Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA0BC4AA62EA11F0BCFAE4AADAE4EC9C.roa
File: FA0BC4AA62EA11F0BCFAE4AADAE4EC9C.roa (raw, json)
Hash identifier: 8nk9ndDns3S8TFBLvxw6jPAqkwlLXvt/9KJ2m2OfI4Y=
Subject key identifier: 9E:94:F2:91:8E:1E:50:6F:90:31:0E:67:E0:6B:1C:C2:88:8E:C6:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA0BC4AA62EA11F0BCFAE4AADAE4EC9C.roa
Signing time: Thu 17 Jul 2025 08:49:41 +0000
ROA not before: Thu 17 Jul 2025 08:49:36 +0000
ROA not after: Fri 22 Aug 2025 08:49:36 +0000
asID: 142032
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91572 (0x165b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:49:36 2025 GMT
Not After : Aug 22 08:49:36 2025 GMT
Subject: CN=6878b925-6209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:38:42:f4:46:e9:4b:9a:8e:25:e9:50:78:e6:
dd:b2:40:76:ec:71:67:23:88:d2:c9:26:2a:00:97:
a9:3f:37:54:07:f3:e7:0b:bb:8b:9d:e0:00:94:a8:
74:f5:8e:99:a7:a6:29:23:cc:4b:2a:41:f9:dd:6c:
a6:03:9f:45:23:4b:01:08:41:35:02:71:30:58:12:
eb:33:c1:43:6d:d1:f5:02:b6:c5:d0:bc:46:5a:27:
a4:29:da:2e:bd:0b:c2:24:d9:ec:d2:bf:62:6a:d8:
f4:eb:a4:6e:96:a3:81:75:ec:6d:5a:05:32:57:12:
0d:51:ff:c4:66:e1:01:29:ed:79:5a:53:e6:f3:f1:
64:45:d6:ac:86:30:7c:7a:a3:67:ec:b6:6f:d7:00:
cd:86:28:30:44:96:b4:28:f7:60:a4:2c:4e:51:8e:
98:66:22:16:68:84:8d:70:d2:bb:53:12:3d:8b:3e:
09:61:00:ab:3c:dd:67:fb:b7:17:0b:ba:35:e5:ff:
bb:d3:5e:37:e7:81:47:8d:19:ec:e1:f1:8e:da:b9:
c8:f6:10:a6:96:c0:38:e4:86:ed:a5:e1:45:9d:59:
6a:89:ef:20:14:49:5e:d1:8a:1f:37:bc:a0:d7:42:
a6:e9:b3:0f:be:e8:df:ea:38:bb:5f:ff:72:45:57:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:94:F2:91:8E:1E:50:6F:90:31:0E:67:E0:6B:1C:C2:88:8E:C6:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA0BC4AA62EA11F0BCFAE4AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:fe:be:b9:43:e9:6d:96:cd:fd:41:f0:2f:3f:c6:63:61:39:
ea:dc:8d:dd:c8:4c:1e:ad:87:89:f7:88:43:ab:c4:15:89:47:
3d:27:d1:7e:90:3b:d0:73:02:bd:fe:e6:63:43:89:69:8d:37:
30:13:6f:43:84:93:26:39:d3:7f:31:9a:a8:66:12:7d:a7:60:
2f:aa:75:9a:92:37:5f:5b:62:85:38:02:bb:5a:8a:f7:e1:1a:
5e:12:9f:cd:ba:60:69:58:4a:e7:a7:64:c5:a6:5d:e5:06:78:
57:f4:7f:8a:ad:ce:ad:73:12:59:20:5a:8f:7b:1d:c7:38:65:
5e:68:f7:80:88:25:dc:f2:13:f9:0b:4c:6a:f8:a9:21:05:3b:
c2:2c:f0:09:4d:90:38:5d:d9:aa:7e:35:de:1c:56:dc:a1:1a:
15:d2:d8:cc:31:95:c4:1c:fb:1d:7f:e4:9a:6b:a1:3f:fc:1f:
c8:87:6d:00:74:08:f2:20:8d:2b:79:8e:8d:50:bb:d0:d1:99:
67:9e:4d:cc:37:b6:88:44:e8:53:28:53:63:4c:b5:05:51:6d:
ad:cc:95:46:70:7e:d3:26:23:ab:c2:3a:a6:01:08:d6:91:87:
f0:c6:3b:ec:c2:60:0c:cd:c3:bb:1f:60:3e:a8:6d:af:48:8b:
18:91:5d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:31:28 2025 by rpki-client