Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A291BDD858CC11F0B31613E6DAE4EC9C.roa
File: A291BDD858CC11F0B31613E6DAE4EC9C.roa (raw, json)
Hash identifier: 0qktPQBzSDYbNPPBfd9omDXdd21h/cQ9Y0kVXXark9I=
Subject key identifier: 6F:B5:FD:23:1D:55:88:DD:A4:D9:BF:FF:3C:CA:33:5E:33:11:72:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A291BDD858CC11F0B31613E6DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 11:47:18 +0000
ROA not before: Fri 04 Jul 2025 11:47:13 +0000
ROA not after: Sun 10 Aug 2025 11:47:13 +0000
asID: 61112
IP address blocks: 45.192.240.0/24 maxlen: 24
45.192.241.0/24 maxlen: 24
45.192.246.0/24 maxlen: 24
45.192.247.0/24 maxlen: 24
45.192.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90362 (0x160fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 11:47:13 2025 GMT
Not After : Aug 10 11:47:13 2025 GMT
Subject: CN=6867bf45-cda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:13:ed:4c:22:df:6f:fd:41:2b:d0:62:c9:
af:ea:5c:8e:6a:4f:2d:6e:ce:fd:24:62:48:94:ee:
09:f5:5d:e1:72:9c:b4:fe:dd:7e:cc:db:67:a8:e4:
2d:88:2c:cf:14:f1:2c:40:fb:5d:f5:d1:31:ae:6f:
4e:bf:f6:23:f4:ea:4f:d2:c2:53:fa:ad:7c:f9:27:
ab:42:22:bb:77:fc:27:c4:e2:10:b2:2a:40:cd:78:
cf:1c:c1:e7:73:e5:da:36:f6:50:d0:2b:a1:95:65:
95:70:f9:bd:94:3c:0a:99:de:80:3a:ff:3b:cb:15:
8f:44:69:46:38:03:94:b2:72:de:f4:a8:de:5f:35:
5e:7d:00:d8:7f:0e:d3:89:b8:96:a4:07:fc:ae:34:
50:15:34:00:75:5e:5c:86:b0:36:be:82:3f:33:92:
be:4e:d7:a4:24:49:9b:c5:65:5e:57:58:25:a0:a1:
ae:aa:e9:e6:8c:7e:2b:79:bb:81:43:a4:9c:32:66:
f5:8e:6e:f7:6e:ba:5d:30:e6:c3:85:8d:09:86:05:
33:e9:31:00:7a:eb:d7:07:f0:bc:38:95:3b:6d:8c:
fc:57:a9:81:f9:52:ac:72:59:92:84:b3:9c:8e:a4:
c6:1e:e6:1c:d4:c1:57:57:4a:4c:1e:8f:28:ce:8c:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B5:FD:23:1D:55:88:DD:A4:D9:BF:FF:3C:CA:33:5E:33:11:72:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A291BDD858CC11F0B31613E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/23
45.192.246.0-45.192.249.255
Signature Algorithm: sha256WithRSAEncryption
2b:ce:7a:bd:ed:64:89:05:46:a1:29:40:d2:93:1c:fe:c8:ba:
ca:d2:ed:0a:71:64:0d:52:c7:60:b9:eb:bb:28:00:e8:44:e3:
54:4a:5a:5c:6e:d9:24:f3:9d:2f:b9:a6:db:e8:55:e0:5e:e6:
d1:59:7b:23:e2:db:ba:ee:20:6e:9c:1b:b2:ac:1a:de:21:8a:
f2:29:14:5c:34:fd:12:c4:78:49:55:10:6c:e3:cb:7a:fd:e7:
d1:d4:45:b4:92:10:42:7a:97:04:8c:b3:50:82:a2:cb:e3:7d:
be:db:df:c2:98:98:78:15:66:4d:10:70:cd:dd:3e:ab:b8:9a:
b8:06:a4:d4:d5:21:a7:6a:9c:2a:63:05:b9:a0:9d:e3:79:d5:
16:d0:08:3a:a8:09:77:f3:6a:11:68:31:80:65:ed:9e:53:b4:
04:12:2e:a0:2d:46:13:36:66:36:06:f0:b2:2f:dd:36:25:69:
5e:39:5a:38:ff:fe:a6:05:20:0c:0c:7c:93:21:e8:50:92:e7:
d2:f7:c5:97:f4:74:c2:cc:ce:62:c6:6a:3e:4f:ee:df:79:3f:
80:a8:38:6f:67:75:5e:d6:fb:09:d7:39:80:69:43:be:b0:61:
8a:81:ee:c5:9b:41:6a:60:61:b3:d7:4e:f5:04:34:44:22:3d:
2c:8a:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:27 2025 by rpki-client