Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7859AE8318B11F09CE23FF3DAE4EC9C.roa
File: F7859AE8318B11F09CE23FF3DAE4EC9C.roa (raw, json)
Hash identifier: xDsGv4/xiiHOXdMDJU3z2I2WzAluENFplKS8YFt6H+w=
Subject key identifier: 92:FD:31:E5:76:41:7D:F5:DB:AA:0A:F3:EA:81:13:0A:AE:53:D0:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0154BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7859AE8318B11F09CE23FF3DAE4EC9C.roa
Signing time: Thu 15 May 2025 12:56:07 +0000
ROA not before: Thu 15 May 2025 12:56:02 +0000
ROA not after: Sun 15 Jun 2025 12:56:02 +0000
asID: 54801
IP address blocks: 45.202.8.0/24 maxlen: 24
45.202.9.0/24 maxlen: 24
45.202.10.0/24 maxlen: 24
45.202.11.0/24 maxlen: 24
45.202.63.0/24 maxlen: 24
45.204.1.0/24 maxlen: 24
45.204.64.0/24 maxlen: 24
45.204.71.0/24 maxlen: 24
45.207.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87229 (0x154bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 12:56:02 2025 GMT
Not After : Jun 15 12:56:02 2025 GMT
Subject: CN=6825e467-6ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:07:65:41:05:10:c7:ff:36:db:c6:b6:37:41:
1a:d4:b3:ca:ce:15:e8:cb:b3:73:a7:2c:2f:19:b9:
6b:4b:17:6b:f1:20:1d:18:c5:87:74:2e:e9:60:3a:
d0:a6:e3:02:66:ed:79:88:51:2c:a0:6d:ea:77:25:
e0:4a:c2:57:ca:1c:4d:11:72:65:5e:96:c6:b1:28:
16:0e:be:3f:b0:b9:61:ca:d3:9d:55:16:52:16:b8:
fb:56:f6:94:5f:d2:6b:f6:1c:7d:52:70:7a:7a:a4:
10:58:b7:f8:c9:d0:07:8d:13:39:0e:ca:06:e9:3a:
d0:b3:aa:65:3b:4e:46:90:b1:37:55:10:50:f0:48:
5d:a0:69:22:fe:af:41:11:03:10:2c:8c:8a:ec:1e:
a9:f6:7a:21:24:35:20:d1:83:57:fd:36:40:76:cd:
9b:fb:cb:8f:3b:8e:42:51:8f:18:0c:e7:58:f6:ac:
33:f7:fa:28:b1:89:5b:d9:09:8f:c5:96:16:6b:41:
d6:bd:e8:a3:78:b5:24:8f:5e:76:b0:f7:f7:a8:57:
6d:99:b1:97:00:07:20:7a:d4:70:7d:2a:e8:ba:90:
51:6e:43:b6:24:2b:72:13:75:1e:0c:b6:75:7b:38:
90:10:70:4b:91:55:99:e3:76:de:90:b2:84:ae:14:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FD:31:E5:76:41:7D:F5:DB:AA:0A:F3:EA:81:13:0A:AE:53:D0:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7859AE8318B11F09CE23FF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.8.0/22
45.202.63.0/24
45.204.1.0/24
45.204.64.0/24
45.204.71.0/24
45.207.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:76:03:7b:75:bc:2c:a6:bf:c2:ce:d5:bb:70:83:ed:10:d4:
13:16:52:3d:37:a7:ae:03:d7:26:c8:89:c8:f9:9a:a7:0d:1d:
17:17:37:ad:e9:4f:fc:ad:a2:e7:2b:e1:ef:9f:47:9c:13:a3:
01:c4:98:f3:cc:5f:39:2c:4f:3d:bf:85:a0:e0:47:bb:41:be:
95:0c:7e:b8:e5:82:92:f7:81:3c:49:2c:1a:5e:9c:98:98:9f:
68:a3:eb:48:d0:b2:02:ea:54:2e:f0:00:ff:73:74:0c:56:a5:
1f:2c:36:75:a2:41:cb:73:ce:3b:d3:89:c9:92:4a:9b:eb:be:
69:9c:83:a7:fe:9b:d9:c4:ef:f8:a2:4d:23:79:19:a0:46:ed:
1a:5b:95:4c:1d:f4:af:26:d6:85:1f:23:11:da:46:93:99:09:
29:19:1a:34:a3:4d:1f:20:e3:c0:47:b6:38:b4:53:14:51:2a:
a4:57:14:e2:6f:5f:b9:8d:89:de:6e:41:bd:ad:1f:01:19:30:
25:f9:e0:4c:0f:5c:fb:69:b3:88:de:55:13:5b:97:bf:e2:96:
f2:31:7f:2e:fa:65:78:e6:9d:9a:50:6e:e3:10:f5:a6:71:76:
b4:42:5a:5e:94:c1:64:38:72:4e:1e:82:a7:2a:16:1e:ac:45:
9c:f0:fe:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:26:38 2025 by rpki-client