Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/360C69F037C111F0838621D7DAE4EC9C.roa
File: 360C69F037C111F0838621D7DAE4EC9C.roa (raw, json)
Hash identifier: Z5ZsPTY1dZNRUlELEVVyIf4/MwYJxDBphN4Ak/FGU44=
Subject key identifier: 29:E8:67:BD:79:AB:FA:DB:11:6E:A9:6C:39:12:7C:21:5B:FF:85:41
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 053A
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/360C69F037C111F0838621D7DAE4EC9C.roa
Signing time: Fri 23 May 2025 10:32:23 +0000
ROA not before: Fri 23 May 2025 10:32:18 +0000
ROA not after: Sat 23 May 2026 10:32:18 +0000
asID: 9009
IP address blocks: 45.221.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1338 (0x53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: May 23 10:32:18 2025 GMT
Not After : May 23 10:32:18 2026 GMT
Subject: CN=68304eb7-58a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:fb:25:a7:5e:5d:ae:02:20:44:8a:2e:16:
46:6e:33:5b:15:30:90:8d:29:36:32:f7:fe:f6:e8:
e7:d5:1b:9e:08:74:81:83:7b:33:11:38:8b:02:e3:
2a:3c:59:e5:d0:1f:6e:47:02:72:92:07:20:8d:49:
8a:16:8e:86:27:c3:4a:1e:ed:40:cc:c6:1f:c6:e1:
93:6d:46:2a:7b:bd:65:68:3e:42:6b:e9:a0:5e:55:
e0:f5:22:c2:0b:dd:64:45:83:4d:fb:fb:68:8f:eb:
fe:53:8f:a3:fc:53:eb:8d:c2:ee:21:ca:bc:b2:14:
0b:a5:84:64:03:1a:e1:f7:5c:bc:4d:70:83:d4:a9:
57:b0:44:6e:8f:a9:4c:9e:e8:59:46:0a:f5:c2:f1:
22:34:35:3e:fb:8f:a8:84:4b:3f:d6:92:6e:72:bd:
ee:72:a6:62:0b:c4:7c:fe:c9:cc:7a:d4:79:cb:f6:
51:83:30:a4:7d:c6:06:ff:d6:46:0a:24:18:81:0f:
6d:1d:a8:20:9c:16:4c:75:5c:49:cc:e6:40:d7:9a:
d1:29:f5:f1:98:23:fe:34:65:7a:7e:d1:11:5f:d2:
51:31:b6:c1:5b:f1:82:86:a4:44:7b:a2:fd:9a:03:
83:5b:f0:9e:38:ab:9c:a5:30:5e:95:14:8f:5e:b0:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E8:67:BD:79:AB:FA:DB:11:6E:A9:6C:39:12:7C:21:5B:FF:85:41
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/360C69F037C111F0838621D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.71.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:70:59:21:22:86:01:5b:ed:8f:75:6d:e1:b6:31:be:54:41:
99:c8:e5:d0:eb:aa:fa:af:9b:51:66:dc:b9:31:a7:ad:86:c8:
09:af:20:e7:59:34:f3:33:58:3d:98:0d:f4:96:19:c5:e4:24:
7f:9f:4d:36:f1:b3:73:11:68:84:51:41:5b:d4:b2:1c:4b:e9:
89:03:1b:33:36:97:be:8a:28:16:2b:2d:df:b0:fe:eb:59:dd:
3a:c2:0a:e1:7e:9b:50:a6:80:66:8c:11:6a:74:16:55:0b:ce:
86:cc:f1:38:82:41:84:b2:aa:86:e4:43:bc:3d:62:c9:96:8d:
81:87:b4:c2:08:27:ae:9b:5d:a8:c2:00:5c:46:4f:09:a7:a9:
be:f8:4a:4a:7b:25:6e:76:ae:7b:b2:c6:bc:39:b4:77:83:60:
e3:0f:c5:84:e9:7e:d4:e1:bf:7d:eb:d0:e3:f6:63:cc:52:27:
eb:89:dc:c9:eb:b3:fd:e3:6e:8e:e9:c6:b2:26:60:05:81:87:
b4:88:4f:c7:65:96:07:b1:ef:68:d6:f1:0d:da:3f:b3:78:21:
45:90:e1:22:ac:05:f4:72:93:cf:69:8f:43:5c:26:84:c8:fd:
f2:f1:1f:5d:ad:66:7f:f4:db:a3:c0:48:3f:2e:54:b2:a5:84:
e2:af:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:13:07 2025 by rpki-client