Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2FAB1142693A11F08297A2C6DAE4EC9C.roa
File: 2FAB1142693A11F08297A2C6DAE4EC9C.roa (raw, json)
Hash identifier: jb52+POniWVEIvVPeww/xXk5fMTGXQw9nxuvzLcD0TM=
Subject key identifier: E8:DA:09:E4:B6:C7:FC:F6:8D:A8:EB:F8:3B:02:F2:3D:D7:6D:B3:CD
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0903
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2FAB1142693A11F08297A2C6DAE4EC9C.roa
Signing time: Fri 25 Jul 2025 09:31:48 +0000
ROA not before: Fri 25 Jul 2025 09:31:43 +0000
ROA not after: Mon 31 Dec 2035 09:31:43 +0000
asID: 6079
IP address blocks: 165.49.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307 (0x903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 25 09:31:43 2025 GMT
Not After : Dec 31 09:31:43 2035 GMT
Subject: CN=68834f04-d082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:f4:74:65:38:bc:82:bc:07:ee:4a:27:9c:
fe:65:1f:ce:c4:e4:b9:94:ed:44:0e:de:68:0e:20:
89:40:3a:8d:94:7d:d5:35:aa:33:a2:1e:ae:48:65:
4c:59:ec:15:cb:ee:4d:13:dd:0f:95:a1:7f:0f:00:
38:ea:00:ea:d1:5e:e3:82:e3:03:12:34:8f:b8:00:
13:b4:7f:f2:f5:e5:41:5c:9a:6e:6a:db:6d:43:26:
cf:42:41:f8:e8:e2:77:b3:5a:76:f0:9c:dd:64:34:
0f:39:41:58:db:4f:55:42:01:bd:87:a9:d5:fa:10:
16:27:56:fa:44:ad:26:d9:0e:00:fe:a8:d1:a7:64:
a5:66:15:e6:ea:c3:60:68:86:44:d3:31:22:14:ce:
6b:47:92:9d:0d:c0:da:b2:2e:0e:0c:99:78:c0:bc:
cd:38:1a:e7:85:e9:6f:7e:0a:31:fe:90:e1:c4:a2:
0c:df:5a:5a:28:f7:ef:0a:b0:aa:bb:cc:02:72:eb:
9e:64:40:d3:f0:e0:0c:82:f9:57:4d:7c:c6:9b:3c:
d5:ee:00:7b:20:34:ba:d7:69:16:9e:2d:66:b5:d5:
89:30:b1:7c:1e:01:3b:f3:85:1a:fc:a7:13:32:41:
bb:00:44:c7:19:92:b0:ee:53:1f:fd:a5:82:3c:ac:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DA:09:E4:B6:C7:FC:F6:8D:A8:EB:F8:3B:02:F2:3D:D7:6D:B3:CD
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2FAB1142693A11F08297A2C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.66.0/24
Signature Algorithm: sha256WithRSAEncryption
33:98:8d:db:ba:4a:6c:88:1c:46:64:26:46:90:fd:0a:01:69:
98:64:e5:fc:96:a4:78:0e:73:5c:8b:fd:7a:c9:74:77:89:aa:
08:66:d7:08:6a:ff:93:c8:94:7c:0b:7b:7f:c1:2a:a1:ee:8b:
6c:c0:67:42:6f:7f:67:32:2e:ec:02:f2:5c:66:a8:78:07:7f:
7b:c1:a3:59:69:6d:5b:c9:99:90:05:4b:55:1d:92:2c:f6:73:
7a:bd:74:20:ac:05:88:64:00:75:bd:4f:a8:58:6b:e6:3c:26:
1e:ff:2f:08:10:c9:42:a9:a7:bf:e8:8f:5d:1b:1f:7b:9c:94:
62:5f:90:75:01:8f:c7:50:cf:15:45:9b:19:14:20:bc:2b:2d:
b6:f4:30:45:54:8c:fd:28:9d:fd:14:f9:d9:ac:f7:94:8e:62:
7a:a0:83:13:87:9b:03:e1:18:5b:6c:cf:e5:0a:76:e7:93:d4:
75:d8:9c:00:6d:11:02:66:7b:ef:ca:76:65:0d:5d:85:7a:9f:
1a:2b:f1:75:1f:27:7b:7f:fb:29:95:b6:9a:d7:30:57:4f:79:
fe:b8:47:b7:7a:e0:ae:30:7c:f6:75:0b:de:84:9b:c3:ce:13:
87:26:cb:f4:d7:80:94:30:02:87:06:81:b9:e0:06:6e:ad:ce:
cf:ab:f0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:57:02 2025 by rpki-client