Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2320A406315811F0994C409FDAE4EC9C.roa
File: 2320A406315811F0994C409FDAE4EC9C.roa (raw, json)
Hash identifier: Ro6rYrxAE9E9CcNYfKjSbVG7FQv4Yc2s5VesXAmweEQ=
Subject key identifier: 2D:8E:3D:A2:F6:20:FF:F4:A0:9D:9F:71:31:95:06:78:BC:79:A7:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01545C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2320A406315811F0994C409FDAE4EC9C.roa
Signing time: Thu 15 May 2025 06:45:07 +0000
ROA not before: Thu 15 May 2025 06:45:02 +0000
ROA not after: Sun 22 Jun 2025 06:45:02 +0000
asID: 19318
IP address blocks: 45.202.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87132 (0x1545c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 06:45:02 2025 GMT
Not After : Jun 22 06:45:02 2025 GMT
Subject: CN=68258d73-b435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:17:24:c9:ae:c5:ab:5d:ab:f6:fe:f1:85:
d6:06:43:a1:ed:ff:0a:74:86:37:25:fd:3d:4b:cf:
d5:cd:c4:17:8c:51:f6:07:b4:39:aa:9e:85:18:1b:
c9:ab:c1:dd:67:9a:6e:4d:0f:a0:d6:9e:f2:9d:ad:
b7:2b:9f:fa:12:68:13:0c:8c:98:70:3a:83:9a:60:
82:6e:58:17:2f:3f:5a:12:b3:e5:7a:a3:2f:bd:b9:
26:c9:c5:5c:de:0c:33:10:76:d0:cf:8f:c9:0a:0e:
27:1a:5e:85:ae:b6:87:f6:9c:00:f1:c7:80:65:3b:
58:8d:9c:5b:9e:76:41:2c:a7:67:74:4f:13:c4:f8:
13:54:4d:d3:0f:f1:a9:2d:d5:3e:78:cf:3a:9b:0e:
3e:cd:e9:f4:35:2c:8f:fe:78:a1:f1:d0:70:36:3d:
c0:d9:e9:e2:9a:2c:2c:f0:57:f6:10:4c:20:63:2f:
57:10:a1:ca:da:30:8a:c5:f2:ad:c5:64:c9:d1:fc:
78:e3:aa:88:d5:77:6e:19:0a:37:a8:34:23:86:fe:
8e:25:45:25:d5:87:7f:e2:9c:4c:a2:51:d6:aa:5e:
1e:92:19:cf:26:5f:6a:e0:65:3e:81:91:9e:f9:04:
7d:df:54:f5:df:9e:c2:b0:46:5c:54:b5:94:c4:84:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8E:3D:A2:F6:20:FF:F4:A0:9D:9F:71:31:95:06:78:BC:79:A7:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2320A406315811F0994C409FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:9e:18:af:c0:27:5b:90:53:af:31:c2:9a:5a:26:3d:22:02:
50:ff:8e:db:93:0e:db:9f:75:4a:8d:52:8b:58:e7:6d:5f:a3:
11:f1:21:ef:f9:de:6c:10:4f:67:8f:ea:ed:14:fa:5d:66:e8:
77:39:41:13:9e:9d:d2:8a:22:7a:07:00:cb:16:41:ce:69:d5:
19:a6:7e:18:a6:b7:ed:58:2b:af:15:15:d5:61:21:f1:bc:5d:
22:08:51:fc:1d:0e:5f:95:d7:14:98:3b:14:3b:a8:3f:fb:9a:
ae:fd:e0:d0:8f:de:9a:6a:d8:81:9a:78:5c:3b:fa:12:f1:ee:
fe:aa:7c:cd:d0:b7:c2:49:a9:af:a6:b3:d9:d6:57:0a:31:19:
37:e4:10:d6:11:52:73:1e:d5:79:53:b3:78:2b:5d:57:9e:c1:
d1:5e:dd:23:1b:86:7f:b8:87:77:1c:2f:7e:89:c2:e0:ad:ab:
e1:5e:30:4f:72:aa:19:ba:f5:ae:53:1e:ce:53:76:40:af:f0:
b7:5b:2a:2f:e2:66:95:ab:96:4c:40:1f:13:d3:11:9a:bd:d0:
1b:8b:0f:01:dd:32:a1:33:a3:2e:ff:a3:5d:9d:06:75:d8:6b:
28:3c:d4:86:99:c5:b2:06:c8:d9:b4:5b:3d:f3:ba:ad:0e:cf:
ae:a9:09:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:24:14 2025 by rpki-client