Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B67E02045B3611F08578C09DDAE4EC9C.roa
File: B67E02045B3611F08578C09DDAE4EC9C.roa (raw, json)
Hash identifier: 4VRW17HWTYvEzDRsYJAxK6m6++yOYEyBmN2aw9fVA0s=
Subject key identifier: 1D:DC:6D:ED:A9:2D:7F:23:5C:4C:6D:C2:A5:1A:04:C0:02:74:94:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016306
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B67E02045B3611F08578C09DDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 13:31:40 +0000
ROA not before: Mon 07 Jul 2025 13:31:35 +0000
ROA not after: Tue 12 Aug 2025 13:31:35 +0000
asID: 395886
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90886 (0x16306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 13:31:35 2025 GMT
Not After : Aug 12 13:31:35 2025 GMT
Subject: CN=686bcc3c-806f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:58:dd:62:ba:75:c5:07:14:3f:8a:d5:48:
b2:e4:7d:02:3b:1b:10:a8:fe:72:a1:19:6a:4c:08:
cf:7b:dd:9f:fa:ee:10:47:75:48:98:25:71:54:25:
db:58:78:18:03:f8:b0:58:da:c5:eb:dd:9d:ad:7e:
e9:0e:1c:a4:a7:c8:ea:15:8a:39:1d:13:1e:53:75:
ca:1d:37:57:74:4a:f7:83:8e:8f:85:55:46:2d:91:
23:3a:aa:20:3d:88:4d:e7:f5:7b:5b:66:ac:65:96:
b6:f8:4b:e3:9c:8b:67:fc:9b:a0:fa:10:04:ec:d6:
84:75:85:37:64:d2:2c:c0:1e:31:7b:e1:4b:60:be:
7f:cf:0c:5e:2d:e9:53:b0:ca:4d:19:20:9d:ce:cb:
a5:48:ce:fa:08:9a:66:8f:c3:33:32:db:3a:32:a7:
10:0e:a7:29:31:57:16:41:78:f9:0d:c4:73:93:04:
23:f0:26:e0:00:d4:02:1c:03:65:10:7c:f3:9a:93:
d2:ce:37:e1:58:93:46:98:16:c9:ec:47:bd:b6:a4:
c6:3d:bc:40:78:18:cf:3e:1a:ae:74:b6:be:1e:5a:
b1:45:5b:fe:c2:8f:9e:2c:e9:57:95:1f:c9:79:07:
e7:74:e3:70:56:6c:d6:c5:bf:60:1d:38:03:06:d8:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DC:6D:ED:A9:2D:7F:23:5C:4C:6D:C2:A5:1A:04:C0:02:74:94:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B67E02045B3611F08578C09DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
20:81:ef:71:ec:f3:d6:e5:02:b2:9f:28:3e:b7:ab:34:3f:04:
11:02:87:21:c1:e7:bf:79:56:f6:20:a9:00:d6:89:7a:69:06:
32:b5:c5:eb:89:66:67:e2:87:c9:03:08:27:4c:c5:ae:c1:08:
eb:b4:af:6e:f1:2f:4a:de:f9:80:d1:53:4a:cf:d4:52:b1:07:
75:0d:99:4a:8d:30:31:2c:bd:f8:e7:8f:a2:d2:9f:ee:36:77:
03:07:46:d6:a6:39:e1:13:60:5f:34:5d:30:fe:2a:71:29:2c:
9d:79:4d:26:d3:3d:e8:da:8c:16:2b:1a:e2:cd:d1:a6:80:e2:
48:14:2d:23:57:61:c4:1e:bc:18:68:60:2c:d1:2e:ed:c6:e2:
40:89:36:7c:02:ce:a8:ea:eb:f9:90:3f:4c:0b:e7:f3:8b:1a:
12:3e:ef:e0:a8:1f:99:b8:9b:64:77:14:fd:17:d4:db:78:18:
79:7f:e3:f9:5e:30:66:45:74:b6:4d:10:3d:18:08:7b:eb:87:
9b:0f:c6:1c:00:98:dc:90:af:1f:1c:4f:11:33:9f:cb:1c:c2:
83:99:e9:ea:44:89:4d:ba:0f:06:e3:32:f7:1f:71:28:6c:1f:
58:21:2b:d8:a6:a4:89:a4:94:27:1b:74:1b:2d:26:b2:0b:dd:
91:c7:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:26:38 2025 by rpki-client