Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BC2264E5A8711F0BEC12CA2DAE4EC9C.roa
File: 8BC2264E5A8711F0BEC12CA2DAE4EC9C.roa (raw, json)
Hash identifier: N8jL6LU0WM3EAtzmlMj1qMF7GInZZkWoXUEwZMzDXhg=
Subject key identifier: C5:2E:1C:A6:42:74:C4:C2:5A:D1:80:00:C7:DF:94:4D:F0:5A:66:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016257
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BC2264E5A8711F0BEC12CA2DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 16:37:46 +0000
ROA not before: Sun 06 Jul 2025 16:37:41 +0000
ROA not after: Tue 12 Aug 2025 16:37:41 +0000
asID: 51847
IP address blocks: 45.207.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90711 (0x16257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 16:37:41 2025 GMT
Not After : Aug 12 16:37:41 2025 GMT
Subject: CN=686aa65a-6768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:79:76:60:5b:73:7b:10:81:1b:51:93:b5:
30:0b:b8:54:1d:85:64:ec:c8:2b:1c:d5:5c:f8:de:
d4:ed:1c:fd:0c:59:67:f6:07:99:d5:3e:de:3a:08:
2a:a2:34:87:4c:35:73:d1:2b:58:01:04:8d:d0:ef:
af:de:be:37:b9:cc:a5:e0:99:5d:56:f0:6f:05:88:
65:eb:2d:61:e7:95:19:b8:06:cb:fb:59:29:33:d9:
df:a6:3a:46:53:71:3d:3c:ba:e8:b4:08:94:cb:d0:
91:6b:c2:8c:cc:83:d3:18:21:5e:fe:c2:2a:59:ff:
f1:5a:d3:20:e8:c3:05:1a:5e:46:91:23:43:79:a0:
92:64:67:10:b7:91:12:cf:78:f2:14:85:07:8c:6c:
15:6f:8f:3f:67:e3:3d:e7:d2:ec:cc:47:85:fd:30:
5e:59:7b:59:3e:1f:52:c5:46:fd:f2:cd:62:4c:fe:
da:b9:6c:20:95:c6:19:cd:0d:1a:c9:29:04:32:14:
2d:7e:ac:ae:d6:c7:33:6f:90:f1:1e:15:08:77:83:
b8:66:b9:73:69:c7:b3:d2:10:ee:ad:c0:8c:25:61:
3c:f7:13:43:9c:a4:a0:f6:73:ef:d5:32:2a:71:4f:
87:2c:05:dc:72:92:f3:ea:d0:e5:51:07:40:af:a4:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2E:1C:A6:42:74:C4:C2:5A:D1:80:00:C7:DF:94:4D:F0:5A:66:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BC2264E5A8711F0BEC12CA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
01:b8:24:6a:b5:1b:5f:72:d3:aa:c9:1f:34:34:16:75:4c:40:
87:ef:a6:fd:9f:64:19:ef:c8:62:c6:5b:d7:75:ef:c4:f6:06:
02:ee:7d:82:d3:ee:15:8d:36:47:c9:74:f8:eb:3a:4f:d7:e2:
25:8d:9d:e2:3d:52:94:c7:d3:76:b1:91:cb:4a:57:ad:ae:c6:
e8:42:db:ba:b2:e5:66:e2:16:fe:88:69:fa:2c:e0:9c:7d:d5:
44:77:d0:1d:25:07:dc:07:80:89:c1:05:42:29:12:32:60:54:
8d:2d:f5:af:2b:6e:9f:ae:a2:f4:c6:b0:ac:dd:f9:28:00:f5:
f2:63:e6:de:2e:cf:54:d0:10:a6:c4:25:04:04:4b:15:e1:5c:
73:95:f2:e2:dd:82:01:8e:6f:25:fe:75:ff:90:e4:c7:93:b1:
3a:ed:ca:ad:74:6e:2a:60:57:3b:48:a2:6b:70:76:e3:e9:e2:
f0:da:97:c5:ca:86:33:f9:47:81:9c:be:a7:97:19:ea:5f:2a:
48:c1:e0:15:4b:18:30:1b:ba:15:f2:10:3f:04:6a:19:3a:1a:
24:cb:c2:e5:38:f9:d8:de:4a:24:e2:f0:29:36:36:b6:ed:fd:
30:74:e0:f0:9e:84:76:40:24:5d:b0:55:bd:28:04:f1:ae:fb:
01:a0:d1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:33:17 2025 by rpki-client