Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/638BC12E315D11F09E0DFCC0DAE4EC9C.roa
File: 638BC12E315D11F09E0DFCC0DAE4EC9C.roa (raw, json)
Hash identifier: HrFHL0YJ46uUDvi743mAAwbIQUt2l/RFi+D2v4l9ABM=
Subject key identifier: 68:F2:80:70:B3:2A:47:8E:BA:01:58:F5:F3:59:06:6F:D3:A8:B8:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015477
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/638BC12E315D11F09E0DFCC0DAE4EC9C.roa
Signing time: Thu 15 May 2025 07:22:42 +0000
ROA not before: Thu 15 May 2025 07:22:38 +0000
ROA not after: Mon 30 Jun 2025 07:22:38 +0000
asID: 54600
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87159 (0x15477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 07:22:38 2025 GMT
Not After : Jun 30 07:22:38 2025 GMT
Subject: CN=68259642-5a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:b3:08:49:18:0f:18:b9:b7:cd:d4:d7:81:
70:a1:0d:37:d1:da:8b:4f:06:8d:fa:29:f3:eb:5d:
09:ba:03:08:60:4f:2c:13:41:92:df:04:a4:58:2e:
65:8b:a7:85:6d:11:8b:ec:a4:71:85:b0:9d:48:3f:
83:99:bb:dd:2e:00:e3:db:25:56:d2:03:72:22:64:
db:a9:c8:96:fa:d8:7d:f4:df:6d:9c:2a:4a:12:9d:
14:21:d3:65:fb:5c:70:29:4c:95:4f:34:b7:a4:17:
27:e2:6a:10:13:9b:a6:6d:bd:ce:15:b0:16:b8:8d:
0a:3c:65:d7:60:af:a2:6b:b3:35:c7:b6:cc:96:e6:
43:74:dd:50:be:3b:76:a7:48:aa:8f:36:a7:46:a4:
1a:31:e2:a4:15:aa:01:fd:a5:b6:e9:aa:15:d9:a1:
06:ac:79:78:04:5f:5d:f2:1e:64:70:c3:62:54:fa:
ba:ab:a3:13:0b:48:39:e5:44:72:c4:92:49:75:91:
cb:13:5d:e8:5a:08:59:ac:1f:c9:81:91:de:73:86:
56:a3:20:6b:1f:c2:d4:66:86:92:4f:87:90:8f:f6:
f6:eb:3c:29:25:4b:54:71:a9:3f:9f:5f:f8:f4:51:
c4:b9:15:e8:3d:9e:9c:4b:3f:f6:2b:e3:cc:64:1e:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F2:80:70:B3:2A:47:8E:BA:01:58:F5:F3:59:06:6F:D3:A8:B8:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/638BC12E315D11F09E0DFCC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
47:b8:6b:f8:3e:45:e0:5c:69:6e:af:f9:f2:cf:74:e6:ee:28:
74:dc:11:72:a7:cb:f4:de:dd:84:3a:27:99:76:66:69:ea:9c:
5d:12:ff:26:3b:00:a3:51:51:ee:24:51:4e:60:42:b8:55:8e:
7b:95:29:ac:01:9a:22:f4:08:19:fb:fd:6d:05:11:22:82:b1:
43:24:cc:88:2b:8e:41:6d:36:cb:da:66:df:e0:36:1d:11:c4:
3a:20:7b:8a:d8:6c:3b:71:da:65:0f:d1:2f:a1:66:a6:e5:c7:
cc:66:4f:2b:4f:ff:e3:c3:e7:00:ba:0c:86:a8:81:e8:40:f3:
54:d0:a7:8f:98:77:4b:22:cb:f2:f5:90:af:ac:8f:ad:0f:e2:
93:e4:83:3e:63:43:bc:41:2a:e2:d8:d1:76:89:0b:43:af:8a:
f4:6f:d2:26:52:50:9f:a8:07:d8:36:c7:13:32:89:86:f9:30:
ee:46:89:7e:7c:c7:ff:03:bf:1b:97:75:c7:1b:c1:ff:38:fc:
0a:71:d0:8c:bb:f6:6f:fb:8f:7a:7a:6e:9b:8b:1e:2b:f9:98:
01:b7:05:69:5e:11:c9:92:8f:55:7d:b9:0d:c7:81:9d:f3:64:
23:cc:cf:2b:e5:f3:12:97:f3:6e:6c:db:a1:de:08:35:c8:f8:
30:b4:9c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:52:36 2025 by rpki-client