Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA785DC8316611F0A0284A81DAE4EC9C.roa
File: FA785DC8316611F0A0284A81DAE4EC9C.roa (raw, json)
Hash identifier: VSl4/tvwyLPkWwbEEdoPpnRNtUhR1x6YPNYmAygjzxU=
Subject key identifier: FC:71:02:5B:60:8C:AF:51:DF:F9:2A:8F:83:8C:64:B4:9C:C6:E3:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015497
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA785DC8316611F0A0284A81DAE4EC9C.roa
Signing time: Thu 15 May 2025 08:31:21 +0000
ROA not before: Thu 15 May 2025 08:31:16 +0000
ROA not after: Tue 24 Jun 2025 08:31:16 +0000
asID: 57043
IP address blocks: 45.207.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87191 (0x15497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 08:31:16 2025 GMT
Not After : Jun 24 08:31:16 2025 GMT
Subject: CN=6825a659-b08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:d9:04:7f:98:a5:61:81:43:b5:e6:0f:e0:
55:d9:64:21:9a:83:1f:a4:9d:30:bf:35:f5:f3:47:
b1:24:2e:7c:81:48:69:f5:1b:ae:8d:f6:a6:3e:b8:
33:0e:45:70:b0:94:94:0c:02:e3:7f:2b:15:bf:e6:
70:af:26:cd:5e:c0:e8:52:65:cc:bd:08:99:a5:3e:
3f:c6:9c:f8:89:ec:da:9e:2e:cd:4a:c1:67:31:11:
d6:20:f6:f7:3d:9a:27:47:18:b7:01:9c:18:f2:d1:
b5:b5:35:5e:96:52:10:dd:e6:0f:70:43:57:7d:f7:
f8:bf:5d:f6:cd:56:a8:d8:12:b8:e4:b7:a5:9f:ee:
9f:78:4b:9c:57:d7:55:42:ba:d2:45:aa:bb:6f:23:
78:32:b6:46:44:43:c1:bf:fe:74:37:09:1c:3d:ae:
50:cf:df:87:9c:10:c1:20:26:60:4b:12:6e:cc:12:
2e:2f:4d:07:92:03:47:1b:0d:4a:6d:cf:c1:88:38:
4f:4f:7b:c0:15:e8:be:c1:7c:7a:4b:b0:7b:28:47:
de:7c:04:3a:0b:3e:18:d3:07:88:cf:e3:1c:e7:af:
c1:1b:18:82:9e:97:5e:b3:df:28:df:99:70:ee:d2:
87:1f:9c:10:2b:ba:6b:b4:83:b9:54:bb:a4:24:8d:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:71:02:5B:60:8C:AF:51:DF:F9:2A:8F:83:8C:64:B4:9C:C6:E3:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA785DC8316611F0A0284A81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.167.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ab:1f:de:a1:b1:2d:c6:bf:4b:21:4d:e2:03:f7:b3:46:ba:
77:f3:6b:bc:35:d6:21:f3:02:5c:f1:33:c6:45:a8:a1:a4:65:
d1:3e:f5:9a:d7:af:ed:fb:9e:55:21:44:ee:cb:87:3d:4d:00:
d5:bd:4b:45:0e:cf:44:0a:90:77:80:28:6d:a6:4c:e6:a9:74:
ee:f5:ec:4a:1f:78:a8:df:2e:16:1e:88:9f:3a:25:b9:6d:7b:
7d:23:c0:90:ca:9d:bb:48:9c:11:8c:91:99:bc:d9:c8:e8:13:
70:a9:5e:4e:ea:f1:8d:72:4f:35:c9:fb:c6:15:c6:d7:12:67:
7f:cf:fa:e8:35:18:a7:94:93:8f:af:bc:f4:10:97:30:9e:f4:
c0:7c:84:10:56:bc:21:6b:51:4a:81:68:78:bc:77:d3:d6:05:
0d:de:ae:4c:01:02:05:88:d2:e3:8b:21:85:3e:82:0d:e1:fd:
d9:4a:3d:0e:96:af:22:b8:36:3d:66:e7:c7:1e:59:73:33:f6:
4a:c5:06:76:38:e0:82:48:cc:9c:2e:31:37:54:e6:fa:3a:aa:
31:41:f5:68:3e:b1:49:66:7b:f0:42:c6:57:20:7a:8b:26:aa:
ff:d3:e5:66:9e:67:0f:ad:cd:e2:66:b2:d3:b5:70:aa:71:c9:
1c:47:de:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:56:25 2025 by rpki-client