Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A783D1F62B2111F0AE77A48CDAE4EC9C.roa
File: A783D1F62B2111F0AE77A48CDAE4EC9C.roa (raw, json)
Hash identifier: krXLVSIVMySZvprI/1+ITQdIkbo5A8kUXHzHcjrmqn8=
Subject key identifier: 10:59:AF:A7:10:F6:DE:9A:56:A6:FB:D7:3C:51:A3:61:79:1A:A2:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015278
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A783D1F62B2111F0AE77A48CDAE4EC9C.roa
Signing time: Wed 07 May 2025 09:00:00 +0000
ROA not before: Wed 07 May 2025 08:59:55 +0000
ROA not after: Thu 12 Jun 2025 08:59:55 +0000
asID: 51847
IP address blocks: 45.207.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86648 (0x15278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 08:59:55 2025 GMT
Not After : Jun 12 08:59:55 2025 GMT
Subject: CN=681b2110-c625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:a6:b1:d9:a0:17:d7:ce:69:66:6d:1e:cf:
0a:6e:65:56:4a:d4:f1:dc:b0:f5:4b:2a:ee:88:af:
63:9d:a0:d7:9a:50:89:b1:3e:61:2b:5b:1b:80:03:
a8:ec:74:3a:b2:a7:38:4b:80:5e:cd:6f:ba:63:7a:
5c:8e:f1:17:f8:46:ba:60:36:f8:be:b8:92:78:e4:
2e:15:08:1c:4d:ab:b4:f9:b1:14:54:77:3d:7f:80:
4c:95:ae:67:31:b6:52:51:33:7b:d9:4c:22:ce:43:
65:89:20:ed:26:9c:ed:65:9b:21:a3:0a:ab:ae:5e:
d1:15:8f:9b:30:e9:24:19:68:4a:98:95:0e:98:23:
52:65:f2:b4:eb:28:dd:79:9e:56:0a:79:09:b2:e0:
ad:f7:0f:fa:9e:27:3c:d1:8a:5c:38:43:60:d4:f7:
72:a4:90:53:d3:9a:59:bf:9a:6a:d1:84:ea:d3:6c:
99:70:c2:de:9b:a2:37:e3:3d:5c:d0:d7:32:4b:f0:
be:3b:25:e2:d3:8a:66:7a:5b:7b:ea:4b:a9:70:16:
19:ba:53:f8:c1:e4:43:58:62:97:a8:5e:44:a5:fd:
1f:7f:51:95:4a:6d:62:5c:f6:32:03:a2:cb:39:a8:
4b:7a:93:3c:e9:cf:e0:bb:c8:b7:d1:f6:61:c4:42:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:59:AF:A7:10:F6:DE:9A:56:A6:FB:D7:3C:51:A3:61:79:1A:A2:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A783D1F62B2111F0AE77A48CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
62:36:31:8b:9e:30:c2:c8:b9:0e:41:a1:4b:f8:cd:fd:6e:05:
23:76:75:1c:8f:45:00:51:e6:98:9b:47:96:28:ac:35:f2:8b:
5d:f4:74:a4:6a:8d:75:a6:e3:85:77:e1:28:8c:53:5d:8d:2e:
9c:0e:9b:5b:b0:6a:a4:99:6f:bf:20:7b:42:38:7a:c2:5b:b6:
46:08:97:a0:83:52:7a:19:2f:48:fd:e4:bd:81:6d:10:cb:49:
c4:dc:ad:f5:bc:b1:82:8f:2b:97:de:dd:cd:d8:04:b4:eb:a9:
70:26:4e:c6:90:b8:d2:af:11:67:bf:34:84:92:79:47:23:8c:
db:65:d7:09:30:98:40:a4:6e:dd:22:95:ba:98:65:d9:37:52:
95:5a:c4:66:84:b6:9d:95:4e:2e:bf:c1:32:d4:42:13:03:f5:
43:51:4d:95:e0:7c:28:ea:ba:36:73:a3:d7:76:ba:f0:b1:8e:
59:a1:c0:43:6e:f4:1c:1e:40:0a:5b:df:d4:d6:8b:51:98:48:
1d:23:04:e7:d8:8d:3b:c7:c5:41:53:a3:b0:68:4b:19:0a:0c:
04:6e:4e:2d:66:22:3b:bd:0a:13:aa:d1:a7:2e:95:c6:f5:fa:
8c:a3:6e:c2:31:33:4c:ec:fe:5d:7d:a2:a2:34:ab:22:09:57:
6f:90:ae:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:29:17 2025 by rpki-client