Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BDB931E567311F0BC5E2B9CDAE4EC9C.roa
File: 6BDB931E567311F0BC5E2B9CDAE4EC9C.roa (raw, json)
Hash identifier: VCufCht/Pb7FiXvZxZX/T4KALw+PztHh3uvdx2I97RY=
Subject key identifier: 91:59:C4:20:57:82:82:32:EB:A2:2F:3D:32:83:CA:09:84:0B:92:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BDB931E567311F0BC5E2B9CDAE4EC9C.roa
Signing time: Tue 01 Jul 2025 12:03:38 +0000
ROA not before: Tue 01 Jul 2025 12:03:32 +0000
ROA not after: Sat 30 Aug 2025 12:03:32 +0000
asID: 398478
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90084 (0x15fe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 12:03:32 2025 GMT
Not After : Aug 30 12:03:32 2025 GMT
Subject: CN=6863ce9a-a845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:96:53:fc:4f:d5:a1:0f:bf:06:74:08:1e:8a:
88:45:5b:50:ae:c4:e3:61:70:8b:b9:1d:d4:5d:16:
cc:0d:15:c7:1e:1b:08:44:91:2c:89:e0:9f:df:93:
46:e0:3c:85:5d:a6:54:42:f4:fe:07:17:09:c4:51:
a1:83:15:20:44:98:50:47:95:26:7b:f1:39:51:fe:
ef:23:40:49:4e:eb:b4:94:85:56:97:3c:95:e9:85:
49:2b:b7:64:92:35:dc:5e:81:c7:1b:9d:b8:78:9a:
c5:b4:b3:3f:90:b5:b4:54:d0:c3:bf:ee:60:f8:6c:
a7:19:a9:0a:8f:a8:04:12:73:78:5c:a6:89:96:f5:
c4:92:89:c9:6c:3d:ed:ad:73:d5:ec:de:c6:64:4d:
dc:1c:55:e6:6a:0a:17:7a:57:d5:73:05:78:bb:d0:
55:a1:7a:93:4d:00:e2:03:16:08:23:bb:e2:05:56:
83:70:5c:35:49:7b:e3:25:14:4f:56:50:62:18:cf:
2e:5b:5d:54:5a:26:f2:db:55:4a:e9:2c:50:41:c1:
a4:77:55:42:79:d3:4f:65:34:31:94:0c:3e:ac:41:
4b:6d:37:1a:42:e1:b5:d3:17:ef:ea:44:aa:79:73:
68:77:5b:c5:fd:46:9d:b0:1f:f6:1b:84:44:68:ff:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:59:C4:20:57:82:82:32:EB:A2:2F:3D:32:83:CA:09:84:0B:92:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BDB931E567311F0BC5E2B9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
72:01:39:c1:b7:f6:3b:79:2c:ee:52:92:f7:0e:3d:da:ac:5c:
cf:d2:d9:14:9f:5b:28:bf:a9:db:70:5a:25:5c:76:68:91:37:
5a:1c:98:6d:84:1e:bf:4e:d6:2b:e1:28:64:02:1d:b1:d1:9e:
99:4b:51:f0:1e:74:e2:fc:c8:bc:fe:bd:34:ba:7f:3a:2f:eb:
c6:99:79:64:80:52:e2:c9:b6:c7:2d:ab:86:ad:35:ca:a0:fe:
a5:60:4e:4f:8b:3a:1f:2d:68:4f:6d:f5:7f:d1:2c:6b:cf:e4:
57:bb:3b:a9:ae:9c:0b:2c:06:1d:c3:94:87:f2:69:3b:9c:64:
59:b7:9f:47:54:2f:b0:0f:0a:0d:f6:96:6e:cd:89:c0:1c:ca:
2b:94:5d:a6:e5:75:c5:15:03:bf:14:b3:7e:27:0b:51:3e:86:
41:49:29:14:31:f0:93:2d:98:89:a9:87:55:52:63:d4:6c:56:
97:67:51:6f:60:47:0c:4a:78:35:1e:3c:d6:0d:b8:f0:a2:1d:
90:f7:e3:50:c3:71:3b:82:88:95:67:f7:e4:7b:2e:2f:09:da:
7d:94:81:e2:d3:88:5a:a2:7a:89:28:69:98:fb:25:80:5b:82:
c1:38:93:c3:87:76:a8:35:11:37:88:e1:f5:0d:c5:d9:b5:19:
43:57:80:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:49 2025 by rpki-client