Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE3C2E2A58CB11F09E7896DEDAE4EC9C.roa
File: BE3C2E2A58CB11F09E7896DEDAE4EC9C.roa (raw, json)
Hash identifier: aFdZCaC2Gj6zFErS3Gz9FcF0gxtaJ+/U8QlJoHzguFE=
Subject key identifier: 3C:BD:74:95:02:41:76:33:40:43:73:8E:F8:66:61:8C:E0:87:CD:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE3C2E2A58CB11F09E7896DEDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 11:40:56 +0000
ROA not before: Fri 04 Jul 2025 11:40:50 +0000
ROA not after: Sun 10 Aug 2025 11:40:50 +0000
asID: 20473
IP address blocks: 45.196.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90360 (0x160f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 11:40:50 2025 GMT
Not After : Aug 10 11:40:50 2025 GMT
Subject: CN=6867bdc8-2850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:26:05:83:96:0e:4b:52:e2:5a:0e:8d:11:
df:88:17:2c:70:98:53:64:71:6f:9c:05:84:2e:2e:
f2:ce:55:2a:f1:21:a2:99:9a:57:30:4c:7a:a3:15:
e8:cb:73:12:13:76:ed:3a:6d:96:2b:41:f1:05:e2:
6a:51:c0:d2:c8:ba:4d:9c:6a:16:e4:1c:f9:a9:f5:
e0:d8:bf:e8:cc:1c:b5:8c:8b:60:00:f7:46:6a:8c:
d7:13:70:a4:32:1b:a0:4c:fd:d9:d3:9d:74:70:4a:
2d:23:db:66:e5:1d:f6:ae:df:2e:fb:4b:03:3c:5d:
5e:d6:50:2f:6b:9a:2e:eb:41:c3:6f:3e:7d:16:41:
3a:9e:d6:8a:10:13:6a:c9:22:ff:e0:11:77:a0:1c:
62:b1:19:3d:3f:9a:7f:4e:9b:11:50:b9:e2:bb:35:
63:9d:d5:6f:85:dc:ac:41:95:ce:d0:83:a3:87:96:
34:ef:93:dc:12:89:d8:d6:7a:d7:6e:95:f0:a1:84:
5c:50:59:ef:e8:b5:cc:b2:93:67:a2:08:75:d9:1b:
a0:8c:14:45:35:c4:66:0b:9b:82:98:91:b6:1f:38:
16:f3:92:54:40:bf:fb:84:01:de:50:fb:ba:85:6b:
35:a1:09:97:fc:d0:e7:72:ff:52:03:10:a5:55:cf:
78:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BD:74:95:02:41:76:33:40:43:73:8E:F8:66:61:8C:E0:87:CD:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE3C2E2A58CB11F09E7896DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.200.0/24
Signature Algorithm: sha256WithRSAEncryption
19:49:86:68:ff:2a:66:25:29:e8:a0:94:cb:95:e0:e7:0b:be:
1f:0d:dc:02:6e:50:39:48:6a:25:2e:92:d7:df:7f:a4:d1:52:
39:b3:c9:75:52:e3:5c:01:55:26:69:e7:a6:1b:c7:af:66:6d:
99:be:1c:fa:e2:43:c0:9c:3a:39:43:22:4a:72:6d:b0:25:a9:
03:94:e8:28:3b:cb:68:9c:b0:c1:34:48:6a:4c:71:20:ec:6b:
c6:ac:f0:41:d0:b4:f0:f9:7b:0f:f3:72:4f:bd:ba:f0:54:89:
41:d3:a4:0a:2c:31:06:d9:18:27:62:62:f7:1c:ca:57:67:af:
c0:04:e6:f0:71:3a:8c:de:e1:0c:12:5d:9e:bc:5f:44:65:95:
76:08:a6:fc:b0:30:f7:1c:f9:11:67:d4:e8:c6:05:e0:13:00:
44:b2:58:e0:13:a3:b2:e7:24:64:a6:81:58:2e:8c:66:3e:db:
ce:4b:03:85:e8:50:74:c9:f6:7c:20:8f:e5:3f:88:b6:69:ff:
ad:41:4f:9e:a9:7a:d7:a7:10:5d:a4:d6:29:0c:ed:fd:98:b0:
57:3f:b9:b7:a3:e3:0f:f1:86:26:5e:f4:f5:e6:78:20:71:72:
49:78:9b:3d:d2:ee:22:a1:ad:0a:0e:3e:1d:80:a0:2b:5d:26:
5f:a9:76:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:05:00 2025 by rpki-client