Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA197A28580511F098E307D3DAE4EC9C.roa
File: EA197A28580511F098E307D3DAE4EC9C.roa (raw, json)
Hash identifier: kL/z8IxEn/d5uRvwLeo00278pvsIEd4zphudZ9mf0Xk=
Subject key identifier: B5:D1:D0:13:F2:D9:1A:94:25:20:CA:97:49:06:D1:64:AA:BC:2F:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01606A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA197A28580511F098E307D3DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 12:04:48 +0000
ROA not before: Thu 03 Jul 2025 12:04:43 +0000
ROA not after: Mon 11 Aug 2025 12:04:43 +0000
asID: 203020
IP address blocks: 45.196.0.0/21 maxlen: 24
45.196.8.0/22 maxlen: 24
45.196.12.0/23 maxlen: 24
45.202.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90218 (0x1606a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 12:04:43 2025 GMT
Not After : Aug 11 12:04:43 2025 GMT
Subject: CN=686671e0-e7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:33:3d:a0:3d:dd:df:09:39:7a:a6:9e:0e:
b6:86:83:69:91:ff:fe:96:7b:11:b5:28:d0:9f:d0:
3a:08:80:c4:5b:89:79:62:ff:02:26:66:b2:95:95:
65:7d:e5:da:be:c6:0b:74:7f:c9:c3:24:33:ce:27:
bb:a9:5d:0f:59:28:bd:52:57:b8:e2:61:f0:c7:3f:
f8:06:24:fa:45:6a:cd:9a:5b:ed:78:3e:4a:a3:3a:
78:fa:a6:9b:19:b9:99:73:3e:4a:d6:24:c8:db:eb:
9f:9c:37:87:b9:72:e7:d2:9b:14:ce:fc:7f:5f:98:
e0:50:80:81:e8:59:b1:b2:3e:71:98:d2:11:c0:34:
b8:55:ec:ee:d6:9b:03:3e:de:7a:43:31:10:30:65:
ec:bf:19:d2:a8:31:86:05:ff:17:c5:2b:23:85:92:
5e:6b:ff:b7:fd:26:62:10:52:11:78:00:b5:86:fb:
54:aa:26:61:b1:e0:cb:e3:68:6e:38:2b:97:28:32:
85:bb:76:75:73:8d:6c:de:03:ab:af:aa:15:d0:b4:
61:fe:2c:a3:6c:3d:8a:f5:6b:4f:59:db:14:54:23:
a8:5b:b6:4f:0a:c6:e4:17:b1:cd:e4:3b:d7:4d:e0:
d1:62:34:9a:a4:96:29:e8:91:a5:72:b7:02:d6:1f:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D1:D0:13:F2:D9:1A:94:25:20:CA:97:49:06:D1:64:AA:BC:2F:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA197A28580511F098E307D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.0.0-45.196.13.255
45.202.46.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a9:ad:d3:34:c2:bc:63:05:e5:b7:77:44:96:c7:48:2c:59:
22:97:4f:5c:04:89:c7:02:95:d5:db:e9:d0:ca:8c:a8:f7:c4:
f8:24:db:df:53:b3:cf:e1:43:2c:f7:f7:d9:42:01:62:9c:1a:
27:4c:48:ca:1d:74:46:9e:f9:8d:5b:8b:55:d4:4a:38:bb:4c:
23:92:49:79:74:47:b7:8b:74:89:31:64:3f:d2:0b:a6:80:a3:
e6:fa:08:c4:e1:ad:58:63:8e:a3:d0:c9:01:c8:18:8c:aa:3e:
0a:0b:6e:90:dc:26:9f:99:5e:f7:5c:8b:45:fb:ad:db:38:4a:
1f:d1:30:4c:76:a8:cc:2b:eb:2b:62:6b:31:b3:cc:33:8b:74:
22:b0:69:72:1f:d6:43:cd:30:91:2f:f6:f1:16:a6:49:60:82:
55:99:36:ef:a4:ed:ed:e1:77:49:d5:35:1a:14:0f:7b:1b:e9:
ee:9d:e4:e1:70:d1:8e:8b:59:d2:ed:5c:85:51:15:0f:23:1b:
4b:81:20:2f:09:a1:65:53:8e:91:96:35:a5:60:00:a4:37:85:
f9:7e:a3:2f:d1:d8:cb:54:40:80:6a:d1:e0:b4:b8:38:cb:d4:
59:d1:5a:78:2b:cf:69:3b:c7:3e:5d:75:02:d8:ac:39:f2:13:
d9:aa:ee:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:58:00 2025 by rpki-client