Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8E897EE370411F08097878DDAE4EC9C.roa
File: B8E897EE370411F08097878DDAE4EC9C.roa (raw, json)
Hash identifier: Z7DeFR54G5w/RHc+HfN6mosqxU0sQbhAFZWz7auNAi8=
Subject key identifier: 2A:F9:00:F6:26:0B:BA:21:9E:FA:52:9D:69:5F:BC:A6:3E:61:40:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015697
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8E897EE370411F08097878DDAE4EC9C.roa
Signing time: Thu 22 May 2025 12:03:07 +0000
ROA not before: Thu 22 May 2025 12:03:02 +0000
ROA not after: Thu 23 Apr 2026 12:03:02 +0000
asID: 133689
IP address blocks: 45.206.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87703 (0x15697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 12:03:02 2025 GMT
Not After : Apr 23 12:03:02 2026 GMT
Subject: CN=682f127b-2cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ed:ad:54:5d:24:7e:ea:b4:67:72:b2:e1:bc:
9b:01:a8:23:a1:a4:1c:dc:80:49:bc:33:0f:31:a4:
3d:4e:79:98:f9:f6:0d:c5:5d:3a:bd:73:34:f2:72:
c5:66:a1:1d:59:af:ae:3e:6c:ea:11:64:e8:b1:1e:
43:c0:0e:74:de:bf:2f:03:23:ad:c1:97:62:71:55:
2a:11:79:1b:b8:54:71:f3:48:da:f1:48:59:f9:42:
5d:c0:77:ca:75:1b:3b:7b:3b:53:2c:c6:3b:b2:4f:
4b:d3:30:6c:05:ca:24:0b:4e:65:f9:f0:84:f7:93:
d9:5d:ab:1b:de:15:40:9c:dd:77:45:55:da:85:39:
64:2a:6a:6c:c4:1a:e5:14:68:97:ff:1c:e7:8d:2d:
f9:51:10:bb:e0:4a:ff:1f:84:ce:77:18:1f:fa:b8:
97:38:33:24:24:12:07:f3:65:52:5b:40:3d:d2:79:
24:2f:8e:a7:2f:07:be:fb:29:79:f0:b9:2c:f5:df:
c2:f5:17:e8:16:b1:05:3e:f2:7a:e3:79:b5:18:ed:
8c:25:f8:1f:04:87:71:d0:23:57:11:c5:f3:c0:f8:
eb:7d:14:36:49:77:29:b6:7e:c7:2a:d3:dd:87:0a:
81:5d:4c:9d:fb:ff:23:81:ab:32:96:c7:8d:cb:db:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F9:00:F6:26:0B:BA:21:9E:FA:52:9D:69:5F:BC:A6:3E:61:40:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8E897EE370411F08097878DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.16.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ed:71:5e:d0:e7:03:d2:31:10:3a:de:85:6d:c6:12:d1:8c:
96:08:18:a8:b9:b1:d7:b7:83:70:c9:4b:71:60:dd:70:0a:3d:
51:24:d4:ab:56:b0:d0:7c:72:0b:6d:76:28:84:48:25:6b:fa:
b5:99:1e:8b:50:61:78:3d:4c:e2:74:ea:5c:c6:a5:e9:7c:ed:
d0:c0:79:f5:7c:aa:a2:13:96:fb:31:44:e8:39:af:9e:c3:48:
bc:3f:60:83:18:8b:5f:64:e1:02:c7:81:3a:4f:59:d0:b7:74:
7f:d3:9a:3c:39:ee:91:92:85:fa:6c:08:73:87:b1:d9:52:8d:
bd:66:bf:52:0d:b8:c7:2c:7e:71:20:6f:fa:a7:5f:c4:9a:db:
6d:31:60:2e:fb:bd:23:0d:85:aa:7e:cc:51:74:03:a8:9d:04:
1d:90:c1:37:cf:66:7a:94:38:c0:51:6c:40:cf:c8:d7:eb:14:
cd:21:6f:99:48:51:50:24:62:ec:e0:10:cc:d1:06:ad:e0:e9:
32:97:8d:4a:0e:97:5f:e3:b0:97:19:83:eb:1b:7e:8c:18:f5:
09:d1:e9:9f:96:f2:61:7c:af:51:88:7c:cb:ff:26:43:8f:b2:
b7:c1:70:8d:3d:d4:90:a4:de:df:ae:55:e2:f0:b6:01:1e:d7:
25:05:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:33:31 2025 by rpki-client