Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCC79E3830CE11F089B21F82DAE4EC9C.roa
File: FCC79E3830CE11F089B21F82DAE4EC9C.roa (raw, json)
Hash identifier: CRKuy3my54/CU0HUrC2cZzfur6wneqkGWGGIrG4kL6w=
Subject key identifier: 55:6A:4C:EE:D8:2E:85:A1:2C:22:5F:66:E4:B9:FF:02:C2:B9:C0:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015450
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCC79E3830CE11F089B21F82DAE4EC9C.roa
Signing time: Wed 14 May 2025 14:23:21 +0000
ROA not before: Wed 14 May 2025 14:23:16 +0000
ROA not after: Sat 14 Jun 2025 14:23:16 +0000
asID: 214098
IP address blocks: 45.198.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87120 (0x15450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 14:23:16 2025 GMT
Not After : Jun 14 14:23:16 2025 GMT
Subject: CN=6824a759-faa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:34:47:8d:f3:f9:3f:a2:8c:0b:26:fc:47:
b8:72:4b:9d:2f:bb:4a:c0:97:65:e5:5d:f8:b5:50:
7c:12:ef:b4:12:3b:61:b1:e4:40:ff:60:63:91:3f:
31:2d:c7:4c:fc:12:1c:9a:26:1c:7e:7e:a5:24:05:
ca:49:dc:94:5d:4a:af:b6:00:75:73:5a:a1:04:76:
81:69:69:8f:ff:25:5c:c8:82:98:60:ef:88:32:27:
40:9c:1a:bc:49:99:62:59:9b:c2:78:d6:bd:c6:2b:
97:23:fb:16:af:11:9a:d5:62:0a:5c:f5:3a:d1:77:
5a:49:f6:4a:db:6a:ba:81:2a:3a:07:52:45:79:3d:
2f:6d:8b:b4:af:c7:4d:48:4c:f2:6a:cd:31:8d:4e:
66:04:60:1f:c4:5b:60:2c:fa:95:86:16:49:9f:f0:
86:ea:93:1a:ca:ca:bd:2b:14:c0:9f:83:30:00:2f:
8e:66:43:5b:c9:82:8f:40:a2:48:d5:99:82:73:ce:
d7:4a:f4:bb:18:da:40:40:75:69:06:0c:0a:9b:87:
3f:89:86:9a:c5:03:1d:2a:c4:d9:b3:e8:ec:67:b0:
da:ca:e1:c9:7f:82:a6:ad:e4:b4:0a:4d:18:54:b9:
fd:2b:d6:99:d9:2f:23:7b:79:df:33:20:dd:26:b5:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6A:4C:EE:D8:2E:85:A1:2C:22:5F:66:E4:B9:FF:02:C2:B9:C0:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCC79E3830CE11F089B21F82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.134.0/24
Signature Algorithm: sha256WithRSAEncryption
74:da:3d:9a:94:3e:19:d5:b3:9b:f5:6b:e5:49:c1:ce:56:85:
5d:cf:8f:c9:96:5a:fb:f5:88:6e:0d:62:69:8e:10:5a:65:04:
98:e1:e2:da:33:8f:76:4f:98:d7:b7:fc:77:dd:91:07:0a:61:
6f:85:44:92:49:03:22:ad:4a:73:09:c1:39:7b:5a:5b:17:46:
e0:7e:45:41:99:ab:59:e3:b0:23:d5:08:b7:16:d5:79:19:30:
fe:20:a7:87:01:d9:6d:19:60:c2:a8:89:ed:b3:2e:33:81:91:
97:24:77:7f:53:fa:83:25:8d:6b:5a:4b:58:43:20:30:69:2b:
09:7c:48:3e:a4:33:34:fa:eb:c1:6b:5a:bf:11:ce:6e:a2:1b:
15:1f:d6:e1:69:c5:6e:63:c7:5f:82:9e:be:18:82:c6:64:ff:
a0:c1:a0:e7:de:7c:2d:2e:54:6c:d6:46:2c:76:b6:0b:80:87:
d4:11:68:40:15:93:48:58:fd:ff:da:e7:fb:e1:0f:a1:47:dd:
af:f8:58:d1:19:93:ea:1c:e6:ea:84:bf:e8:04:e1:6a:71:78:
74:1d:ae:7e:47:58:a4:09:ea:97:24:5f:e4:74:7b:51:f4:f9:
43:52:e6:04:45:24:e1:bd:dd:d8:a1:68:a3:f3:e4:84:d6:b3:
f9:ab:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:51:29 2025 by rpki-client