Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8858FF46580711F0A020BCDFDAE4EC9C.roa
File: 8858FF46580711F0A020BCDFDAE4EC9C.roa (raw, json)
Hash identifier: X+cXGbvHc8pOqueZYkpglbnivzvSRYG/7Y9ZY/hishs=
Subject key identifier: A6:71:E5:E1:CD:A4:2E:D7:FD:D7:3E:11:8C:76:CF:79:45:A0:19:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016071
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8858FF46580711F0A020BCDFDAE4EC9C.roa
Signing time: Thu 03 Jul 2025 12:16:23 +0000
ROA not before: Thu 03 Jul 2025 12:16:17 +0000
ROA not after: Sat 09 Aug 2025 12:16:17 +0000
asID: 14315
IP address blocks: 45.197.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90225 (0x16071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 12:16:17 2025 GMT
Not After : Aug 9 12:16:17 2025 GMT
Subject: CN=68667497-e6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:68:90:bc:04:91:90:27:15:fd:0d:58:3b:
a3:49:de:23:c0:54:52:4a:37:73:a0:c4:2c:f7:8d:
ef:dd:ae:87:99:7c:40:43:27:9b:9c:32:e8:23:c3:
76:a1:0f:70:b5:98:28:5f:74:59:a2:c7:fd:de:d0:
eb:f0:2f:32:e5:ef:02:b3:53:1e:ed:c4:8c:b4:87:
3d:42:83:4e:a0:04:2f:85:2a:c5:32:4e:44:54:49:
8c:3f:4d:94:4e:c3:92:cd:b3:37:6e:16:48:24:04:
7e:9f:78:64:d7:65:9e:da:46:03:98:77:83:bc:e8:
37:0d:f5:73:48:5d:5c:a6:bb:a1:4f:67:2c:f0:1a:
23:e9:9a:d2:d9:75:0f:c9:9b:d9:8f:7e:de:f7:38:
08:9b:11:57:49:17:d5:96:15:91:46:00:59:9b:d0:
29:73:c1:b8:f2:a8:4c:e6:5a:1c:56:e9:cf:2e:32:
3a:0b:ef:0b:67:5a:48:7d:56:ae:4e:05:e7:5b:80:
35:b1:54:70:88:08:92:1b:c4:96:50:5f:76:22:3b:
1c:5d:19:37:74:87:5c:6e:9b:97:74:8a:fd:f2:59:
ff:9d:f4:65:ee:f0:29:bc:03:0f:eb:84:00:8a:9e:
f4:cd:bc:ed:d1:b6:7d:35:4b:81:2b:fe:1a:91:85:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:71:E5:E1:CD:A4:2E:D7:FD:D7:3E:11:8C:76:CF:79:45:A0:19:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8858FF46580711F0A020BCDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.137.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:85:15:f8:1c:e6:3c:c5:17:86:cf:c4:6a:ad:58:a2:83:28:
67:2b:32:47:e2:8c:54:06:f2:29:ad:d0:80:28:ed:ae:52:71:
12:87:29:1d:b4:87:1f:47:27:e0:7b:3a:ca:0d:e5:a9:d6:45:
5f:8e:d2:49:07:0f:90:b2:b5:78:4b:6c:ca:97:58:23:41:b7:
aa:59:2b:7d:7e:75:cd:a1:de:3f:fb:ad:46:67:9e:95:6d:fa:
5f:94:2c:dc:90:7a:d5:35:fb:bb:2b:1b:8e:4c:d8:0d:ec:31:
e2:2c:41:3f:17:79:a7:a4:97:7e:19:29:5d:d3:52:3d:11:01:
c4:f8:ee:e0:47:82:77:a6:d2:63:1b:8a:41:41:3a:c4:46:f6:
09:8e:53:91:a2:89:c0:06:65:d7:b9:75:7d:0f:04:85:2c:39:
fe:40:b3:51:ac:ec:c4:78:d7:0d:64:82:15:37:a4:6e:5e:9c:
7c:75:c1:dc:14:e0:41:c1:db:72:e5:1f:17:9e:f4:c0:31:c2:
13:38:b2:e3:7a:3d:51:af:9c:d3:53:78:6d:d1:b8:79:ab:b1:
5e:aa:4b:90:a9:d1:b8:c8:a1:01:06:9e:b6:f4:51:c1:4e:99:
1c:a2:50:9c:ba:cb:df:79:41:a0:36:e5:3e:ec:ed:7d:b7:2c:
4a:14:d9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:52 2025 by rpki-client