Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFA9F1945B1411F0970534C6DAE4EC9C.roa
File: FFA9F1945B1411F0970534C6DAE4EC9C.roa (raw, json)
Hash identifier: 2QGtu9bwbTJ0w1TNBkvovf1cKyIVtRnDIDumfQ1u3L4=
Subject key identifier: 46:41:2D:ED:C7:4E:5C:54:74:23:BA:A8:A6:91:DD:8C:06:7A:B3:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0162E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFA9F1945B1411F0970534C6DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 09:30:20 +0000
ROA not before: Mon 07 Jul 2025 09:30:15 +0000
ROA not after: Mon 08 Sep 2025 09:30:15 +0000
asID: 215691
IP address blocks: 45.198.54.0/24 maxlen: 24
45.198.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90856 (0x162e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 09:30:15 2025 GMT
Not After : Sep 8 09:30:15 2025 GMT
Subject: CN=686b93ac-9734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:c8:8b:98:ab:99:93:18:e4:87:4a:ae:c1:
ea:60:21:82:e7:b8:3d:5d:69:5f:09:36:2b:df:14:
a6:8d:d8:65:62:7d:38:79:ca:13:c5:96:60:da:28:
a2:0d:d0:f3:12:ec:08:e4:cb:db:67:b9:eb:10:09:
ef:5c:f1:7d:e9:ae:54:d9:e1:02:2e:98:f0:28:81:
3c:06:b6:7c:d8:e7:17:15:92:7b:57:d7:a5:a5:5a:
26:71:ef:a0:6c:e9:69:d8:4f:6d:8c:06:c8:7c:d3:
2a:bb:67:4c:a8:37:e1:1c:6b:a5:69:16:9c:8a:0c:
a1:70:2f:d6:d3:bc:37:72:5f:0b:c9:0f:05:69:cf:
a3:c2:37:d1:7d:e9:95:72:0a:18:0b:62:73:fd:72:
5e:4d:43:66:fe:f3:d6:3c:57:35:f5:15:52:07:90:
77:f4:84:5e:ba:49:39:87:c9:66:2a:87:99:02:26:
7f:c2:2d:e3:fa:06:3c:04:18:ec:05:de:5a:f7:73:
4a:99:f7:8a:59:27:ad:00:6c:2f:7a:48:26:1e:81:
57:a5:b4:b6:15:dd:51:45:7c:61:8c:9a:ff:15:9e:
c0:47:81:33:bb:0b:1f:f5:4d:ab:e5:74:2e:74:9e:
71:d4:f0:f6:fd:fa:f4:b9:a4:8d:bf:b2:fb:5e:68:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:41:2D:ED:C7:4E:5C:54:74:23:BA:A8:A6:91:DD:8C:06:7A:B3:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFA9F1945B1411F0970534C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.54.0/23
Signature Algorithm: sha256WithRSAEncryption
23:18:e4:5e:8f:b7:27:98:71:3d:63:d7:21:11:cc:9b:04:63:
a3:94:e5:15:cc:76:6c:c1:f7:0f:ba:e5:f5:dd:b3:04:86:bc:
48:49:9a:3f:58:6d:86:a1:da:2f:e9:af:48:21:15:de:b6:91:
5a:7b:e9:16:3b:99:41:03:2e:1a:1d:ff:f5:4d:7d:24:d3:89:
ec:2f:a0:2e:30:5f:e2:d6:09:da:d3:56:84:6a:49:e5:94:c8:
96:74:8b:e0:5a:c2:0b:4d:c6:2d:a4:07:31:97:31:8c:26:88:
72:9a:da:9f:d3:6c:1d:e1:49:5a:ba:6f:0f:d6:82:7d:84:20:
03:19:10:0f:65:00:55:a6:35:e7:43:85:58:79:e6:67:58:a5:
08:90:0a:87:82:94:ba:7c:23:63:57:5a:b4:72:b3:02:b8:74:
24:19:51:40:56:f7:1f:13:14:8e:01:e0:8c:4e:1e:6f:bc:8d:
90:75:8f:2a:23:ff:32:5b:06:7d:48:72:b2:41:00:e7:b9:f5:
7a:a4:a5:5a:31:3f:0c:6b:e1:6a:c2:e6:3f:43:be:59:3a:2c:
97:c9:0b:26:bf:63:96:97:83:97:b0:c1:7f:30:15:11:6c:72:
e8:f3:be:a9:9e:90:f3:e2:20:46:bf:63:1c:0f:d8:4e:f4:48:
0a:e4:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:34:05 2025 by rpki-client