Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D17A13C58DF11F08073D2DDDAE4EC9C.roa
File: 6D17A13C58DF11F08073D2DDDAE4EC9C.roa (raw, json)
Hash identifier: R0IlAVXIX/VN7yfNwEoXVYCEY2cdYl/+mUCITAgaLq0=
Subject key identifier: 8C:EC:3D:B4:A8:43:55:2F:56:DE:93:7E:24:4E:C6:A0:70:47:47:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016112
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D17A13C58DF11F08073D2DDDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 14:01:48 +0000
ROA not before: Fri 04 Jul 2025 14:01:44 +0000
ROA not after: Thu 21 Aug 2025 14:01:44 +0000
asID: 50028
IP address blocks: 45.198.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90386 (0x16112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 14:01:44 2025 GMT
Not After : Aug 21 14:01:44 2025 GMT
Subject: CN=6867decc-0375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:4f:2e:d6:52:72:73:5c:17:1f:42:28:4b:
e0:01:d7:29:f6:60:0a:80:f4:6b:9e:bc:30:eb:30:
1d:15:c3:73:c6:56:33:f3:08:f9:4a:37:e0:47:db:
3a:b6:51:1f:75:18:db:86:f6:6a:eb:b3:d9:f6:24:
d1:ec:77:80:3d:47:ce:57:2e:c2:78:aa:b9:ea:87:
3b:cc:19:8f:a4:4c:61:b0:8e:ee:f8:e4:fd:88:4b:
25:3d:02:94:17:16:8a:18:07:9a:82:45:4d:3f:2f:
9b:0d:fc:7c:35:04:c4:aa:67:22:83:63:b0:54:28:
0e:4d:45:c8:b5:f1:aa:32:39:bf:5b:18:4e:19:8f:
c9:49:6d:a8:90:4a:46:96:82:ae:b8:69:74:94:88:
79:69:62:f1:0e:0d:61:2c:13:44:fe:ea:be:87:12:
ef:0f:d2:6e:12:e7:e2:6f:cf:1e:7c:e1:73:48:34:
00:14:d6:c9:56:8d:e4:c8:55:a5:c5:7d:c6:cc:db:
15:05:80:a3:21:8c:e3:13:68:26:ad:b6:9d:72:6a:
5d:d6:4b:17:06:c8:9f:39:ee:7c:d3:5a:ed:96:c9:
cb:bd:00:22:ad:6c:c2:19:0c:e1:db:46:40:f7:fe:
82:36:67:13:a5:8b:d6:67:c9:5c:b2:d1:51:2b:75:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:3D:B4:A8:43:55:2F:56:DE:93:7E:24:4E:C6:A0:70:47:47:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D17A13C58DF11F08073D2DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8f:c6:6f:90:2e:3d:58:0a:15:f3:3d:86:7d:f6:ff:6c:93:
7d:6f:ac:3a:5f:4d:11:3e:b0:40:72:d9:98:14:a3:5e:37:2f:
5a:70:52:63:48:10:e8:22:aa:34:c8:3f:90:fe:97:b6:b1:56:
06:96:d3:f3:90:5d:63:5a:19:ea:2d:c0:f7:d7:67:39:0e:36:
5b:d9:63:eb:b7:68:66:c1:bb:ca:cf:ab:b6:9f:2f:01:83:d8:
92:0a:68:16:14:66:7b:9f:0a:56:8f:48:c1:9a:b1:a5:f1:c0:
d7:9f:34:48:c6:00:5f:f9:c1:46:7e:99:90:0f:0d:24:ca:48:
35:ff:d0:87:42:d6:4d:4f:e2:c2:01:9b:50:22:27:c9:83:fc:
2d:e1:b0:1f:4d:b1:ca:7a:44:d4:c5:13:d3:cb:05:23:b5:16:
2b:0f:da:8f:13:f3:da:b0:02:72:a2:1c:53:b6:ee:a1:ac:32:
20:55:6f:6d:d7:16:ce:ab:3b:d2:73:c4:8f:d3:76:7e:0e:9d:
9c:73:6e:b6:5b:07:5e:91:7d:c5:4e:94:57:0b:36:29:0e:bf:
1b:52:24:2e:6c:bf:43:82:ea:80:b4:4e:6d:c1:7c:5d:6e:6e:
e8:78:23:2e:48:3c:54:3a:53:4b:e8:f5:02:09:93:39:3e:5e:
c9:a7:74:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:20:17 2025 by rpki-client