Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33A9ED054C911F0832035CEDAE4EC9C.roa
File: C33A9ED054C911F0832035CEDAE4EC9C.roa (raw, json)
Hash identifier: am0bXqMXmeaZCK6lcsVvMFJ9nhcBJeQ4dB+ay1EJ3XU=
Subject key identifier: 18:BC:F4:A2:39:76:D9:88:15:BE:10:58:C2:39:82:E9:A5:C2:1E:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33A9ED054C911F0832035CEDAE4EC9C.roa
Signing time: Sun 29 Jun 2025 09:16:39 +0000
ROA not before: Sun 29 Jun 2025 09:16:34 +0000
ROA not after: Thu 31 Jul 2025 09:16:34 +0000
asID: 20326
IP address blocks: 45.196.201.0/24 maxlen: 24
45.202.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89964 (0x15f6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 09:16:34 2025 GMT
Not After : Jul 31 09:16:34 2025 GMT
Subject: CN=68610477-3160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:30:26:d6:d6:ff:b0:dc:a8:c6:cd:8b:fb:9f:
a8:b9:fd:23:ad:c5:81:9c:b8:68:42:c4:b2:22:ea:
43:0f:d4:df:6c:84:7d:da:93:f3:20:62:6c:6a:d6:
3f:db:56:6d:dd:b3:d8:1d:0b:bc:b2:92:e3:14:a5:
33:f1:16:96:58:00:bd:bf:9e:13:73:4f:0b:09:bc:
ac:b2:47:62:14:9a:46:b8:f0:ea:71:27:5a:d0:bd:
14:f0:73:88:9c:a8:a1:3f:e2:dd:e6:80:a0:ad:82:
ce:72:96:ff:57:47:ea:3c:7e:96:06:ae:e9:9b:64:
04:2e:79:55:bc:a8:f2:8a:86:6c:d6:b3:72:22:df:
85:ef:eb:01:7e:e5:b2:0e:1c:bc:40:9e:5d:ef:e3:
cb:bc:48:3d:1d:e5:10:8e:91:2f:32:a4:30:96:07:
fd:a7:93:de:11:92:12:86:06:a8:73:bf:a7:c3:07:
5a:a2:8a:e5:59:ab:9a:42:8a:49:e5:d6:8e:d4:7c:
3c:f7:84:17:fc:d6:ad:61:28:2a:94:fb:b2:2e:91:
e3:ea:c6:57:99:b9:24:b4:46:f6:52:83:11:b7:f7:
2a:71:71:c4:64:da:0b:0a:0e:88:ad:2a:3e:28:e3:
d4:54:54:c9:28:eb:2f:50:da:9c:13:e6:1e:b5:c3:
2a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BC:F4:A2:39:76:D9:88:15:BE:10:58:C2:39:82:E9:A5:C2:1E:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33A9ED054C911F0832035CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.201.0/24
45.202.102.0/24
Signature Algorithm: sha256WithRSAEncryption
91:be:1b:7d:41:4f:59:8b:85:51:ee:f0:50:be:e9:08:e0:d6:
d3:67:b3:d3:46:69:b4:5f:a7:d0:96:ac:07:10:c0:cd:55:e8:
02:34:bd:ff:55:22:75:42:a3:90:22:0e:54:2e:e2:81:70:fd:
24:01:52:fc:f5:ab:2f:2d:6e:4e:2a:bc:d2:10:89:3e:56:56:
1f:b8:62:a2:44:16:c5:47:0f:da:77:ab:8a:31:7a:f1:76:9f:
0b:a7:a5:49:bd:ba:58:bc:ba:1e:3a:18:5c:af:aa:19:62:e0:
b1:61:77:47:6a:31:43:7b:80:16:c8:03:60:7c:ae:d1:6a:a6:
8b:09:35:77:b4:c6:c7:53:7a:05:92:1c:c7:7e:ba:ac:44:b3:
e4:77:98:b9:a5:3e:de:f2:d5:c0:0e:b6:fe:c5:33:67:60:86:
02:4a:b0:91:c9:bc:09:8a:43:ea:d7:fd:e4:ab:80:6e:7f:8d:
01:6b:eb:f3:98:15:36:a5:29:6c:7f:44:95:d0:c1:1c:e4:55:
1b:6c:61:73:ee:4d:6f:dd:fe:8a:ef:5d:b9:6f:73:ee:9b:d1:
0d:a7:3f:4f:fc:f1:8e:57:a0:19:70:3c:d8:dd:a7:41:cd:a4:
38:44:5f:44:27:93:6b:d6:75:6b:c4:93:f3:2e:48:33:c6:b6:
24:f6:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:36:03 2025 by rpki-client