Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6032F0985CD611F09BA9C8B0DAE4EC9C.roa
File: 6032F0985CD611F09BA9C8B0DAE4EC9C.roa (raw, json)
Hash identifier: R2rR1rDE/LIac7BpMsA7R+/ApyIdc4LpuWxSYc2Ia8k=
Subject key identifier: A0:5F:C0:AB:4C:31:12:36:C0:4C:A9:E7:A4:1B:54:BC:76:36:4F:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016406
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6032F0985CD611F09BA9C8B0DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 15:07:06 +0000
ROA not before: Wed 09 Jul 2025 15:07:01 +0000
ROA not after: Tue 12 Aug 2025 15:07:01 +0000
asID: 51847
IP address blocks: 45.207.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91142 (0x16406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 15:07:01 2025 GMT
Not After : Aug 12 15:07:01 2025 GMT
Subject: CN=686e859a-3a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:17:a4:68:8c:b4:da:9f:ff:24:16:e3:3c:
dd:6e:2f:55:5f:18:a6:75:c4:79:a0:d7:fd:d0:7e:
1b:2e:82:82:74:2d:99:20:19:70:68:29:c9:28:4c:
41:dc:61:a0:38:82:46:a7:22:95:e4:3a:26:e8:b5:
16:2a:aa:8c:c0:42:48:8d:0d:47:4d:7b:76:26:99:
1c:77:ec:99:11:fb:98:c9:83:7d:52:93:c5:23:1f:
99:92:21:77:fb:c7:c8:3d:95:bf:6a:72:a6:30:c1:
cf:6b:2f:b6:6d:85:aa:38:c4:95:2c:9b:14:4b:7d:
58:66:80:f5:1d:8f:1c:ad:8b:7b:0f:7f:75:3d:0b:
dd:5f:e9:5e:4e:20:e5:34:90:fb:a9:3d:8a:41:44:
4c:71:99:29:7e:1f:fe:c5:02:44:90:b2:26:b2:97:
76:31:1a:6c:ae:9d:58:72:d3:d3:a3:e4:0d:69:8d:
15:9b:a2:90:fc:91:58:e8:35:9c:cd:92:5e:21:08:
08:2a:c5:1a:5a:97:48:c0:4c:28:9c:21:7c:9c:40:
d1:47:b9:67:65:9b:41:d1:45:6c:d3:a5:23:2a:e4:
78:6c:d1:45:ec:3d:9c:5a:52:1d:9b:f7:cb:0d:b5:
a9:0f:1d:e9:43:69:7b:42:2e:9f:9e:bc:5d:ce:02:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:C0:AB:4C:31:12:36:C0:4C:A9:E7:A4:1B:54:BC:76:36:4F:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6032F0985CD611F09BA9C8B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:02:4a:28:0b:d7:58:be:27:a6:6d:19:3e:45:b4:b8:f3:47:
68:cd:74:35:37:9c:74:79:68:ea:f5:2d:0e:c1:d0:77:ab:a2:
ba:63:a9:18:63:18:44:5a:2a:fe:5b:90:61:27:6b:d5:81:6a:
9b:f1:fe:b5:56:17:cf:c0:ff:7c:98:89:ca:da:a8:76:be:26:
bc:2d:b7:1a:1f:5c:0d:74:77:3d:b7:4a:8b:79:4b:fd:fd:d2:
81:18:b2:f3:dc:7f:ea:ab:40:ce:ed:b1:95:cd:e8:11:9d:55:
41:8d:da:f7:ea:7a:25:c8:49:bc:68:3b:56:81:95:42:84:b8:
58:77:64:d3:a5:5f:6a:ba:5c:b3:9e:f4:e3:58:b2:3a:1c:82:
94:92:82:3a:a6:19:de:34:7d:aa:28:3a:49:53:6e:d4:a8:a7:
58:d7:c2:95:6a:b1:e8:08:c0:7a:c6:1b:c4:9e:81:22:51:56:
a4:93:39:1e:20:a8:95:d5:27:07:e4:d7:8e:91:2c:18:4b:74:
30:c7:db:6e:ed:8a:98:ef:9f:81:a8:3c:c1:cc:e7:4a:0e:19:
1e:26:6a:7a:83:d9:d8:67:02:bc:33:d1:f7:5d:72:9e:bd:5a:
37:a1:d8:db:db:46:89:63:d3:fc:1e:9f:62:21:f5:aa:be:f2:
06:af:a8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:36 2025 by rpki-client