Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE058DC658C611F0BC06ECBDDAE4EC9C.roa
File: AE058DC658C611F0BC06ECBDDAE4EC9C.roa (raw, json)
Hash identifier: AuMVQs+j+3xzP3pRBurnZqxP6L0fpLIYK/v4xPu1+Is=
Subject key identifier: 56:2C:31:19:CF:A7:DB:69:28:08:B6:4E:BE:97:C3:CF:C2:A8:17:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE058DC658C611F0BC06ECBDDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 11:04:40 +0000
ROA not before: Fri 04 Jul 2025 11:04:35 +0000
ROA not after: Sat 09 Aug 2025 11:04:35 +0000
asID: 211241
IP address blocks: 45.192.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90346 (0x160ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 11:04:35 2025 GMT
Not After : Aug 9 11:04:35 2025 GMT
Subject: CN=6867b548-651c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:cb:72:f5:46:f8:c9:0c:28:fc:f5:32:07:
52:25:db:e5:50:9b:85:4b:f3:61:8a:eb:34:4e:52:
5d:46:c6:5f:b8:09:be:53:02:67:01:b9:01:99:4a:
4e:fe:ef:02:0f:23:36:5f:ed:ad:47:a9:f0:ae:1a:
8b:d8:fc:dd:3a:32:8f:b5:92:17:12:83:55:0d:6a:
af:39:81:83:76:ba:03:a9:5f:45:12:d7:b8:e4:8c:
f3:94:13:76:b4:58:d4:ed:bf:bf:c0:38:f3:26:e0:
12:9e:fb:12:79:da:3f:fa:4d:16:d5:b4:6d:6d:8d:
8f:f2:8c:40:b9:62:90:72:e0:f9:94:60:bc:ea:2f:
ad:86:42:ef:3b:14:f0:1c:2e:19:b0:03:23:b5:db:
bf:49:27:6a:c7:84:85:bd:54:0d:f2:e8:91:34:bb:
59:2b:70:5f:e7:de:71:e6:2c:37:2f:14:0b:fa:c5:
f6:ad:31:05:c7:18:f1:0c:f4:6f:4b:03:16:23:53:
78:9a:52:9a:9b:7f:1d:22:ce:e2:98:64:ba:df:01:
66:b3:f0:3a:cc:af:60:38:9c:b5:4b:a0:80:ea:7d:
71:a8:df:47:d2:f3:6b:82:47:b2:1b:e0:f6:34:b6:
77:c5:7c:1a:cc:83:40:0e:de:0d:15:69:32:94:1b:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:31:19:CF:A7:DB:69:28:08:B6:4E:BE:97:C3:CF:C2:A8:17:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE058DC658C611F0BC06ECBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:29:59:e7:76:09:e7:94:73:6a:c0:5d:a2:22:73:df:73:d7:
22:a2:8a:82:40:30:f3:f2:7a:d1:24:71:37:a8:dc:45:9e:74:
2b:c5:ab:d8:83:ea:ef:bc:92:a1:97:9c:3f:7f:3d:bd:16:ee:
50:75:4b:77:d0:b8:62:d2:58:58:4f:65:d4:81:3a:0d:55:52:
6b:a5:db:5e:d8:f0:30:e1:d0:e4:2e:be:27:07:c6:fd:bc:04:
89:a3:6c:0d:53:19:8a:75:d4:d4:82:a6:76:6e:21:80:ff:66:
5e:00:f5:13:39:c9:3c:b5:00:73:f9:55:1f:b9:cc:0d:25:72:
c2:24:92:ba:c0:3c:83:ea:fa:d8:dd:65:ba:bd:44:78:d8:fb:
6d:73:48:2e:7c:20:f7:cf:6a:67:56:c0:ab:c2:92:22:32:ce:
f5:a0:4d:e2:e4:9d:b0:4f:6b:46:b8:2d:68:db:b1:25:36:11:
eb:f5:17:09:d0:81:04:7a:2d:15:ac:b9:22:6d:34:e3:1d:dc:
2c:15:54:ec:42:ed:03:c7:42:e8:4c:cd:0a:67:8c:1b:42:59:
5a:b8:c1:42:60:f7:1f:c2:7e:eb:f6:6b:1a:cb:24:d9:72:46:
a1:c9:b1:34:dc:16:e2:b4:3d:92:8b:0b:7e:3c:6f:30:85:b5:
48:32:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:36:10 2025 by rpki-client