Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72F5E940363B11F09DBD21CFDAE4EC9C.roa
File: 72F5E940363B11F09DBD21CFDAE4EC9C.roa (raw, json)
Hash identifier: xr/YNXgYeLDwk64tDuiOjPq4k9avqlPYkc6qpLk/gyU=
Subject key identifier: 26:85:06:36:6C:5E:E1:D2:52:3C:AA:77:DC:44:85:EE:B9:87:DE:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015669
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72F5E940363B11F09DBD21CFDAE4EC9C.roa
Signing time: Wed 21 May 2025 12:02:21 +0000
ROA not before: Wed 21 May 2025 12:02:16 +0000
ROA not after: Sun 08 Jun 2025 12:02:16 +0000
asID: 133661
IP address blocks: 45.206.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87657 (0x15669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 12:02:16 2025 GMT
Not After : Jun 8 12:02:16 2025 GMT
Subject: CN=682dc0cd-cf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:7c:a9:b5:3e:84:ea:aa:4c:94:4f:c1:d4:
35:7c:11:3f:2b:ca:65:39:47:a2:4e:78:f2:7f:f9:
79:0c:19:97:aa:f6:5a:39:a9:d8:cb:48:57:da:e4:
06:97:bd:c9:71:f8:1f:f8:bc:fe:14:af:d6:85:71:
8b:2c:e4:2a:f1:71:84:d0:37:8c:bf:de:07:ce:64:
5f:34:82:4e:3c:8a:97:73:cc:26:6a:31:1b:6f:82:
e9:83:86:7f:d4:09:e5:a4:50:38:42:09:71:41:b7:
5f:3e:ea:08:8f:23:e8:e6:40:7f:b4:fa:35:02:a5:
4e:11:61:ee:8f:06:6d:e9:c7:97:6e:3e:0d:76:55:
19:9a:3e:96:3a:dd:6d:b6:2b:98:e0:01:52:c1:7f:
78:01:56:b0:cf:d7:f0:75:6f:cd:d5:45:93:fc:2b:
6d:bc:03:44:25:1e:66:2f:ac:56:f7:ed:c9:76:40:
39:72:af:a7:c4:08:0b:d4:ba:42:ce:89:41:4e:6c:
78:cb:94:57:56:10:62:73:d8:b0:f0:ee:45:2b:7a:
a5:86:54:7c:32:23:97:15:ef:e5:c4:2b:41:81:bc:
c7:a0:8d:2c:2c:cf:ed:95:57:ed:c0:a9:2b:4f:f3:
02:f2:6d:b9:00:28:31:f7:9a:42:6a:43:fe:6c:53:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:85:06:36:6C:5E:E1:D2:52:3C:AA:77:DC:44:85:EE:B9:87:DE:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72F5E940363B11F09DBD21CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.192.0/18
Signature Algorithm: sha256WithRSAEncryption
66:d0:b5:62:0a:52:00:89:8c:11:cb:0e:59:57:02:f4:a2:98:
b9:cd:5e:a3:d8:23:1f:48:9c:18:52:45:c2:28:fe:0c:8f:79:
77:44:30:41:44:c8:ad:c9:af:1f:98:68:f7:52:89:54:69:0c:
29:a6:af:6e:9b:0a:e2:1d:f1:0f:75:c5:47:8c:64:c4:f3:a3:
6c:3e:e4:a3:21:f6:ca:5d:1a:69:a3:7e:d8:c0:b1:88:c0:73:
e5:af:00:c3:1e:b5:df:a7:94:86:20:a7:79:04:dd:b0:13:b1:
6c:b8:e7:dc:85:07:25:63:ed:41:de:e3:f3:ad:01:9e:a6:8a:
b4:42:e6:b1:ba:ee:56:5d:5c:72:8b:fa:fe:47:42:72:fc:67:
d3:a4:b0:a3:94:47:42:51:80:cf:f3:69:23:0c:bd:ec:61:7b:
9d:79:47:cc:54:73:b9:b1:d5:c7:5f:92:fa:ce:23:71:88:f7:
05:73:64:4b:2f:33:a3:28:0b:49:70:d2:1a:6c:50:cd:e0:66:
5d:ee:03:1c:c5:9a:95:e0:3f:bc:c1:f5:e4:4a:7a:47:ab:49:
a6:88:99:aa:da:cb:c6:44:61:70:53:2c:1b:53:7d:53:38:a0:
b3:a6:dd:de:01:79:8e:04:97:97:e7:c8:df:9a:54:75:eb:73:
25:e2:67:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:25:19 2025 by rpki-client