Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AC32E14511D11F0BDC729E3DAE4EC9C.roa
File: 8AC32E14511D11F0BDC729E3DAE4EC9C.roa (raw, json)
Hash identifier: KIBHMO27YtS015Zs001SFMZlLK8gOQymDAXaH7Uo5EM=
Subject key identifier: 20:38:44:E6:06:A2:0E:20:3B:A5:1E:A9:66:FF:CF:20:EE:5C:F8:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AC32E14511D11F0BDC729E3DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 17:06:18 +0000
ROA not before: Tue 24 Jun 2025 17:06:12 +0000
ROA not after: Sat 09 Aug 2025 17:06:12 +0000
asID: 63139
IP address blocks: 45.197.118.0/24 maxlen: 24
45.197.119.0/24 maxlen: 24
45.197.120.0/24 maxlen: 24
45.197.121.0/24 maxlen: 24
45.197.122.0/24 maxlen: 24
45.197.123.0/24 maxlen: 24
45.197.124.0/24 maxlen: 24
45.197.125.0/24 maxlen: 24
45.197.126.0/24 maxlen: 24
45.197.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89746 (0x15e92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 17:06:12 2025 GMT
Not After : Aug 9 17:06:12 2025 GMT
Subject: CN=685adb09-fbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:3f:68:ab:d4:f2:bd:7d:11:33:94:d9:0a:
df:3a:0c:86:ae:ab:35:58:1e:09:31:bd:51:e4:c1:
c3:69:8a:b1:83:bf:ea:36:4f:d2:bf:40:6a:13:fe:
31:20:fb:26:13:82:20:e9:4c:eb:4b:16:3b:30:94:
9a:36:89:28:0a:de:47:95:d3:e9:e0:de:b1:9f:41:
9d:d0:c7:da:f3:04:90:d2:e1:a6:86:36:0c:90:39:
15:0b:9a:74:63:1b:4f:1f:a7:06:4b:3f:c6:b6:1e:
af:8a:96:a0:6d:bc:9c:ec:9f:85:a3:0f:a1:25:29:
80:de:ee:eb:96:d5:51:68:c8:2f:7c:40:b6:c2:5e:
ee:dd:b0:b3:63:9b:7d:0c:b0:99:7a:0d:7c:d5:5f:
22:02:fc:07:c9:a0:ec:01:49:ec:b4:96:22:2b:3c:
98:ef:44:47:02:75:44:89:d3:54:47:f5:d7:d9:ae:
7a:27:9f:a8:35:03:5a:fc:39:ab:e2:a2:e8:eb:82:
55:4d:b7:dd:d1:a5:45:b3:a0:6b:8b:16:a1:74:58:
1c:e3:bf:6c:9a:ed:38:21:42:51:00:45:c4:3c:3e:
db:6b:5e:b9:30:79:9e:94:3e:be:c1:79:33:e1:a6:
94:43:2a:7b:47:06:39:42:12:8f:cb:4a:79:24:2c:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:38:44:E6:06:A2:0E:20:3B:A5:1E:A9:66:FF:CF:20:EE:5C:F8:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AC32E14511D11F0BDC729E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.118.0-45.197.127.255
Signature Algorithm: sha256WithRSAEncryption
9e:41:b1:e9:c3:f9:cf:40:15:e5:d0:92:4c:d5:d3:d4:4c:a3:
76:d4:45:20:ea:c5:5e:b6:f6:8e:e2:a7:1b:41:af:a8:83:a3:
3e:b2:67:e0:d3:bc:25:48:b1:a2:bd:ff:97:f1:89:fb:70:55:
6c:ee:41:69:e7:16:12:4f:4b:69:ce:be:69:a6:9d:18:d9:38:
54:0d:06:d3:3b:59:16:91:5d:8f:72:78:a2:5a:82:bd:4d:99:
56:1c:bd:8e:1e:de:1b:8f:68:57:fd:17:4b:ec:27:c2:fc:08:
e5:db:58:12:5c:47:4e:6a:72:c6:67:01:23:ab:db:75:d8:c2:
3f:91:13:fd:79:95:73:01:42:99:c8:90:fa:24:fb:05:2a:20:
15:20:07:07:d8:02:b5:e7:69:9b:16:73:0b:48:f2:9e:3b:f1:
8e:d2:eb:6d:fd:7a:42:35:4a:06:72:2c:ae:22:58:b7:84:9a:
aa:62:da:6b:94:5f:a4:f7:78:ff:5c:78:9a:dc:1e:62:53:0f:
ce:c4:64:80:b4:47:d1:fb:5c:94:d4:6f:3a:91:6d:24:1d:b9:
68:b2:b3:56:12:be:38:9c:61:09:f1:9a:56:2f:9e:14:b6:cf:
6a:0b:44:ae:a7:66:d3:e4:64:8b:b6:c3:49:34:eb:7f:ba:75:
0a:4b:a4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:43:30 2025 by rpki-client