88:79:bb:61:ee:3c:32:bd:59:e1:12:
01:3c:67:7e:1a:70:a3:fd:6f:98:f6:eb:c7:33:03:
ff:b7:24:95:f5:6c:db:ea:95:de:49:10:98:d1:b0:
3c:a6:1f:45:25:d0:8f:83:ab:88:e7:cc:ac:88:3e:
a5:e2:3c:e8:8b:8c:1b:57:79:60:be:5a:61:96:3b:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F8:F2:C4:70:E2:26:3D:6D:59:DE:55:06:F6:E3:37:54:08:AF:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51C107425B3811F08EA5A6A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:66:fc:79:e1:aa:17:c1:3a:0f:ee:e9:44:74:6e:47:da:59:
1c:a6:a8:44:0e:9c:fc:55:7f:7b:28:ed:20:27:4c:e9:1e:e6:
ba:a7:5c:c6:02:18:47:4b:22:f8:7f:a9:51:53:3f:0e:29:94:
22:b1:f0:f5:17:9c:b5:66:02:33:68:a1:a2:ef:9a:0a:53:08:
59:6c:e9:6e:1d:e6:b0:05:5a:f9:6e:fb:4f:3d:e3:34:a6:fa:
02:f0:a3:3d:f4:3d:b5:60:3c:fd:33:41:6c:12:b2:75:f1:77:
98:8b:26:ab:45:01:99:2a:10:71:a7:64:d2:3d:2d:9e:59:a7:
37:bd:da:49:19:f6:12:b3:87:cf:34:26:2f:ad:16:32:36:1d:
60:56:97:45:3d:01:f9:d0:5a:ec:27:b6:81:2b:d7:a9:9a:05:
a6:a6:b2:fb:b8:0a:99:2b:32:ce:01:41:b2:5f:d1:fc:2f:2f:
dc:8f:a5:4f:cd:43:04:ff:d8:7b:c7:a1:82:db:33:8d:4e:cf:
b3:c9:ec:7d:96:e6:a8:d5:d1:9c:19:43:b0:d0:a7:18:a3:47:
9a:09:b8:91:d7:ba:73:b6:96:b2:6b:2b:9d:95:c1:5f:81:20:
60:9e:87:9d:83:45:2a:02:77:6d:37:6f:49:65:dd:3d:05:4b:
c7:5c:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:38 2025 by rpki-client