Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4287BCA5B0011F08C1353C4DAE4EC9C.roa
File: E4287BCA5B0011F08C1353C4DAE4EC9C.roa (raw, json)
Hash identifier: iWsJo07m7C5NXTfLIlSeMRFwcT61uRAvIfFCn4HBBjY=
Subject key identifier: 4D:38:01:49:24:A7:76:EC:97:B0:EF:98:3D:6C:7D:A5:BC:42:8F:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0162A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4287BCA5B0011F08C1353C4DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 07:06:24 +0000
ROA not before: Mon 07 Jul 2025 07:06:19 +0000
ROA not after: Thu 14 Aug 2025 07:06:19 +0000
asID: 147176
IP address blocks: 45.195.152.0/24 maxlen: 24
45.201.0.0/24 maxlen: 24
45.201.9.0/24 maxlen: 24
45.201.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90792 (0x162a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 07:06:19 2025 GMT
Not After : Aug 14 07:06:19 2025 GMT
Subject: CN=686b71f0-4973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:9b:02:00:11:ad:67:5e:2f:32:2c:c7:83:
ca:00:af:ce:b4:c5:58:97:ad:ee:ee:97:c3:16:59:
ba:67:d0:7a:f7:e6:31:fe:10:e6:ab:c6:c2:5e:47:
e8:01:51:f7:38:31:ff:d3:7f:aa:8c:e1:a2:d2:10:
29:f1:fc:12:35:62:42:c9:f0:b3:f9:e4:f4:8e:a1:
ad:c5:1f:77:3f:db:9c:b6:c3:0e:a9:b9:ac:63:ab:
66:a2:9a:25:17:c9:19:ea:ea:a5:d0:1f:8e:0b:7c:
70:03:f6:e7:8d:df:b7:f3:7a:98:3c:22:69:ff:6e:
fc:62:e5:ad:9d:f8:41:3c:b5:6d:81:47:13:bb:ca:
33:ef:6d:b1:4a:6a:45:40:91:e8:01:4e:aa:80:de:
46:2c:b7:86:fd:7a:29:93:3e:ed:0d:6f:10:be:21:
d1:4c:78:7b:a0:74:81:04:86:fb:8f:7a:95:7e:a1:
21:1c:48:94:68:af:7b:c1:52:ad:24:dc:00:45:8d:
b3:c7:39:a2:05:f7:29:c9:8f:c1:fc:3e:bf:77:2a:
1f:0e:11:40:bc:71:92:b3:2c:a9:ba:a1:c9:fe:37:
b5:7a:d6:85:3c:79:8b:68:17:f5:9b:7a:d2:15:28:
7e:65:15:e2:00:9f:37:f9:62:f3:59:a4:5d:a6:3c:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:38:01:49:24:A7:76:EC:97:B0:EF:98:3D:6C:7D:A5:BC:42:8F:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4287BCA5B0011F08C1353C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.152.0/24
45.201.0.0/24
45.201.9.0/24
45.201.27.0/24
Signature Algorithm: sha256WithRSAEncryption
31:51:08:af:53:c4:f8:23:ca:a8:cf:cf:95:08:10:d8:d7:d9:
e9:c2:7b:70:78:9a:13:2a:ba:f1:f1:60:ab:ed:a4:d5:46:42:
2b:17:d0:2e:5a:4a:0f:99:7f:1c:46:ca:e5:76:c3:a0:49:8d:
cf:f4:dd:b7:0a:1a:2e:72:cf:37:af:db:75:52:f3:dd:be:9c:
c7:09:04:80:97:ef:fb:6d:5e:13:67:ed:85:45:c0:fb:e8:38:
ed:be:a7:98:f7:4b:8e:0a:7b:4f:b0:4e:18:bc:de:56:8e:c7:
3b:f5:aa:8c:aa:a1:4a:50:24:9a:7e:ce:14:88:5c:10:10:77:
20:70:fa:07:64:cd:b1:67:e0:29:87:e8:33:5a:7a:c7:1a:f0:
b9:00:e3:01:cb:43:1b:23:1b:11:3c:9f:0d:df:f6:23:b8:eb:
f0:fb:a4:14:0d:3e:68:d2:c6:92:0b:d2:00:d3:69:63:96:b1:
74:31:4f:60:d8:fa:3e:2f:88:c8:b0:b5:6f:ea:1f:a9:d0:7e:
52:2b:83:14:47:97:93:cc:4b:7e:a7:83:37:6a:f9:92:51:84:
7e:3c:c5:b7:fc:81:a0:a9:16:bb:e9:37:52:6d:ee:a2:f1:3b:
dd:55:ee:21:3e:a0:ce:12:25:ff:98:d2:49:ac:65:82:55:95:
d0:8c:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:30:51 2025 by rpki-client