Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C163970A3AE411F0B93F10C8DAE4EC9C.roa
File: C163970A3AE411F0B93F10C8DAE4EC9C.roa (raw, json)
Hash identifier: ZDn35BH9IyhBHCLQnij+OdU+uBN4FZMlrG65EDCljhE=
Subject key identifier: F0:A3:FD:EB:FF:DA:B6:4A:96:2F:8C:92:54:50:DA:30:CF:B4:72:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0157F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C163970A3AE411F0B93F10C8DAE4EC9C.roa
Signing time: Tue 27 May 2025 10:24:22 +0000
ROA not before: Tue 27 May 2025 10:24:18 +0000
ROA not after: Mon 30 Jun 2025 10:24:18 +0000
asID: 203020
IP address blocks: 45.201.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88053 (0x157f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 10:24:18 2025 GMT
Not After : Jun 30 10:24:18 2025 GMT
Subject: CN=683592d6-b18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:69:35:87:73:90:74:95:0b:90:a6:bc:98:
52:86:ec:ee:93:ba:4a:59:01:fd:ad:e0:ac:47:8c:
41:b0:c1:6b:74:cf:f6:f0:21:3f:31:3f:f1:3c:8e:
c2:8d:c2:b5:d3:fb:ad:ea:3d:13:28:65:1f:9d:06:
27:27:7f:bf:23:e3:bc:a9:37:a4:e1:7f:9d:50:3a:
2f:ac:1f:99:71:c8:b2:59:03:24:a3:39:c0:f0:2c:
1f:69:40:d1:f6:08:bb:ea:b5:f3:ee:d4:9f:55:c3:
40:e0:99:44:85:b7:ae:2c:3a:a8:75:22:68:78:53:
7a:9e:b3:d5:d6:ad:2c:f5:4f:96:00:57:fb:7c:ea:
77:fe:96:f7:0c:7d:35:67:42:7a:1b:b7:85:7f:e0:
a6:cf:9b:9e:82:5c:9e:c0:e5:2c:0c:03:bd:6b:4c:
cf:ba:a1:4d:27:fe:79:42:79:11:77:99:70:7d:bd:
73:49:8e:51:9a:46:7a:d9:ed:0c:0f:0b:3e:0f:47:
fc:95:77:c8:79:b3:72:b3:58:ae:6d:4b:08:5f:ef:
03:96:29:ad:7d:fd:4d:61:02:e2:02:4c:fb:bb:d4:
34:50:ea:7b:fa:b9:4f:2c:9e:c1:33:99:3c:52:44:
14:38:90:d3:43:ff:3a:f8:30:c5:23:be:5b:31:0a:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A3:FD:EB:FF:DA:B6:4A:96:2F:8C:92:54:50:DA:30:CF:B4:72:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C163970A3AE411F0B93F10C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.64.0/18
Signature Algorithm: sha256WithRSAEncryption
06:54:1c:2d:7e:72:20:e7:be:78:c6:05:43:46:c6:4b:73:e6:
21:4a:8a:e0:23:43:f1:b0:2f:96:c2:59:2d:64:ae:4d:a1:48:
91:ea:31:6e:12:e8:87:f6:e5:fe:92:42:a8:f3:8b:d1:d5:b7:
9b:aa:46:fa:fd:dc:df:56:b5:7b:30:95:a2:5c:0c:4e:f2:ad:
3c:fe:1c:0a:3b:0d:45:fb:02:b9:7f:b6:02:16:38:ce:59:95:
7c:92:ee:b9:e7:10:92:2b:78:37:57:82:83:71:72:cf:d3:77:
2a:25:7b:26:e0:13:49:f7:b9:e2:c1:36:26:dc:c5:cf:df:cf:
67:9f:6d:b2:ab:91:7f:07:82:5c:c3:62:7f:a9:01:8b:09:8c:
4f:1e:6e:d0:c7:d4:65:4b:3c:90:13:f9:04:0c:ed:bb:27:49:
ec:04:4f:c4:5b:23:c5:5a:e0:d1:39:03:a0:6d:b3:10:3a:7b:
93:74:60:fd:e7:b7:4f:d4:f9:4d:33:35:f7:23:fd:73:83:cf:
d9:b0:1d:7f:1b:4c:84:28:4d:ac:c1:69:b7:76:4f:00:d2:f6:
54:ab:1c:94:e2:da:2b:78:4a:8d:bf:76:25:2c:32:30:d9:80:
7a:ea:d4:87:67:27:00:61:92:11:c6:5a:0b:5e:60:20:88:1d:
15:31:70:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:35:08 2025 by rpki-client