Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E9C4F6A5CE311F0A2AC3886DAE4EC9C.roa
File: 5E9C4F6A5CE311F0A2AC3886DAE4EC9C.roa (raw, json)
Hash identifier: jTBMu9uCmdu6Y+NjkC7RwyENY95mDA+5UEf1LP+u9C4=
Subject key identifier: 07:8D:57:0D:E7:79:DA:29:1E:66:8B:91:19:87:AB:10:58:45:3D:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016424
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E9C4F6A5CE311F0A2AC3886DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 16:40:07 +0000
ROA not before: Wed 09 Jul 2025 16:40:01 +0000
ROA not after: Wed 13 Aug 2025 16:40:01 +0000
asID: 23470
IP address blocks: 45.199.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91172 (0x16424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 16:40:01 2025 GMT
Not After : Aug 13 16:40:01 2025 GMT
Subject: CN=686e9b67-5eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:cc:82:ec:76:ee:8c:cb:1a:5e:98:87:13:
a5:7d:ef:82:17:c2:6d:ce:b3:9f:be:c4:e4:ce:58:
53:bc:a0:09:60:7f:f3:3b:be:b0:a9:08:df:e1:18:
bf:00:b7:4c:f3:0f:48:26:e1:0a:4e:0e:db:d5:12:
24:c6:a7:6e:c3:21:ca:fb:c8:68:92:cc:59:05:b6:
9a:3b:33:89:b7:c6:04:ee:77:17:b5:9b:34:24:56:
61:b1:a8:87:2c:6a:34:6f:9b:aa:3a:4e:a3:ee:a4:
fd:d8:61:84:15:82:a3:a5:af:5b:84:03:1a:f6:3e:
1f:6c:c2:9f:cb:b9:d8:7e:ea:8e:04:30:95:f9:49:
eb:75:24:44:d1:65:90:b8:05:2c:3b:8b:64:72:1b:
18:56:5a:27:5c:f9:0e:de:15:da:f7:29:b2:08:86:
03:13:97:78:54:a2:9d:2d:65:97:dc:f1:10:6b:8c:
ef:2e:79:5f:f9:54:7d:57:86:53:08:86:a1:d0:9b:
02:6b:13:fe:f8:fa:18:5c:d0:64:c1:a3:78:48:cc:
80:26:04:5d:d6:38:fc:37:a1:b6:63:23:e7:00:0a:
3c:c9:4c:80:96:39:6a:93:60:3f:92:d3:a3:d5:de:
1b:20:be:a2:60:59:39:f7:36:09:78:2a:61:93:1f:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8D:57:0D:E7:79:DA:29:1E:66:8B:91:19:87:AB:10:58:45:3D:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E9C4F6A5CE311F0A2AC3886DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.189.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4c:e2:d4:e0:25:8a:e0:71:a4:b1:86:5d:3d:dd:fa:96:c9:
d9:4b:f4:18:62:65:8a:f9:7a:f9:e3:15:3c:02:7f:d1:2f:d7:
1f:d8:7d:49:d8:41:e6:1a:7d:47:6e:a7:8d:0a:b1:28:de:bb:
5e:f7:3a:2b:57:d6:f1:0f:c0:dd:b0:f9:a9:19:f4:94:7c:59:
e1:a4:e7:d6:5a:6b:ca:b1:b5:a2:c8:a3:4a:e7:68:15:f4:fd:
6a:12:bb:7a:85:87:c4:94:06:7f:56:6a:08:c8:51:cb:b5:1f:
66:a1:56:2a:00:5e:77:61:0b:cc:2b:8d:a9:f4:13:3f:58:ac:
d3:34:eb:74:53:3a:9c:bc:65:8e:e5:c0:b8:28:de:20:9b:55:
06:95:d1:d3:d6:e0:a7:d5:66:82:16:59:81:96:f2:34:af:1a:
36:ca:7d:48:b0:85:dc:1f:66:d5:4c:c9:e0:4f:0d:71:a7:06:
e6:25:c0:45:14:fb:c6:fb:29:62:0b:5c:8d:45:d3:6f:10:bb:
cf:68:7f:fc:54:c0:4d:6e:a4:e1:c1:03:ce:c2:13:ed:a3:8c:
58:92:8d:f1:22:63:1f:cc:e9:74:3d:55:e1:36:e7:ce:98:b1:
d0:de:d4:26:86:9a:cb:45:d6:6d:d0:02:7d:ba:54:fd:91:49:
d5:d9:6a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:28:02 2025 by rpki-client