Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78BC6EEC5D7A11F0A75513E4DAE4EC9C.roa
File: 78BC6EEC5D7A11F0A75513E4DAE4EC9C.roa (raw, json)
Hash identifier: o6MVrUFo91AULL7RxMtRMiIileKudX+3Z8J9+qAKamg=
Subject key identifier: EB:46:3F:6B:C0:50:FB:FC:36:3B:89:D4:8A:9A:D5:1E:AF:1F:60:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01647E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78BC6EEC5D7A11F0A75513E4DAE4EC9C.roa
Signing time: Thu 10 Jul 2025 10:41:45 +0000
ROA not before: Thu 10 Jul 2025 10:41:39 +0000
ROA not after: Wed 27 Aug 2025 10:41:39 +0000
asID: 134824
IP address blocks: 45.194.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91262 (0x1647e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 10:41:39 2025 GMT
Not After : Aug 27 10:41:39 2025 GMT
Subject: CN=686f98e8-0117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:bb:8e:c3:c4:d3:64:ab:2e:a1:f3:8b:cb:
2b:39:f6:96:8e:d0:27:86:67:39:26:d5:3c:e2:c3:
31:9f:bf:59:96:db:f8:f2:d7:63:13:e3:54:3c:a6:
26:b1:d8:e9:dd:0f:62:9d:e4:22:15:85:c1:e6:2c:
84:3f:c3:7b:0b:b8:21:16:ff:66:6c:18:44:38:22:
98:a8:ea:d4:18:98:94:70:9d:98:49:03:28:cc:22:
26:33:38:e4:e9:a5:4d:f3:34:2c:3d:6e:bc:02:fd:
42:b4:28:f6:35:6c:9d:1f:67:ce:a5:a6:55:2a:26:
ae:2d:11:56:05:c4:78:4a:00:23:f9:95:79:c8:f7:
e9:6f:ab:ec:a3:58:1a:6d:4d:ac:09:27:6b:55:9c:
49:3e:d5:85:bf:b4:c4:7b:ef:07:ec:20:7f:c5:06:
ed:ad:32:df:fa:f2:ce:5d:4e:30:88:01:28:b2:9a:
1a:c7:7c:91:d1:5d:4c:7c:c9:a8:ff:35:8c:81:65:
1a:ee:6b:e8:3a:8a:c1:5d:af:b9:a9:01:17:03:68:
58:aa:45:f6:45:04:22:5b:ed:26:21:a5:ec:a9:fd:
07:13:c7:95:7b:ea:8a:fb:40:54:69:29:e0:61:8b:
b1:de:10:49:5c:1d:8e:86:a8:c0:da:75:fc:a5:0b:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:46:3F:6B:C0:50:FB:FC:36:3B:89:D4:8A:9A:D5:1E:AF:1F:60:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78BC6EEC5D7A11F0A75513E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.93.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e0:ea:d2:57:37:52:ed:d7:44:05:7f:a4:fe:1d:52:9e:cc:
a9:41:37:9b:2a:bd:76:ca:eb:19:2e:81:60:80:b4:14:d0:82:
2a:41:e8:99:2e:75:b8:88:ef:98:e4:cb:1f:55:8a:f8:12:4b:
f7:0b:ea:8a:d1:52:30:b6:82:4b:42:32:e7:46:33:3b:90:88:
3b:b4:be:5a:8f:1a:af:1c:40:f3:b1:50:fc:6a:ce:48:96:76:
b7:01:bb:66:af:19:c5:5d:9c:c8:5c:ac:7f:97:86:f1:34:d9:
bb:3b:2f:43:eb:5a:de:ba:75:db:4e:4a:4e:31:17:60:36:31:
43:36:65:e1:85:75:c7:5b:0e:62:79:96:2c:00:57:f2:ef:5a:
32:74:1f:46:24:0c:24:80:15:c7:c3:c2:f1:8b:8a:b4:de:f3:
1c:c8:1c:32:97:27:d6:e0:f6:a9:08:ff:9a:9a:4b:9e:d4:8f:
65:a8:38:85:76:26:6c:73:f3:5c:a0:f7:ab:a7:66:a5:cd:db:
0f:16:71:4c:88:12:e5:ce:00:d4:35:21:59:04:3b:38:d5:35:
99:1a:89:5e:5e:1d:52:47:f4:77:c6:b7:be:fb:c2:ca:ad:a4:
2f:72:68:a9:76:ce:6c:17:b1:5d:25:20:72:2c:b4:21:52:7d:
f5:c1:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:22 2025 by rpki-client