Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77FB76DC519B11F089C19CA0DAE4EC9C.roa
File: 77FB76DC519B11F089C19CA0DAE4EC9C.roa (raw, json)
Hash identifier: fOkAEZHrEfX0Vd/dY0q8dMzIw301OZ658+dSmAiUziQ=
Subject key identifier: BA:B3:2C:65:97:A9:A2:17:35:55:F7:E8:80:51:79:31:F7:CC:4C:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015ECC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77FB76DC519B11F089C19CA0DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 08:07:43 +0000
ROA not before: Wed 25 Jun 2025 08:07:38 +0000
ROA not after: Wed 30 Jul 2025 08:07:38 +0000
asID: 202656
IP address blocks: 45.195.208.0/24 maxlen: 24
45.195.209.0/24 maxlen: 24
45.199.135.0/24 maxlen: 24
45.199.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89804 (0x15ecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 08:07:38 2025 GMT
Not After : Jul 30 08:07:38 2025 GMT
Subject: CN=685bae4f-c381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:f2:82:59:7c:9d:a4:a3:ef:9e:ec:9e:0b:
dd:60:bc:9c:0b:44:14:d7:36:7f:3f:8e:f5:1e:2e:
5f:5e:8a:d5:a8:5e:2d:35:6a:1a:f7:53:4d:87:91:
1c:6f:90:9d:bd:e9:fa:f8:b8:b1:c8:d0:03:26:88:
36:64:7a:c0:7c:a2:01:57:20:a0:60:7b:21:75:db:
16:12:b8:a2:91:fb:cc:5d:84:ec:c5:e2:35:59:89:
ad:1f:b7:5f:ac:99:92:85:58:ec:39:45:0c:bb:3c:
6e:37:cb:c0:49:ad:07:60:83:55:ae:0d:24:8f:22:
52:df:83:dc:2e:ba:3a:ad:46:c8:d7:ff:10:d7:fd:
18:a4:1d:24:6d:3b:a2:5f:2f:3e:55:a3:30:46:83:
31:ab:b3:ca:89:b2:85:45:95:5f:1d:f6:b7:2e:cb:
58:09:1b:b1:0c:69:53:67:46:b9:c0:76:49:7a:4f:
4f:bb:f2:61:7f:f7:27:55:33:f1:cc:c5:43:77:86:
09:c9:fd:00:c8:27:82:75:f5:b5:67:e2:37:23:6e:
65:32:cc:b0:d8:11:2b:17:90:1e:18:f4:08:1a:10:
7f:75:48:42:c0:71:91:cd:b9:68:68:3b:10:c7:c1:
cd:ac:31:d1:4f:44:52:21:38:20:d7:36:da:23:ca:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B3:2C:65:97:A9:A2:17:35:55:F7:E8:80:51:79:31:F7:CC:4C:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77FB76DC519B11F089C19CA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.208.0/23
45.199.135.0-45.199.136.255
Signature Algorithm: sha256WithRSAEncryption
5e:71:a0:fb:ee:b4:0b:a7:6a:6c:1d:2b:83:bf:92:44:f6:d9:
b2:26:12:ff:3a:b6:6f:bf:57:6e:02:b5:56:93:55:dd:bb:a4:
1c:8c:e6:b3:b7:cc:b2:b1:ef:82:f3:3c:f2:5c:13:22:c6:b3:
27:c2:83:11:46:18:31:1e:25:c2:96:aa:cc:06:52:9c:1b:8a:
4b:64:47:cb:fe:a0:24:30:32:0f:2f:89:ce:2f:fe:2f:e2:8f:
79:44:67:09:df:17:04:4e:3e:96:46:93:81:09:4a:2b:f9:71:
5a:c9:91:9f:a5:b0:d1:d9:c5:f1:af:51:b7:74:01:d0:bd:ab:
97:81:01:5e:c2:62:80:93:ff:0c:af:83:2a:80:e4:56:51:3b:
4c:89:bc:c8:13:87:ec:5e:2f:73:26:27:3f:6c:a0:a4:2e:79:
6a:48:3c:4b:39:90:0b:9d:ae:cf:c9:5b:9b:6d:a6:82:72:a7:
72:df:d0:fd:b4:be:d4:3f:a2:2f:ae:b4:93:8a:25:7f:06:e1:
ab:27:33:d4:c3:fe:e3:7d:c0:07:5b:3d:f7:0b:c7:df:e8:3b:
61:a9:49:36:1a:16:98:fd:85:31:60:35:97:cc:c7:a8:31:49:
74:e3:23:88:10:d4:ab:d9:3d:86:bb:33:93:90:1a:78:2b:5f:
47:7c:c8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:38:29 2025 by rpki-client