Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69CB13105B3C11F0A7F5DDC0DAE4EC9C.roa
File: 69CB13105B3C11F0A7F5DDC0DAE4EC9C.roa (raw, json)
Hash identifier: ZvA1I5LsAIhlJqkPrBZLcuBvTks0LKl/abZlNbsSGJ8=
Subject key identifier: 00:A2:C2:60:85:A0:FB:5E:68:75:D5:83:6B:C2:9F:82:93:8D:37:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016314
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69CB13105B3C11F0A7F5DDC0DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 14:12:28 +0000
ROA not before: Mon 07 Jul 2025 14:12:23 +0000
ROA not after: Sat 16 Aug 2025 14:12:23 +0000
asID: 40779
IP address blocks: 45.192.96.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90900 (0x16314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 14:12:23 2025 GMT
Not After : Aug 16 14:12:23 2025 GMT
Subject: CN=686bd5cc-f7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:d5:b9:88:05:47:b1:98:d2:32:c1:e0:06:
08:b7:44:c5:a7:94:8b:dc:72:a7:35:31:95:35:02:
b9:85:14:58:3d:9d:3e:94:79:a6:c7:58:25:8e:2e:
91:d2:d5:bd:5f:7d:8c:0e:d1:c9:af:26:6e:cb:a2:
d5:90:b6:e4:64:59:58:f1:0e:29:6a:47:c5:52:9a:
76:f9:12:ea:ea:8e:15:a6:1c:39:73:c5:c3:31:f6:
dc:18:c8:0f:46:00:a7:30:ee:32:a9:15:ce:02:cf:
27:8a:15:bc:6b:74:56:58:74:f2:7f:77:58:19:20:
93:59:dd:fe:5c:0c:b0:70:bb:3a:84:ab:22:35:d5:
62:ab:2b:40:08:e9:08:8b:1f:36:39:ea:4c:41:64:
66:d4:0d:18:8b:fd:07:17:4b:04:6d:81:17:37:0e:
ad:27:62:a0:ed:73:e6:c6:47:03:a0:c9:8d:70:da:
2a:88:f1:9c:1a:13:29:36:52:d6:74:a0:3c:52:1b:
14:0f:9f:24:41:76:b5:22:4a:e1:d4:1a:85:4b:25:
b4:c1:9b:a7:7d:b3:fd:86:cd:87:31:71:9f:e0:34:
e9:0a:c7:a9:c3:0c:86:e9:33:23:5e:25:c8:14:2e:
2a:e7:1c:87:5c:7a:ad:3b:a5:00:49:2f:be:f1:b6:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A2:C2:60:85:A0:FB:5E:68:75:D5:83:6B:C2:9F:82:93:8D:37:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69CB13105B3C11F0A7F5DDC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:7d:e8:4c:ed:93:c9:a1:e7:e7:32:f1:23:76:ac:df:0d:cc:
cd:1a:6a:c4:3a:a1:69:aa:6a:7a:02:6b:7c:ca:90:8b:ef:51:
12:73:41:81:28:25:e1:fc:d5:be:d4:f1:a2:06:00:1d:86:bf:
c2:05:ec:dc:70:b7:15:b3:5e:c9:cf:f4:7a:9f:2c:9b:d1:e5:
5c:8b:22:ee:65:12:45:a4:2f:68:df:46:0e:09:30:cd:74:33:
5b:4e:27:8d:8a:db:4e:ef:7d:90:60:87:aa:8f:02:95:06:2b:
5c:e9:aa:90:76:a4:0b:2b:9d:b9:89:b6:42:60:b1:aa:9f:fd:
da:6e:93:53:a1:f0:53:61:13:cd:00:69:df:df:51:7f:0f:55:
68:a3:0d:c7:11:e9:08:dc:b9:cb:03:25:01:f0:4c:b4:36:20:
fe:12:23:75:57:29:6f:92:63:de:bc:96:21:b5:b1:69:0a:d8:
d1:f3:c1:d5:11:cd:34:07:2c:14:64:2f:cb:f0:b3:0e:7c:a8:
83:90:ac:5b:95:22:ba:a8:a3:64:2a:81:80:00:ff:a6:4f:83:
78:a0:47:f9:2f:21:9f:c7:37:5b:fb:0e:91:23:49:f3:da:09:
71:c9:0e:7f:20:a7:49:88:68:f3:a2:17:99:8c:f4:27:b1:94:
62:2b:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:43:19 2025 by rpki-client