Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3339E9E4543811F08C955D96DAE4EC9C.roa
File: 3339E9E4543811F08C955D96DAE4EC9C.roa (raw, json)
Hash identifier: nhQawHS9JjBm2Zqf3HfZwPUMxW9ogLpW4Piim17RFVk=
Subject key identifier: 73:D9:A4:F9:DC:C3:87:88:13:EA:B7:EB:C8:58:01:15:25:DE:AF:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3339E9E4543811F08C955D96DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 15:54:41 +0000
ROA not before: Sat 28 Jun 2025 15:54:36 +0000
ROA not after: Sun 03 Aug 2025 15:54:36 +0000
asID: 136744
IP address blocks: 45.194.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89935 (0x15f4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 15:54:36 2025 GMT
Not After : Aug 3 15:54:36 2025 GMT
Subject: CN=68601041-d979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:69:47:eb:c6:82:9c:b5:d2:cd:1b:4c:6f:
fe:95:01:1b:9c:6a:e9:51:9c:e1:5f:38:df:f6:32:
de:a8:bb:b2:47:60:e1:85:89:74:95:a5:1a:01:2d:
0d:6d:90:4d:82:c6:7d:f6:97:37:98:2f:34:ed:fa:
4f:f5:28:be:47:eb:a3:19:c3:26:30:0e:c8:92:84:
9f:67:7b:e7:b6:9b:cb:84:7c:d7:61:f2:cc:08:ba:
96:64:6d:1a:16:49:a2:11:d3:3e:83:61:b9:f2:85:
eb:f9:2f:45:22:52:c1:c8:0b:41:51:3f:9b:ad:4d:
c4:a5:3a:7f:e9:56:7f:ec:58:6f:2c:97:a7:ce:d0:
4e:a4:89:b7:dd:a6:04:8c:73:7f:8f:17:73:5f:d5:
2a:9c:07:30:1a:d5:09:2b:3d:c3:28:19:8f:2c:b7:
d4:22:59:1c:30:b8:09:37:af:08:5d:d5:ee:c8:9c:
5a:36:35:75:64:9e:e0:b9:b7:b6:fe:87:d6:aa:47:
e9:e7:e4:26:65:13:bc:35:cb:7f:db:7e:9b:1e:cd:
21:1c:eb:9a:e1:c1:f9:af:0b:4b:1e:85:15:53:d2:
6e:21:0e:74:58:4f:ee:d9:d9:71:75:95:9b:f6:f5:
04:e5:a5:ab:89:8c:20:ae:f8:0d:20:70:3e:0a:a8:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:A4:F9:DC:C3:87:88:13:EA:B7:EB:C8:58:01:15:25:DE:AF:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3339E9E4543811F08C955D96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.94.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c2:d1:80:7e:b8:ba:ed:4d:ad:f9:f4:ff:b2:e5:e3:64:1a:
0a:e5:87:ee:cc:45:af:9a:25:76:97:04:94:02:6b:61:69:f5:
02:80:33:a1:aa:84:d6:04:54:72:94:95:d1:fd:ab:a8:1d:38:
72:50:f2:eb:bd:63:3e:31:5b:29:49:07:69:c1:db:55:67:96:
35:38:83:8e:cf:99:ac:2d:7d:16:86:51:e9:7e:78:c1:cd:34:
c5:64:72:a5:61:3a:54:8d:97:69:6a:69:11:5c:9e:47:54:08:
da:dd:51:a9:37:1d:73:d5:98:1a:c9:d1:92:e8:3e:5d:01:92:
fb:51:40:f0:ae:46:a6:bc:5a:79:48:a2:85:d8:89:3f:fc:eb:
46:9e:e3:9c:04:e2:54:55:5e:a5:7a:44:26:7d:88:7c:e8:f2:
4d:93:d4:7d:17:ff:25:ce:fd:f1:c5:91:1a:40:b5:38:3d:e3:
fc:ab:37:90:a2:d7:63:6d:73:e2:be:06:56:02:1b:01:39:db:
fa:cd:af:6e:9a:24:87:47:c8:0e:f7:27:fa:43:15:cd:c0:de:
6a:34:93:dd:9f:33:29:cc:a7:2e:d6:4b:6e:ad:ee:2f:3d:96:
19:82:67:53:12:48:1a:94:a0:d4:1a:d1:47:d9:30:f5:e4:be:
8e:7d:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:09:06 2025 by rpki-client