Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9A296FE625011F0B5B099AEDAE4EC9C.roa
File: B9A296FE625011F0B5B099AEDAE4EC9C.roa (raw, json)
Hash identifier: aRG+MXyVX/sAS0Lxt3YgeNLWocAWIr+RP/3+/ncTji4=
Subject key identifier: 7E:28:8B:04:C1:86:B8:C1:C6:B3:FD:C8:F5:A2:23:9C:A0:85:BD:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01659F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9A296FE625011F0B5B099AEDAE4EC9C.roa
Signing time: Wed 16 Jul 2025 14:25:30 +0000
ROA not before: Wed 16 Jul 2025 14:25:22 +0000
ROA not after: Fri 25 Jul 2025 14:25:22 +0000
asID: 3561
IP address blocks: 45.194.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91551 (0x1659f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 14:25:22 2025 GMT
Not After : Jul 25 14:25:22 2025 GMT
Subject: CN=6877b65a-ac10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:28:42:cb:83:1c:3d:4f:c7:67:2c:bf:cc:
9a:fc:98:bb:e5:6e:21:07:ea:f2:cc:8a:2f:d6:cf:
b7:0f:7d:03:1d:d8:72:89:fe:95:eb:d0:ee:9e:a7:
b3:51:3f:4b:ac:0e:41:14:68:08:36:3a:be:75:8d:
38:b9:29:ef:5e:32:0c:52:1c:f1:c0:7f:ac:01:bf:
4d:47:78:0e:74:b2:24:14:5b:54:f2:27:9b:d9:35:
17:0f:c8:14:e2:d7:04:3f:97:f2:c4:1b:e3:bd:fe:
50:fc:43:ad:10:f1:a8:b6:62:b3:97:ee:7e:77:92:
06:d4:e9:75:8f:7d:e3:f5:d7:e0:e2:d5:78:ac:6d:
b3:ed:7f:16:4b:71:74:08:77:75:69:67:a8:b3:ce:
61:32:5a:fd:a8:2c:92:46:29:ae:aa:20:82:f8:b5:
06:25:38:55:f5:d9:ee:b6:15:78:dd:90:34:fd:05:
c6:3a:18:dd:6f:eb:f4:52:a2:2a:2c:12:a9:72:0a:
f6:9f:7f:61:ba:a9:ab:f3:e6:51:61:7c:8d:7b:c8:
11:de:8e:2d:b1:a3:8f:23:1a:35:c1:7c:1f:a9:e9:
b9:a9:74:cd:ff:10:50:c1:c8:91:89:22:59:fe:6c:
16:65:5e:54:5f:69:93:2a:87:5d:47:3e:5d:8b:fc:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:8B:04:C1:86:B8:C1:C6:B3:FD:C8:F5:A2:23:9C:A0:85:BD:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9A296FE625011F0B5B099AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.100.0/22
Signature Algorithm: sha256WithRSAEncryption
43:fd:86:5c:a3:0e:87:16:b8:01:4d:f9:aa:a6:db:00:b7:83:
c0:33:13:70:c9:5f:10:a1:32:f1:12:9e:7d:cc:54:85:cf:f7:
a4:5e:fc:25:b4:18:95:59:b9:9f:63:06:d0:cd:54:b0:e7:49:
1d:fa:68:64:ad:73:e1:13:48:69:4f:2f:2e:d9:bb:a8:75:9d:
b8:22:64:ae:25:06:d1:86:f9:f4:ae:d7:9f:9c:08:3a:28:24:
73:4b:d7:90:ff:cc:d2:97:a0:84:ad:79:07:cf:ac:dc:fa:b2:
8a:b7:ca:47:4d:72:8d:7f:08:2f:19:e2:b8:a4:59:d0:9f:3d:
7d:91:02:b7:62:6e:ca:7d:66:3a:67:5b:b9:73:4e:d4:60:fa:
f4:c2:10:a0:99:0a:24:fe:5a:82:58:0f:10:b4:d3:7f:ed:ca:
38:4b:17:12:df:2d:c4:11:0b:43:65:02:4b:f2:4a:cf:d1:78:
c8:6a:f1:30:36:f6:83:cc:3d:7e:00:61:75:b0:0a:71:a0:31:
00:f7:09:41:3a:af:db:81:6f:d4:18:f1:5d:2f:b8:2b:fd:1f:
8a:33:9e:36:b6:e8:9c:24:54:a2:70:63:82:f8:cd:73:c4:01:
05:ed:c5:79:27:c6:4a:6c:d8:0b:84:4e:3e:a8:56:df:fd:49:
cf:6c:93:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:34:08 2025 by rpki-client