Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCC8AC84834611F0BABE839FDAE4EC9C.roa
File: CCC8AC84834611F0BABE839FDAE4EC9C.roa (raw, json)
Hash identifier: 6hYPLnOSXr30RBmf8XIUMfaLKhI9XgaUlJFmsWvyHtk=
Subject key identifier: 17:33:D1:D0:D3:F0:13:8A:AB:B4:B8:54:E8:5C:7B:2A:69:03:4A:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCC8AC84834611F0BABE839FDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 13:07:36 +0000
ROA not before: Wed 27 Aug 2025 13:07:31 +0000
ROA not after: Sun 05 Oct 2025 13:07:31 +0000
asID: 33182
IP address blocks: 45.192.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94643 (0x171b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 13:07:31 2025 GMT
Not After : Oct 5 13:07:31 2025 GMT
Subject: CN=68af0318-5171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:b4:7a:82:02:0a:3c:26:d2:31:12:4d:91:
a2:c4:9b:97:87:91:ec:b3:df:ad:79:1a:e2:77:71:
c4:6a:9a:f0:ab:70:b2:01:e4:29:25:e7:87:d0:ea:
9b:a4:41:50:40:f2:d1:cc:44:72:c4:86:ba:e9:62:
43:94:fb:b3:d5:aa:81:3f:7b:ba:5b:46:c8:55:cf:
3d:5e:92:9d:b6:73:46:5b:33:e8:56:d8:a0:3e:09:
7d:7c:67:fa:fa:56:e2:2d:f9:6c:fa:1a:eb:53:12:
a6:da:bd:62:fc:a9:b1:74:73:f3:6d:38:61:e3:ac:
79:c4:17:7e:1f:b5:9e:f1:06:57:c6:29:d3:5e:d0:
bd:c4:9e:5a:91:37:ed:42:58:3b:42:6d:66:6a:74:
40:86:1d:bc:41:57:17:2e:92:1c:da:7b:dd:1d:f1:
02:82:6f:d7:52:cb:1e:01:46:59:46:62:c4:bb:80:
68:95:3e:23:6e:a0:41:73:62:39:cd:2a:1e:cb:61:
7e:96:a2:8a:ee:19:b9:5e:90:f0:6d:c0:f9:47:aa:
54:77:9d:59:88:30:73:03:64:c6:75:6c:0e:57:3e:
b0:97:b7:d7:07:17:a1:db:27:c2:c4:3a:be:ce:79:
6d:1c:86:96:df:fd:cf:b3:79:6b:80:58:11:8d:39:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:33:D1:D0:D3:F0:13:8A:AB:B4:B8:54:E8:5C:7B:2A:69:03:4A:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCC8AC84834611F0BABE839FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:03:44:f4:14:d1:62:d7:94:02:65:e3:15:dd:5b:9b:77:8b:
20:80:61:90:91:8c:2a:a3:2c:36:de:52:a9:b0:1c:b3:28:25:
a0:7b:61:c5:e6:d5:0c:97:80:59:11:eb:28:a7:d8:b2:4c:ad:
59:2b:cf:81:35:48:98:81:82:2d:c8:cf:4b:d0:b0:1e:ea:c2:
75:2d:98:7f:ba:07:6a:a2:a6:08:6e:87:4f:7d:9d:73:a6:fd:
88:82:f9:60:af:e0:16:d1:64:88:63:06:64:4b:25:f3:b2:8e:
87:e7:9f:93:bc:7b:23:49:c0:4e:0f:ed:eb:cf:6f:69:db:63:
09:82:53:7c:9e:d7:c5:d0:78:53:cc:95:37:41:6f:58:8b:3e:
5f:96:b0:48:32:90:11:da:2b:b3:a4:11:18:79:3c:cb:0b:ab:
73:f6:a9:f6:5e:26:1f:76:77:a7:39:10:56:fd:e9:49:a8:08:
d1:b3:3b:12:61:50:d9:07:39:eb:43:93:cd:6a:72:52:0c:72:
cc:ac:68:af:0c:4c:74:80:e6:d5:c8:23:83:e9:3e:a4:e4:ea:
16:62:23:07:be:02:08:b0:0e:31:80:9f:8e:8b:fb:27:2a:cc:
bc:83:be:6d:ae:5b:cb:6d:18:da:a6:b8:32:77:09:ad:fb:21:
74:48:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:23:45 2025 by rpki-client