Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A63086C58C711F0A7DBA4C2DAE4EC9C.roa
File: 7A63086C58C711F0A7DBA4C2DAE4EC9C.roa (raw, json)
Hash identifier: +dXK72X2fa7ej9rw5nugyS27CGTmIzUU4e0IpThK7rg=
Subject key identifier: 9C:C4:C2:73:45:C2:EE:F2:0C:43:2A:38:9E:E7:FB:B0:39:5B:26:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A63086C58C711F0A7DBA4C2DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 11:10:23 +0000
ROA not before: Fri 04 Jul 2025 11:10:18 +0000
ROA not after: Sat 09 Aug 2025 11:10:18 +0000
asID: 14315
IP address blocks: 45.197.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90350 (0x160ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 11:10:18 2025 GMT
Not After : Aug 9 11:10:18 2025 GMT
Subject: CN=6867b69f-3eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:f8:a4:be:3b:26:2b:c4:fb:c4:3b:f5:f4:
3e:d1:3b:9e:3e:ff:aa:03:c3:c3:59:41:46:8d:78:
9f:38:1e:b1:f2:54:fa:21:84:69:db:d5:92:0c:62:
9a:7a:43:7e:b8:70:e5:6a:8e:c2:a3:ba:ae:bd:e3:
47:7a:76:b2:e6:3e:f7:00:b4:e7:f0:3c:87:d7:f6:
5e:2d:17:11:94:a8:e3:29:db:11:7a:b4:03:0e:fa:
7f:f2:cc:d6:82:ce:3e:d5:b4:e4:3a:8f:84:75:89:
6d:1e:ea:69:9a:bb:59:0f:95:aa:c7:94:e3:d4:7f:
cb:67:7a:ff:ac:39:88:8f:56:e2:33:be:52:7b:dc:
af:73:f4:d5:6b:a4:e8:db:46:cb:12:91:81:b6:1a:
39:15:cb:11:db:b5:46:c0:0d:65:ea:9f:85:c8:76:
b1:9b:35:07:32:c9:31:b0:9a:cb:46:15:ee:37:3e:
44:7a:83:1d:c5:81:01:c5:42:33:b3:4c:13:56:03:
30:f7:e2:bc:c5:42:ba:5a:3f:76:9e:4f:aa:bb:fc:
b8:44:8d:41:af:16:2b:55:74:de:78:4d:c9:65:04:
db:25:72:a2:a2:b9:7e:7b:45:75:39:17:de:27:e0:
dd:86:c5:68:8e:e7:80:2a:90:82:85:25:83:fa:ee:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C4:C2:73:45:C2:EE:F2:0C:43:2A:38:9E:E7:FB:B0:39:5B:26:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A63086C58C711F0A7DBA4C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.137.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:b7:64:55:5a:13:50:53:77:02:2c:54:57:30:10:27:57:93:
32:bf:5b:54:7b:ba:0d:42:f8:67:4b:d9:43:0a:b3:fe:51:92:
91:48:e9:6f:3d:5f:be:86:6d:87:ea:ad:e8:d2:f7:fd:67:ce:
b6:9f:66:2f:3b:9a:ec:10:45:d2:14:4b:db:71:b9:bf:1c:1f:
c3:7e:87:82:f8:a8:7b:cb:05:71:e6:b9:ef:8f:d7:65:00:9f:
39:84:4a:6d:14:fa:75:c0:14:df:60:2c:c2:11:b7:c5:11:f1:
dc:a4:42:77:e8:d8:86:01:6e:4e:7b:10:69:a0:7a:a2:6d:37:
10:e9:fe:2f:53:4a:d3:2f:cc:e0:f4:9c:e5:6a:e5:f2:ba:bb:
31:74:e0:9f:3e:39:04:83:ca:86:b5:04:e4:9c:df:c1:7d:b9:
9c:51:2b:e9:a5:cd:5e:97:51:d3:3d:f1:1a:03:f6:33:28:e1:
b3:a5:34:fc:ee:72:0a:46:2e:73:fb:a3:ca:a5:fd:b0:eb:64:
3f:98:0e:0f:3c:72:8a:2d:34:08:6d:41:2b:0d:91:4e:da:42:
d2:03:da:2e:93:e8:f8:a2:60:25:fe:d6:73:0c:fd:b1:b5:04:
54:09:f9:ca:e4:7b:df:e0:60:a6:ab:85:d0:8d:b0:da:8c:b8:
d8:99:0d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:43:24 2025 by rpki-client