Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/209B060A38AA11F0A6C378C1DAE4EC9C.roa
File: 209B060A38AA11F0A6C378C1DAE4EC9C.roa (raw, json)
Hash identifier: mpnkCUhKcELP9j2qwPQmZVCR3rsFZWWs9zshVs4UGeQ=
Subject key identifier: 15:F0:67:67:F3:4E:A4:FE:A3:C4:96:E8:3C:FD:B6:C2:2E:B6:8D:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015768
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/209B060A38AA11F0A6C378C1DAE4EC9C.roa
Signing time: Sat 24 May 2025 14:19:39 +0000
ROA not before: Sat 24 May 2025 14:19:35 +0000
ROA not after: Tue 01 Jul 2025 14:19:35 +0000
asID: 395793
IP address blocks: 45.192.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87912 (0x15768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 14:19:35 2025 GMT
Not After : Jul 1 14:19:35 2025 GMT
Subject: CN=6831d57b-8e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:bb:20:e3:c7:37:8a:5b:74:ce:c0:53:7d:
64:22:6f:dd:2f:17:fb:f3:2f:25:80:1f:67:08:06:
e0:bf:2a:73:af:11:b6:1d:d3:fe:fe:65:73:8a:10:
f7:97:fb:df:e6:c3:42:b1:50:90:40:b7:2b:65:cb:
48:98:b5:a7:3b:22:52:91:84:0a:50:4d:7c:2b:6e:
76:a8:f4:8a:ce:92:8c:22:37:bb:21:c4:40:f9:4e:
ad:56:59:b3:bf:50:be:27:83:32:2b:90:0d:f1:ea:
99:1f:e7:97:53:a9:00:a2:11:2b:cb:ed:59:03:fb:
63:00:a8:4a:d1:ee:20:08:e7:07:05:0f:d1:0b:7b:
01:60:49:0d:51:9e:4d:e3:56:0c:98:33:3c:85:fe:
66:a5:55:b3:b7:9e:51:2a:81:5b:2c:cb:d2:31:f4:
45:68:e0:cf:72:b8:79:66:13:f7:30:de:07:6d:e1:
2c:28:1f:e9:b1:0e:1b:77:ff:21:d7:6e:e7:db:87:
dd:e9:dc:c1:4c:6d:95:f2:8d:14:a9:f9:d4:85:91:
29:f5:84:3e:54:65:25:58:15:b4:d9:1a:7e:39:76:
a2:ce:e0:77:7f:f5:a8:73:11:98:4b:e1:b4:bf:35:
ca:69:ae:19:d9:b6:4e:f4:b2:12:71:cd:77:21:11:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F0:67:67:F3:4E:A4:FE:A3:C4:96:E8:3C:FD:B6:C2:2E:B6:8D:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/209B060A38AA11F0A6C378C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.112.0/24
Signature Algorithm: sha256WithRSAEncryption
46:df:2f:cb:5f:81:6d:db:d0:38:0f:73:2c:1e:d5:11:e6:20:
4e:09:c2:66:b3:0d:7e:9a:8f:fe:63:7f:99:dc:15:96:0f:38:
51:aa:6e:dc:c4:0f:1e:05:bf:bc:e8:7a:4f:dc:9b:4c:82:99:
76:9d:f3:e3:d0:46:a1:d6:6c:ad:1b:f8:2c:df:9c:49:9e:a2:
93:7b:a4:89:d8:89:7c:af:21:ee:8c:68:3f:64:b3:a6:10:0c:
c0:6b:80:40:8a:52:3d:54:23:30:e6:91:60:57:ea:ab:31:1e:
c1:e1:be:53:b7:de:95:7a:d4:c5:30:8a:53:c8:7c:08:5b:e9:
bf:c3:a8:74:48:30:bc:4c:8c:ad:cc:16:a7:22:fe:56:43:11:
44:b8:bf:fd:4e:16:90:f8:af:a0:31:b7:ba:8d:88:99:26:53:
a0:9e:49:d6:d7:cf:67:57:16:f0:75:16:6b:d4:76:d5:5f:88:
ae:45:4a:13:63:b5:c1:65:73:bf:1b:ec:a7:2b:66:12:97:28:
56:25:6b:45:49:61:33:df:63:f0:96:0f:92:a0:59:1a:6c:8d:
3f:b9:d3:08:ff:a8:42:08:5c:04:b0:02:bd:e1:04:4d:04:f5:
e2:13:ba:90:1e:34:6c:88:0f:cf:26:09:49:47:aa:f1:6e:d9:
87:8d:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 09:43:03 2025 by rpki-client