Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/07AE64BA2B1811F0AA4342CBDAE4EC9C.roa
File: 07AE64BA2B1811F0AA4342CBDAE4EC9C.roa (raw, json)
Hash identifier: dU6cKel2cdUqh9VS7xOSKrRo6JyZS0QgP3V5GFTnv/s=
Subject key identifier: 55:03:12:51:3B:CB:29:8B:29:80:E9:4B:B7:ED:D2:5E:71:45:5E:E1
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0523
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/07AE64BA2B1811F0AA4342CBDAE4EC9C.roa
Signing time: Wed 07 May 2025 07:51:06 +0000
ROA not before: Wed 07 May 2025 07:51:01 +0000
ROA not after: Tue 01 Dec 2026 07:51:01 +0000
asID: 213659
IP address blocks: 45.221.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: May 7 07:51:01 2025 GMT
Not After : Dec 1 07:51:01 2026 GMT
Subject: CN=681b10ea-9388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:63:91:3f:2e:e5:54:23:3d:ee:3f:30:a7:05:
cf:b8:8f:48:49:80:05:7c:5e:69:fc:75:28:16:75:
a8:c5:fd:9a:70:0c:a0:f2:90:96:91:dc:5c:96:18:
96:49:6a:8b:81:5b:02:d8:8e:7b:0c:9a:8c:95:9b:
ed:88:e7:63:2c:3a:76:21:62:b0:e8:a7:4d:0d:b0:
d2:6f:c5:7f:75:a0:b1:31:80:e9:ee:06:b9:62:a5:
49:c0:b6:b8:d0:9e:e5:65:87:d3:9f:47:8f:48:46:
98:35:65:d7:11:b8:1d:99:ca:47:7f:e7:60:aa:c7:
b5:01:eb:d7:a9:14:ae:08:a2:a7:8a:9d:f1:05:fb:
22:e4:83:21:6a:a4:62:0f:63:b1:5c:36:c4:1a:90:
bc:ba:58:8c:71:3c:b6:25:ba:cb:ec:0d:4e:68:f1:
03:5c:0e:f6:67:df:7d:72:a6:bf:f6:71:9c:97:55:
c8:6b:3d:8f:25:8c:ec:81:ee:d4:c4:07:f6:c7:ec:
a3:f0:ab:e1:d9:94:94:35:92:3a:1e:16:4b:51:8e:
78:ed:3a:90:c3:81:cd:99:c9:11:41:df:34:13:89:
15:40:ca:38:33:c3:d1:08:aa:ff:de:e4:a4:71:74:
97:49:b7:32:3f:2d:70:b6:0a:a7:13:2d:55:ba:06:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:03:12:51:3B:CB:29:8B:29:80:E9:4B:B7:ED:D2:5E:71:45:5E:E1
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/07AE64BA2B1811F0AA4342CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.65.0/24
Signature Algorithm: sha256WithRSAEncryption
19:3a:f6:fa:6c:29:9c:9e:6a:90:bf:bc:31:2b:d9:f4:58:2c:
d0:c0:cc:8c:97:79:d0:bf:01:91:16:f2:69:16:49:b5:bd:d0:
1d:77:e4:23:80:4d:62:f2:25:3e:50:ad:0a:68:b9:be:1f:ea:
3b:ef:2b:13:5a:bb:64:2d:b9:f8:4f:0f:1a:cf:67:a2:d9:5e:
8b:3f:9e:d2:9c:a8:95:16:d7:fa:51:3b:4b:20:72:5d:29:36:
2e:4f:6d:77:d3:05:4b:3b:6c:ae:af:f9:7c:c3:22:b7:90:7a:
f3:1c:90:d7:06:ec:fc:6c:db:9b:d7:4e:ae:bb:e1:ce:6b:ca:
1a:dd:97:d8:dd:d0:e2:0b:ae:e8:f4:33:19:12:08:52:c5:7d:
8a:a5:04:0c:8e:62:7f:b2:7c:c7:66:3b:ed:23:b9:9a:d1:23:
b5:25:01:72:76:d8:7b:a7:77:25:0e:19:45:1e:37:32:27:a3:
6d:3c:58:ca:f5:f9:46:cc:d1:b9:f3:5e:63:06:a7:84:6f:4e:
a3:1d:dc:28:a5:32:77:ee:06:c7:e2:83:32:25:7f:d0:6d:01:
d0:26:19:a0:21:fd:82:5c:e0:2c:e0:8b:6d:14:96:78:b7:75:
0b:db:0e:5e:3e:27:c1:94:03:5d:78:a0:39:1a:56:c3:8a:75:
4a:26:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:14:29 2025 by rpki-client