Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF3A485A567111F0A754A391DAE4EC9C.roa
File: FF3A485A567111F0A754A391DAE4EC9C.roa (raw, json)
Hash identifier: 31oyZajRgQDVj7e+3Uiym9Ml/rUMFPhZBlp6CN9nZzI=
Subject key identifier: F6:A0:23:9C:C0:EF:1E:34:FB:5F:EF:15:B5:E3:2E:E0:09:0D:BF:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF3A485A567111F0A754A391DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 11:53:27 +0000
ROA not before: Tue 01 Jul 2025 11:53:18 +0000
ROA not after: Sat 30 Aug 2025 11:53:18 +0000
asID: 54600
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 23:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90080 (0x15fe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 11:53:18 2025 GMT
Not After : Aug 30 11:53:18 2025 GMT
Subject: CN=6863cc37-0d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a6:1c:eb:cd:3e:02:a0:da:12:56:e9:17:8c:
bd:47:76:65:c7:99:58:0d:49:0a:8d:4e:1f:77:27:
04:da:31:ca:03:dc:58:2f:da:46:05:6a:f6:4d:20:
b0:da:4d:0f:03:66:b0:c3:6c:be:e3:dd:aa:30:36:
99:df:6f:b7:98:04:fb:3c:24:af:19:e8:80:df:66:
1b:3c:79:7d:dd:37:8d:5f:bc:69:c7:62:87:b1:6b:
84:00:dc:05:83:aa:c0:e8:37:24:7c:ae:b4:e9:0f:
96:46:2a:f5:e6:b6:df:9b:ce:18:aa:44:48:5d:86:
cf:37:fa:7a:ce:a3:a5:38:51:af:02:45:28:16:87:
ea:b9:1c:e6:56:89:e7:19:7f:a2:f8:f6:58:0e:6f:
8a:46:2d:17:d5:ee:9d:60:f5:55:d8:6a:84:c2:0a:
c2:ef:a4:c8:b9:72:84:78:99:98:97:c1:d1:8b:20:
34:af:ab:04:6d:1d:3d:37:9e:45:8a:80:23:72:a9:
93:ed:48:57:b8:93:48:7f:99:f7:7a:3e:1f:2b:ce:
2a:29:5f:ea:18:76:7f:15:52:06:93:e0:0f:f1:8c:
4a:c9:32:b1:f9:89:aa:fe:c1:83:97:59:4e:43:00:
bd:f0:d7:b6:f2:c6:ee:3c:ed:05:48:6b:de:11:a5:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A0:23:9C:C0:EF:1E:34:FB:5F:EF:15:B5:E3:2E:E0:09:0D:BF:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF3A485A567111F0A754A391DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
43:cc:c0:3b:fa:a4:02:91:57:f2:9c:98:2c:5c:7b:fa:3d:cf:
b9:e4:61:2b:11:95:dc:d5:00:42:88:90:4f:b3:51:c4:c4:81:
ed:6e:ae:bf:58:79:d4:a1:1f:22:58:03:ba:53:7e:1a:00:be:
79:bb:70:f4:63:6b:f1:be:46:ef:98:0d:0d:69:88:bd:96:c2:
0f:ac:19:5c:08:ae:be:fa:52:e5:d9:0b:f6:37:6a:b0:29:27:
04:04:f2:29:ce:0c:9b:bd:6b:3e:35:70:8d:22:c5:3d:da:4f:
c0:58:3c:57:78:47:66:40:42:9f:04:b9:b1:11:1e:6c:dc:95:
fc:ab:1c:48:65:fb:a9:23:a2:be:06:c7:5d:fc:f0:24:24:ef:
7c:8d:74:07:cb:67:e8:53:1a:ee:b7:ab:a3:ea:d1:22:58:e2:
c4:0e:4e:ba:5f:75:22:ff:af:5a:52:75:e5:48:42:7d:72:e7:
03:a4:a9:f3:8b:e7:79:b6:e8:cf:69:64:5c:73:0a:25:4e:d7:
68:c1:e1:4d:74:46:fd:38:fb:a7:6f:13:6f:cb:4d:b6:be:9b:
72:23:dc:b3:f3:2b:81:e7:f3:24:e4:54:ae:7a:61:c4:6e:8b:
e7:59:ca:c5:0d:8c:6c:47:ef:d2:42:71:41:df:56:3f:c4:ef:
49:a2:7f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 02:33:44 2025 by rpki-client