Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2B94A4E5BE611F09CC0949CDAE4EC9C.roa
File: E2B94A4E5BE611F09CC0949CDAE4EC9C.roa (raw, json)
Hash identifier: utiSkEGPlpNJGo0rMlFVEAy02rhe9PmcLFYbYXywd7o=
Subject key identifier: 73:20:BF:79:4F:86:43:90:F2:80:56:D9:CE:A7:EC:E6:41:DE:20:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01636C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2B94A4E5BE611F09CC0949CDAE4EC9C.roa
Signing time: Tue 08 Jul 2025 10:32:46 +0000
ROA not before: Tue 08 Jul 2025 10:32:41 +0000
ROA not after: Wed 08 Jul 2026 10:32:41 +0000
asID: 132537
IP address blocks: 45.192.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90988 (0x1636c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 10:32:41 2025 GMT
Not After : Jul 8 10:32:41 2026 GMT
Subject: CN=686cf3ce-8506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:72:84:ce:00:ce:57:76:d0:3a:17:08:a1:
3b:70:5d:9e:e6:0b:ed:9b:3d:64:c6:15:45:0f:b7:
17:99:de:5c:5d:d2:22:fb:58:14:bb:e3:d6:b5:82:
13:dd:1f:3a:8e:b2:ae:72:48:a1:be:7f:ea:6e:2d:
2e:82:af:75:27:71:d4:a1:07:f8:78:c0:24:f8:ba:
4d:fe:04:fe:91:3b:71:db:f8:e0:62:8e:dd:56:1d:
c6:d8:b6:7f:59:05:2a:a0:36:c5:3d:c7:29:67:4e:
8e:8b:0f:d4:24:3c:9b:46:fb:75:f1:3d:fc:a7:32:
f4:83:d0:a1:03:3a:10:42:27:7e:9c:08:4a:bf:ca:
98:c2:32:17:e0:3c:03:4d:1a:91:b8:b6:0a:e3:6a:
73:84:db:02:12:31:7c:97:5e:64:62:11:18:85:54:
c8:5f:c5:74:70:fd:71:48:30:60:a9:26:25:15:d0:
61:10:e3:23:09:88:e4:41:75:d5:42:a1:24:03:e1:
c0:35:7f:5a:16:d3:89:1f:9f:84:30:89:55:a6:93:
3f:74:c3:04:1e:14:33:33:9b:80:26:81:86:dc:dc:
94:21:05:77:bb:c4:25:86:fd:02:34:ee:e9:22:6a:
c7:11:6d:7a:20:89:a0:b7:57:34:1b:d7:9d:b0:1f:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:20:BF:79:4F:86:43:90:F2:80:56:D9:CE:A7:EC:E6:41:DE:20:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2B94A4E5BE611F09CC0949CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.22.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:a5:da:aa:33:48:ee:aa:e8:ab:54:d9:26:da:6a:d7:e3:82:
7f:8b:03:fb:51:f3:ab:b6:95:b8:d4:5f:26:55:ec:a6:a7:5b:
27:72:7c:75:fb:73:65:93:04:64:b1:9b:03:bd:62:a1:41:aa:
3b:a9:33:5c:d0:fa:9b:90:f3:d8:6a:0f:de:3d:c6:54:ff:df:
74:bd:ac:a3:1a:82:97:35:04:0e:52:dc:34:e6:b1:fc:b3:ca:
c2:9c:14:15:cd:7c:2e:c9:80:60:5e:c4:87:dd:b5:b7:6f:07:
e2:bf:45:01:36:c1:7d:41:58:35:63:22:1c:52:fc:f0:2f:c8:
4d:58:19:ec:dd:a2:9e:33:8c:39:aa:e7:cd:5d:86:ed:65:2b:
be:1b:1d:65:90:5b:d6:8d:5e:1d:e0:51:6a:7d:69:15:1e:55:
97:bd:bb:ee:68:4d:eb:47:1a:65:bb:6a:ca:85:48:98:f2:1d:
31:d8:16:d5:cf:01:70:1c:cc:b9:38:00:2d:41:96:c0:8f:71:
28:53:34:0c:1d:21:cc:0b:19:e8:2c:95:ab:a8:c2:71:85:1a:
c5:83:d8:a3:78:85:ce:46:fd:d4:df:bc:aa:98:d5:38:56:10:
0a:c0:44:85:b7:85:3c:67:a3:35:0f:ee:4e:cc:54:8a:a4:62:
dd:89:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:29:48 2025 by rpki-client