Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC31ED985CFA11F0BC84BA99DAE4EC9C.roa
File: CC31ED985CFA11F0BC84BA99DAE4EC9C.roa (raw, json)
Hash identifier: Euebqp2NfnrykBzwytGhaizyLCuWC2+7qhaHkzem1UQ=
Subject key identifier: F0:C2:09:E2:DC:6B:48:E4:91:88:8D:CE:84:E0:6F:F5:8A:64:04:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01643C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC31ED985CFA11F0BC84BA99DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 19:27:49 +0000
ROA not before: Wed 09 Jul 2025 19:27:44 +0000
ROA not after: Thu 21 Aug 2025 19:27:44 +0000
asID: 50028
IP address blocks: 45.198.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91196 (0x1643c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 19:27:44 2025 GMT
Not After : Aug 21 19:27:44 2025 GMT
Subject: CN=686ec2b5-df80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:25:40:76:eb:11:8e:bb:bf:4c:c9:5a:4c:
02:fb:e5:ec:70:31:80:1e:48:49:17:d1:42:9a:29:
7f:fe:55:5c:8c:78:7d:90:ed:a7:36:49:8b:6f:14:
61:51:e0:2d:f8:cf:40:e6:ee:7b:39:98:96:02:ae:
22:2e:6a:cf:a2:a6:24:9f:45:7d:55:f4:b8:aa:1f:
1d:b4:7d:71:b4:cc:18:35:cf:d8:59:80:9a:28:99:
80:64:d9:62:25:88:da:83:2c:b5:1c:b8:0c:89:46:
12:f5:cb:86:79:b7:4b:fd:3e:e3:94:1d:9b:87:f1:
ea:2f:48:5d:0a:61:29:03:6b:ef:3e:bd:ee:37:1d:
9d:fb:20:01:b4:9a:f8:48:0b:d5:16:5c:e3:e5:64:
8c:8d:d5:cc:b3:b5:fd:be:f8:14:d0:b1:92:ce:49:
b4:e4:54:6f:9f:17:7e:ec:e9:7b:7a:6f:f8:19:fb:
1a:b3:ca:c5:04:0b:2a:5c:01:71:20:ed:87:cd:cf:
e5:13:a9:06:a7:5e:31:8f:00:ac:b6:ee:2f:e1:ce:
94:1b:bd:d6:0f:68:f0:f1:51:05:ce:e0:a1:c8:0a:
c6:b1:5a:13:05:19:1e:b0:e0:b1:c2:38:99:76:34:
46:2a:9b:d8:58:df:62:eb:bf:78:8f:b4:a3:d6:97:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C2:09:E2:DC:6B:48:E4:91:88:8D:CE:84:E0:6F:F5:8A:64:04:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC31ED985CFA11F0BC84BA99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.139.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e3:45:9d:58:aa:32:1b:6b:2f:52:0c:c7:52:75:21:b1:06:
02:6c:22:01:ad:58:b9:a9:12:1a:14:d4:1a:eb:5f:45:6f:34:
9e:6b:d1:82:a5:b8:91:ea:51:a3:d8:e5:e3:2c:ca:f0:39:4c:
ea:9f:b4:a7:f8:91:8a:85:8f:c5:37:02:1e:85:04:26:75:1a:
5b:27:cf:15:65:8b:aa:06:88:9d:cf:be:7b:f0:cd:97:bf:51:
ed:32:53:6a:24:a9:3a:f7:61:5f:7e:87:8c:c0:78:af:6d:d6:
48:b2:37:65:c9:12:27:70:45:3d:5f:ee:40:a6:41:43:be:ea:
0f:2a:3e:27:cd:72:5a:60:76:ae:c8:2b:bd:cb:d2:5e:3d:e9:
0a:7f:a4:f4:55:ba:a0:7d:d4:02:bc:27:b0:e3:c8:e9:2e:f6:
0e:7b:aa:70:bf:90:2f:7e:cd:8d:17:b4:2f:dd:7d:ee:71:f8:
52:89:31:34:0e:eb:ac:18:13:be:b0:89:33:b0:80:bd:b4:74:
c8:e1:33:23:ce:ac:03:7f:ab:15:56:ce:53:48:d0:d1:4e:1f:
72:99:3b:c3:36:62:43:1f:01:b0:95:37:ab:3c:f1:de:bf:da:
e3:89:d0:57:b6:d5:74:74:71:07:7f:67:ee:3f:d0:67:1a:79:
33:ec:29:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:07:08 2025 by rpki-client