Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B813274543911F0B81B489BDAE4EC9C.roa
File: 2B813274543911F0B81B489BDAE4EC9C.roa (raw, json)
Hash identifier: wp+zjdO5zpR0E+R3+uCsE7MWOn5jL0yM8G1NO9J4f7Q=
Subject key identifier: 0C:CE:BA:DF:3F:84:A8:F9:DD:7C:BC:EE:34:54:FC:AA:51:31:D2:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B813274543911F0B81B489BDAE4EC9C.roa
Signing time: Sat 28 Jun 2025 16:01:37 +0000
ROA not before: Sat 28 Jun 2025 16:01:32 +0000
ROA not after: Sun 03 Aug 2025 16:01:32 +0000
asID: 138995
IP address blocks: 45.192.167.0/24 maxlen: 24
45.192.169.0/24 maxlen: 24
45.192.208.0/24 maxlen: 24
45.192.209.0/24 maxlen: 24
45.192.210.0/24 maxlen: 24
45.192.211.0/24 maxlen: 24
45.192.212.0/24 maxlen: 24
45.192.213.0/24 maxlen: 24
45.192.214.0/24 maxlen: 24
45.192.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89937 (0x15f51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 16:01:32 2025 GMT
Not After : Aug 3 16:01:32 2025 GMT
Subject: CN=686011e1-9e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:31:87:64:33:47:81:d4:36:ae:99:99:d8:
a7:b4:59:48:76:24:03:67:f5:21:65:71:3b:53:96:
cb:a4:f7:ca:98:fa:76:b0:81:56:ba:a3:8f:75:f1:
61:87:37:2c:10:dc:d8:d9:41:00:ea:a1:28:13:6e:
24:2d:c2:1f:4e:90:c1:53:43:d7:0a:2d:a0:f5:ff:
fe:6a:22:36:06:f8:e9:ee:84:ad:86:2c:e1:8b:be:
f5:e0:c2:f0:e1:75:12:22:1a:68:06:ff:39:36:3d:
4b:bd:b4:da:11:c0:ff:18:e5:13:f2:4e:92:01:bb:
ad:e6:b0:81:03:2d:6c:0e:a1:99:19:56:e4:57:7f:
99:86:e9:7b:96:4a:5c:b5:8e:88:6b:a2:c4:9f:24:
48:c4:62:59:6c:fb:af:35:6e:7d:ca:15:87:d9:51:
93:34:8f:94:9a:bc:f5:20:8f:65:12:b9:8f:b6:c3:
99:4d:9b:18:30:22:ef:5d:20:dc:fa:93:30:46:65:
04:3e:31:d4:9f:a8:fb:31:66:85:71:2d:27:1c:46:
99:88:e7:98:4b:3b:7f:61:61:cd:9d:4c:fa:2f:5c:
ff:44:e5:d2:c1:55:36:bd:28:96:16:56:0a:8b:36:
81:23:28:bd:22:69:24:a4:06:28:56:d2:92:98:9b:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CE:BA:DF:3F:84:A8:F9:DD:7C:BC:EE:34:54:FC:AA:51:31:D2:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B813274543911F0B81B489BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.167.0/24
45.192.169.0/24
45.192.208.0/21
Signature Algorithm: sha256WithRSAEncryption
50:58:61:b0:25:e3:09:b3:8d:53:e0:ac:a0:8a:c9:7b:47:66:
90:a9:9c:a5:c0:b4:5a:8b:02:0b:1f:82:ab:35:d5:6a:d9:a6:
9c:75:ef:86:41:4f:ca:f4:f4:8f:3a:4c:6a:57:7b:3d:02:64:
e6:d1:b8:22:9a:b8:55:48:ec:3a:5c:84:52:c4:1f:ef:85:0a:
72:e9:93:d3:36:79:8f:3e:7f:00:48:03:92:5e:d9:4b:5b:6f:
6b:56:73:cf:96:f2:c8:f6:7f:96:ec:22:44:50:12:f5:a5:9c:
9f:f9:2c:67:78:70:d7:e3:66:0c:7c:e7:07:93:2d:ae:65:2d:
7b:76:ec:aa:6f:c3:47:6a:a4:b1:99:c2:71:97:3a:d8:17:4f:
db:27:6b:2c:7a:ad:97:8d:a1:62:87:cd:d9:70:cb:eb:55:47:
e4:d4:2c:dc:cf:1a:f6:c5:79:0d:43:84:4d:ed:50:20:f5:4b:
36:92:67:71:ec:06:66:85:ca:58:25:6e:46:cd:2a:74:5b:4c:
b5:0b:e5:80:26:78:91:42:f5:cf:e6:75:dc:a1:50:44:0f:df:
32:40:67:c3:65:3b:a6:a2:cb:76:6b:fc:d9:9d:35:eb:7d:4b:
7c:f7:c5:e4:bc:5d:dc:56:eb:76:28:8b:9d:40:8a:cf:68:87:
9c:2d:ce:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:35:49 2025 by rpki-client