Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/BA8189F641F611F0BC5588C1DAE4EC9C.roa
File: BA8189F641F611F0BC5588C1DAE4EC9C.roa (raw, json)
Hash identifier: Hp6y0XK2aok+0EISee/Jw2jhjxKGvgWh7Lnu8NA6k54=
Subject key identifier: 4D:81:71:BC:AA:90:A1:0E:5C:BA:E2:95:A7:05:2C:86:FA:92:80:1D
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 054F
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/BA8189F641F611F0BC5588C1DAE4EC9C.roa
Signing time: Thu 05 Jun 2025 10:20:40 +0000
ROA not before: Thu 05 Jun 2025 10:20:35 +0000
ROA not after: Tue 13 Jan 2026 10:20:35 +0000
asID: 329007
IP address blocks: 45.221.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Jun 5 10:20:35 2025 GMT
Not After : Jan 13 10:20:35 2026 GMT
Subject: CN=68416f78-0dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:b1:d6:af:48:1e:79:4d:4f:04:03:63:04:
97:3a:31:18:45:da:0e:d2:34:17:ec:e4:3d:54:10:
cc:da:ea:56:25:a4:d9:7f:07:f6:d9:ec:07:92:71:
55:9b:ef:24:28:f2:6a:bb:c6:e9:97:68:4f:b8:bf:
d6:9e:c6:49:72:be:d7:69:ff:59:04:cf:a6:59:ef:
70:82:c2:f3:37:ef:3c:02:67:f1:7b:60:cb:37:62:
b2:f6:0b:a1:38:ec:95:cb:55:41:3b:40:43:30:8c:
88:90:21:ab:40:df:0b:a8:ad:84:0b:7c:3e:58:fc:
eb:b6:ce:0e:1c:77:ed:f5:b2:c9:d4:be:d9:60:54:
c5:85:1a:9f:3c:04:53:81:13:7e:ce:b9:2b:af:cf:
8b:28:fb:80:ea:1b:0c:69:58:e6:f7:2d:6f:f6:33:
59:cb:07:c0:56:34:b9:80:b0:38:02:50:b1:42:37:
51:23:8d:72:5a:74:a6:25:ac:62:0f:81:0a:01:83:
4d:79:0f:2d:92:37:a7:8e:92:97:e7:ab:dc:f0:14:
00:48:e3:53:3b:af:a6:c5:7b:a2:b6:60:10:93:2f:
ed:71:80:76:21:74:bd:52:4d:2f:6b:3f:29:10:cc:
cf:79:42:62:90:fe:2d:6b:52:8a:59:cd:29:fd:4e:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:81:71:BC:AA:90:A1:0E:5C:BA:E2:95:A7:05:2C:86:FA:92:80:1D
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/BA8189F641F611F0BC5588C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.71.0/24
Signature Algorithm: sha256WithRSAEncryption
50:91:31:b0:f3:7e:cd:80:9b:2c:50:d0:29:71:dd:b3:2d:33:
a5:7f:83:1d:e3:bc:ea:e4:0e:37:9b:28:17:82:f8:c4:20:3e:
6a:81:5b:6b:67:92:50:ae:5a:36:3f:d8:eb:5a:fd:ec:e0:38:
c8:90:12:e8:c3:da:1d:9f:99:37:3a:91:2c:14:98:be:8b:c5:
fe:24:55:20:7e:17:d0:9b:36:1d:72:97:05:61:a3:71:a9:6c:
7b:34:83:89:e6:21:0d:50:95:15:8c:76:c7:bc:41:57:df:be:
81:98:3c:1d:98:ba:52:4c:01:72:65:23:8b:00:40:27:9c:9a:
ee:d5:8a:8d:57:7e:1c:42:96:7d:26:87:d6:98:32:85:6d:06:
93:9c:9d:ab:5a:47:bc:5e:98:ed:a7:0e:3f:7a:c7:7b:1c:ad:
b6:40:05:20:91:45:63:b1:37:d5:6d:9c:c7:0a:04:d6:ea:ba:
4e:42:09:52:e5:ea:7e:68:3b:30:11:59:f9:d2:4b:8e:17:f1:
ca:e4:8e:bf:e0:50:95:65:d0:b0:0a:00:ad:b9:ee:29:5b:66:
2d:22:36:69:a4:ff:0f:3e:70:f6:32:0d:6e:c2:08:7e:f7:3e:
13:4e:b6:d6:ae:8c:16:56:8d:51:9f:2e:91:9f:39:d5:90:f0:
7f:dd:d0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:22:34 2025 by rpki-client