Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FF213CE5A8411F0A0110A90DAE4EC9C.roa
File: 5FF213CE5A8411F0A0110A90DAE4EC9C.roa (raw, json)
Hash identifier: 9nojWtq+57d9Gxa6leGAOmqzOCCQ1lRVy5rCYV1xW5k=
Subject key identifier: B4:51:20:3F:9F:C3:8B:0F:96:B0:B5:6D:CA:7D:A1:BA:95:6A:25:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016251
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FF213CE5A8411F0A0110A90DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 16:15:04 +0000
ROA not before: Sun 06 Jul 2025 16:14:59 +0000
ROA not after: Tue 12 Aug 2025 16:14:59 +0000
asID: 53808
IP address blocks: 45.207.216.0/24 maxlen: 24
45.207.217.0/24 maxlen: 24
45.207.218.0/23 maxlen: 24
45.207.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90705 (0x16251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 16:14:59 2025 GMT
Not After : Aug 12 16:14:59 2025 GMT
Subject: CN=686aa108-b46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:a7:66:1d:fe:d4:79:3e:f5:00:e9:2f:c2:
6b:b3:6d:f3:f7:93:e1:89:8b:96:43:7a:2b:38:5e:
73:17:c5:93:7b:02:54:3d:0e:33:8a:e6:0d:de:1f:
e6:fd:85:31:f4:82:80:ed:b7:a2:dc:4a:4e:3a:cb:
d1:86:26:ab:6a:09:d0:cd:7f:ac:7d:3b:08:9b:ef:
b8:c6:03:51:8c:9a:d3:ed:46:9e:e8:aa:c3:67:82:
de:cd:02:17:d3:16:a1:13:aa:25:a9:ad:c9:47:ec:
36:74:d1:b4:b2:85:93:cf:5c:cc:9d:41:30:a4:e7:
97:dc:4d:67:a6:6b:2d:ea:09:be:95:d5:47:fb:c7:
8e:ee:cf:13:5a:85:93:17:ed:8c:40:50:cf:f3:bb:
51:ea:94:f6:24:30:0e:47:8c:3f:c1:e1:03:50:27:
28:fb:f6:e3:27:69:0e:ca:58:50:94:42:eb:f6:ae:
0f:6f:ed:ee:f8:68:b7:73:81:dc:6b:2b:7b:2b:d3:
23:04:79:a4:f3:fb:a8:57:e8:b9:6f:33:81:1d:22:
8f:38:bf:98:f1:c9:34:61:1f:98:c2:6b:4c:02:74:
25:8d:8b:1d:1f:b5:77:3e:3a:90:cd:c5:3d:49:95:
e6:3f:2a:cb:e2:bd:b9:8c:48:66:69:a5:87:f3:5b:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:51:20:3F:9F:C3:8B:0F:96:B0:B5:6D:CA:7D:A1:BA:95:6A:25:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FF213CE5A8411F0A0110A90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/21
Signature Algorithm: sha256WithRSAEncryption
01:5d:8e:30:3b:16:ff:3e:51:82:72:5d:77:09:55:85:bd:59:
5f:71:0a:84:be:94:e7:a0:52:0d:a7:86:f6:c7:42:e4:26:b5:
a8:1f:29:fc:24:88:38:da:da:82:ad:30:b7:d2:c1:a8:70:f2:
0d:0a:8c:4c:e5:57:16:53:3e:d0:fd:41:34:9d:1d:7f:6c:2c:
75:61:e3:03:0b:12:2d:66:63:43:c4:9e:4b:60:32:9c:64:82:
8d:91:fa:f2:17:8b:6f:88:f6:55:34:8f:4b:5f:fc:1d:a2:fb:
7c:13:d2:cf:90:93:09:c7:e2:ca:fd:eb:41:c4:8f:a6:fe:65:
c4:15:93:86:3e:cc:c7:bc:50:51:2a:4d:57:7d:1a:ab:b4:96:
a0:68:7b:10:22:3e:60:cd:10:c1:c7:1a:59:18:3c:69:83:dd:
74:ae:f5:3b:e8:46:af:9d:bd:a4:f6:c3:f7:37:22:93:9f:9a:
f9:de:bc:0c:db:68:32:c1:c5:32:3b:f0:81:42:ca:b4:58:a0:
ff:73:d3:0f:0a:49:bf:02:a5:45:d4:c2:c6:dc:e6:8a:8b:53:
5a:90:19:58:26:89:6f:f3:2b:aa:bd:f8:ce:25:91:0f:e6:02:
38:e2:aa:6f:56:e4:33:52:58:b7:49:c6:2e:76:45:07:f0:d2:
0e:64:79:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:36:01 2025 by rpki-client