Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/411CDB643EE111F08F4F14B3DAE4EC9C.roa
File: 411CDB643EE111F08F4F14B3DAE4EC9C.roa (raw, json)
Hash identifier: 62JSXPtBHcgfELvjtTEnFm5lrVMoHC7uCzNSIR6bCzU=
Subject key identifier: 1B:DA:66:76:8D:80:49:B9:D8:F9:1E:F1:84:BC:D0:28:73:6F:31:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015954
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/411CDB643EE111F08F4F14B3DAE4EC9C.roa
Signing time: Sun 01 Jun 2025 12:09:23 +0000
ROA not before: Sun 01 Jun 2025 12:09:18 +0000
ROA not after: Sun 22 Jun 2025 12:09:18 +0000
asID: 401701
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88404 (0x15954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 1 12:09:18 2025 GMT
Not After : Jun 22 12:09:18 2025 GMT
Subject: CN=683c42f3-794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:26:97:e4:96:03:bb:8d:d5:83:59:0b:f9:
a1:97:ff:d3:86:27:94:53:38:a4:5a:a5:10:7a:ab:
1b:3f:77:18:23:02:6d:49:4a:8e:20:ca:b1:1a:bb:
43:07:7b:fc:0b:ab:53:3c:df:ad:b3:c9:c8:a6:7d:
51:d7:8e:f8:63:0e:c7:98:a2:04:17:37:99:e3:90:
51:9e:fb:69:eb:05:4b:02:ab:3c:01:ea:34:29:ac:
95:32:e5:15:45:59:f6:4a:25:70:41:4e:51:40:bf:
e1:92:b3:0a:db:e8:bc:4c:6b:69:dc:06:38:b5:ff:
c0:99:1d:6e:86:b2:6d:0d:f5:5b:05:4a:26:2f:12:
72:73:8d:f2:6c:7e:9e:29:05:63:e3:44:46:b1:0e:
95:8f:59:5f:50:91:2f:49:ec:fd:99:0e:5d:10:3f:
e1:77:a7:44:f7:25:2d:6e:11:e2:b2:68:9d:41:a2:
a2:93:7c:62:e4:52:ea:43:d1:3c:05:c1:45:76:13:
f1:71:dd:df:65:9e:a8:74:56:88:dd:83:a0:3d:86:
9c:8e:c0:33:3e:74:06:0f:45:0e:94:b3:41:b2:c0:
28:1f:8f:5a:8f:4c:87:b3:b5:4f:46:82:d1:ce:45:
ee:0d:4a:e1:60:32:30:75:07:b2:fe:7d:7e:36:c1:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DA:66:76:8D:80:49:B9:D8:F9:1E:F1:84:BC:D0:28:73:6F:31:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/411CDB643EE111F08F4F14B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
76:8f:14:9f:58:c0:a6:c7:fd:66:ce:c7:c3:00:df:a2:cf:ef:
dc:02:e3:24:5d:69:6d:ed:ca:1a:d8:96:b5:08:bc:e3:ea:49:
19:14:67:b1:c0:48:57:41:15:dd:b3:00:0c:f2:18:67:47:c4:
65:3b:87:4c:32:b7:8a:92:32:fb:77:60:31:ee:ea:f5:54:6f:
cb:a6:7a:73:aa:b3:62:60:8c:91:f9:78:40:86:d0:c6:1a:c9:
81:25:49:72:75:0a:91:aa:1f:12:de:ab:bf:0c:ae:3a:cb:a5:
1d:31:54:59:49:db:52:26:53:a4:9a:ab:25:35:04:51:b1:e5:
4c:e0:97:6e:98:ce:35:cb:a0:32:2f:83:45:c6:8f:f9:8d:fa:
46:ab:90:43:b2:55:0f:39:21:d2:9c:8f:86:d6:ac:81:95:33:
06:4f:6e:f0:f8:0e:6d:88:e7:9d:d0:a0:fb:56:db:4a:51:2b:
29:b8:51:24:e8:33:14:87:b5:c2:36:1e:f5:5c:63:f6:0f:ac:
ca:42:af:3a:81:ad:12:ed:20:88:db:02:b0:65:09:62:7f:5f:
74:ba:67:be:6b:af:23:4f:c6:23:e9:cb:43:52:47:4a:e7:f7:
b6:1d:b0:b7:01:e1:ee:b8:bf:54:38:31:fb:f2:df:d8:8c:1e:
43:a1:71:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:33:55 2025 by rpki-client