Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BC100F45A7611F0A621BDB5DAE4EC9C.roa
File: 8BC100F45A7611F0A621BDB5DAE4EC9C.roa (raw, json)
Hash identifier: 9bTGTmLMxWzair7CDhf1yBeeFhN7DNGomt/4F0dUrJs=
Subject key identifier: F8:C1:46:14:5B:9B:84:46:43:F9:7B:2D:DE:3E:34:F2:0E:31:89:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01622D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BC100F45A7611F0A621BDB5DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 14:36:05 +0000
ROA not before: Sun 06 Jul 2025 14:36:00 +0000
ROA not after: Wed 23 Jul 2025 14:36:00 +0000
asID: 131471
IP address blocks: 45.195.130.0/24 maxlen: 24
45.195.131.0/24 maxlen: 24
45.195.194.0/24 maxlen: 24
45.195.195.0/24 maxlen: 24
45.195.210.0/24 maxlen: 24
45.195.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90669 (0x1622d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 14:36:00 2025 GMT
Not After : Jul 23 14:36:00 2025 GMT
Subject: CN=686a89d5-5c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:e9:70:cb:6a:03:40:c3:60:e8:2e:28:a3:
46:4b:b9:40:69:0a:1a:59:18:f9:1f:30:95:b3:67:
6a:49:e1:1a:10:45:1c:07:f8:65:f4:2f:d3:db:24:
d5:20:33:b5:0f:a6:07:27:90:1c:fd:53:0d:5d:a8:
3e:bb:4a:b1:85:b6:01:a9:fc:16:52:79:6a:97:e9:
c6:d1:21:ba:1e:96:0f:a5:32:ba:67:4b:51:8c:21:
2f:5d:f1:8b:7e:f8:72:dc:25:06:88:5b:42:51:19:
35:e4:f5:34:2d:a6:2d:55:41:c4:df:84:5c:2c:0d:
71:d7:92:74:0d:9c:73:35:87:fd:6f:93:19:31:fa:
eb:50:c6:31:5e:c3:bb:87:b1:fc:8f:bb:a7:5e:15:
75:db:ec:64:49:40:d3:6c:a1:72:04:dd:c5:ea:d5:
e3:b5:f6:67:c0:fe:9f:0e:f3:58:dd:52:9e:74:b8:
99:e9:3f:71:62:fd:1a:61:ea:6f:5f:7c:bb:73:25:
1b:fb:dd:17:6c:12:6b:5c:20:e2:18:fd:14:db:cd:
11:47:a9:24:49:22:a3:d6:d8:e5:69:05:f3:42:37:
08:41:10:07:a1:9f:a6:38:79:8f:4d:74:16:87:75:
c1:4b:86:88:75:69:24:f5:46:3a:57:a6:27:b3:c0:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C1:46:14:5B:9B:84:46:43:F9:7B:2D:DE:3E:34:F2:0E:31:89:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BC100F45A7611F0A621BDB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.130.0/23
45.195.194.0/23
45.195.210.0/23
Signature Algorithm: sha256WithRSAEncryption
69:14:20:16:0a:e6:7e:42:81:70:7d:30:c6:ee:ed:ac:18:22:
1c:0e:d5:59:46:83:0f:5c:19:1e:e6:0e:38:61:d4:33:32:0c:
44:f4:f3:7f:60:fc:58:2f:06:38:32:fe:74:7c:c4:95:7e:d7:
68:6a:e1:ad:79:d0:2d:eb:e7:b0:57:e3:64:cd:79:8f:fd:66:
fe:57:54:44:8a:e1:c6:6b:b1:56:e8:ce:87:f3:87:7f:3d:7e:
e5:9f:c4:29:d0:39:98:99:9b:da:9d:69:a7:bb:db:b4:3b:67:
7e:04:57:65:42:43:bc:94:12:72:ce:6d:4b:22:93:42:50:67:
b9:31:91:cb:b3:b1:19:64:dd:70:8f:49:99:0b:de:a8:79:14:
82:46:91:12:bd:2e:5f:1f:82:8c:72:23:75:01:ae:b6:20:b8:
f2:20:dc:bb:21:bc:20:98:a7:37:bb:94:50:52:ba:cc:b0:31:
21:a3:1e:4c:d0:c5:38:35:09:1b:8c:3d:8b:4b:4f:75:99:be:
f6:b7:26:da:00:b4:f9:ef:dd:3a:be:94:44:a2:e8:77:e5:0f:
6a:b7:a6:1e:a5:1d:fc:22:71:60:f9:0e:08:80:d7:3a:e4:07:
fa:03:a6:83:46:f5:cb:04:b5:56:86:7f:ab:57:41:d2:a4:2f:
ec:c9:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:30 2025 by rpki-client