Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC98939E3E1F11F0B4DCCEC7DAE4EC9C.roa
File: CC98939E3E1F11F0B4DCCEC7DAE4EC9C.roa (raw, json)
Hash identifier: RgUYvw/Py/OtEexgdZ6/bjZAJowsLjT9/nT4HYTZSnQ=
Subject key identifier: F7:CE:62:C1:1F:D8:C7:7C:7F:22:EB:C4:EA:7B:F0:A0:F2:4A:99:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01590C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC98939E3E1F11F0B4DCCEC7DAE4EC9C.roa
Signing time: Sat 31 May 2025 13:04:35 +0000
ROA not before: Sat 31 May 2025 13:04:30 +0000
ROA not after: Thu 12 Jun 2025 13:04:30 +0000
asID: 40779
IP address blocks: 45.192.96.0/20 maxlen: 24
45.205.16.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88332 (0x1590c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 13:04:30 2025 GMT
Not After : Jun 12 13:04:30 2025 GMT
Subject: CN=683afe63-f8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1a:93:c4:5e:43:3a:24:14:a3:3c:cd:45:29:
2a:97:96:06:f9:b4:78:41:06:8a:97:5a:4b:72:29:
c0:c4:00:7e:ad:ac:28:01:e3:c9:3a:0d:c2:59:82:
a1:07:01:1d:e6:74:ae:d0:65:48:c1:e4:56:20:77:
7b:7b:44:e0:94:cc:98:e9:bc:85:ee:a3:67:18:e2:
51:4d:25:2a:64:04:f4:c7:a0:52:5a:ab:f9:3f:29:
ce:d2:53:f1:80:fa:ee:98:65:06:1b:26:9e:3b:be:
5b:62:6d:f9:98:28:38:36:88:31:29:8d:c1:4b:15:
63:98:92:62:e4:a1:b1:db:9c:1a:10:8b:5d:4c:04:
c0:c5:b4:60:e1:ec:c2:2c:39:4a:2c:35:22:28:48:
15:4c:ef:71:c8:f1:7c:49:b3:14:78:a3:ed:f9:29:
89:df:94:0f:1a:67:72:03:29:1b:b6:39:62:4d:a2:
50:f4:f2:de:f4:79:fc:a6:a3:e7:48:37:e6:46:5e:
d7:80:52:24:d6:3e:3f:c8:54:f9:f0:c4:e5:29:cb:
d2:4d:2c:24:e5:4f:f5:60:97:47:59:b9:89:9c:47:
a4:00:c9:93:36:8b:88:a5:9e:98:19:f4:03:c2:24:
45:98:cd:a2:49:55:e4:37:6c:f1:45:b8:8d:3a:c0:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CE:62:C1:1F:D8:C7:7C:7F:22:EB:C4:EA:7B:F0:A0:F2:4A:99:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC98939E3E1F11F0B4DCCEC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
70:5b:de:0e:d0:2c:79:67:74:bb:b2:4e:56:4a:59:43:1c:59:
5a:fb:96:8c:ea:62:9d:ff:6e:89:00:83:58:3e:8f:31:ee:12:
41:8e:fa:10:1b:4b:a9:72:94:09:3c:7f:fd:cc:98:25:40:a8:
44:e4:0c:1a:fa:cc:68:7c:84:47:6a:57:b3:b9:48:1c:bc:41:
03:90:69:e2:c7:29:42:b5:d4:b6:c0:95:ef:68:45:ce:58:10:
c3:21:d6:35:db:37:93:bb:f0:54:3b:84:c2:47:fc:d6:b4:f4:
4f:1a:63:6b:2d:b6:fd:59:2c:51:bb:69:b2:62:c8:78:62:64:
dc:35:50:e7:4e:fc:65:0d:2e:f6:df:3c:eb:fb:58:e8:9d:7a:
6b:ff:91:e6:73:bf:89:f9:e6:70:7b:02:6c:ea:e1:8f:77:60:
1c:e2:4a:d7:7b:6e:68:6b:e4:85:bc:54:62:35:f1:10:b0:52:
8a:b5:7a:55:60:63:0f:ce:83:5e:1a:5c:7c:81:f7:96:72:c0:
55:79:6a:f2:5b:e3:76:9c:0d:59:d6:02:c4:1b:4b:3a:6b:a4:
59:7d:60:a0:e7:ac:c8:14:90:e3:65:08:16:68:78:2a:e4:26:
bc:76:08:01:2d:aa:1c:f5:62:9c:24:b1:f6:9c:27:25:e4:16:
e3:c3:3d:d2
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAVkMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTMxMTMwNDMwWhcNMjUwNjEyMTMwNDMwWjAYMRYw
FAYDVQQDEw02ODNhZmU2My1mOGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8RqTxF5DOiQUozzNRSkql5YG+bR4QQaKl1pLcinAxAB+rawoAePJOg3C
WYKhBwEd5nSu0GVIweRWIHd7e0TglMyY6byF7qNnGOJRTSUqZAT0x6BSWqv5PynO
0lPxgPrumGUGGyaeO75bYm35mCg4NogxKY3BSxVjmJJi5KGx25waEItdTATAxbRg
4ezCLDlKLDUiKEgVTO9xyPF8SbMUeKPt+SmJ35QPGmdyAykbtjliTaJQ9PLe9Hn8
pqPnSDfmRl7XgFIk1j4/yFT58MTlKcvSTSwk5U/1YJdHWbmJnEekAMmTNouIpZ6Y
GfQDwiRFmM2iSVXkN2zxRbiNOsChuwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFPfO
YsEf2Md8fyLrxOp78KDySplUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQzk4OTM5RTNFMUYxMUYwQjREQ0NFQzdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQELcBgAwQELc0QAwQFLc/AMA0G
CSqGSIb3DQEBCwUAA4IBAQBwW94O0Cx5Z3S7sk5WSllDHFla+5aM6mKd/26JAINY
Po8x7hJBjvoQG0upcpQJPH/9zJglQKhE5Awa+sxofIRHalezuUgcvEEDkGnixylC
tdS2wJXvaEXOWBDDIdY12zeTu/BUO4TCR/zWtPRPGmNrLbb9WSxRu2myYsh4YmTc
NVDnTvxlDS723zzr+1jonXpr/5Hmc7+J+eZwewJs6uGPd2Ac4krXe25oa+SFvFRi
NfEQsFKKtXpVYGMPzoNeGlx8gfeWcsBVeWryW+N2nA1Z1gLEG0s6a6RZfWCg56zI
FJDjZQgWaHgq5Ca8dggBLaoc9WKcJLH2nCcl5Bbjwz3S
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:24:44 2025 by rpki-client