Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01BA9D92469F11F0BD2F4C8ADAE4EC9C.roa
File: 01BA9D92469F11F0BD2F4C8ADAE4EC9C.roa (raw, json)
Hash identifier: 9/W9N8BTmSjgHzTAcb7V/DDyGRQW3WeZF6OTArqGwfE=
Subject key identifier: BD:C2:8D:24:61:B1:D4:AC:42:05:9F:DC:C5:3F:E6:43:69:7A:F4:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B3E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01BA9D92469F11F0BD2F4C8ADAE4EC9C.roa
Signing time: Wed 11 Jun 2025 08:35:19 +0000
ROA not before: Wed 11 Jun 2025 08:35:15 +0000
ROA not after: Fri 25 Jul 2025 08:35:15 +0000
asID: 140869
IP address blocks: 45.203.213.0/24 maxlen: 24
45.203.214.0/24 maxlen: 24
45.203.215.0/24 maxlen: 24
45.203.216.0/24 maxlen: 24
45.203.217.0/24 maxlen: 24
45.203.218.0/24 maxlen: 24
45.203.219.0/24 maxlen: 24
45.203.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88894 (0x15b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 08:35:15 2025 GMT
Not After : Jul 25 08:35:15 2025 GMT
Subject: CN=68493fc7-669d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:e2:19:a6:e1:d3:29:43:c7:32:74:7c:bc:
aa:29:28:2c:7e:04:04:5a:bd:21:37:0c:c2:e2:83:
8b:fc:3f:8e:e4:a7:e7:7c:fc:f0:9e:5c:16:a7:25:
48:28:bc:8b:b0:e6:7d:e5:6c:8d:24:6d:a3:6b:54:
6f:93:60:b8:4f:bb:78:3c:b3:d9:d7:30:11:86:c2:
ff:f7:ba:50:e1:fa:3b:dc:be:20:41:4d:31:ba:d3:
cf:6f:23:c8:b8:3b:ec:7b:c4:d6:ff:98:20:e6:cc:
bd:4b:ae:51:c9:b8:19:2a:c5:09:85:4a:56:89:40:
08:f8:51:c1:29:a4:e4:89:8c:0d:65:ab:68:07:84:
7e:2b:cc:fa:1a:aa:40:36:41:c0:6b:2d:6b:de:67:
61:a7:c4:90:f5:af:8d:9e:51:40:26:bf:d4:ae:2d:
44:fb:da:91:a9:68:0d:a6:d0:68:02:75:57:3b:99:
7c:b2:44:2d:63:19:f1:15:ad:de:7e:06:aa:6b:5e:
23:7d:31:d8:f3:41:e9:d4:63:a1:40:40:86:aa:e2:
d0:71:1d:ae:64:94:dd:00:54:89:ff:78:ab:b7:c7:
9d:3c:48:49:4c:c1:1c:41:00:07:7b:c1:63:4b:2a:
e3:67:de:23:be:0d:26:02:71:3f:f3:af:53:35:14:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C2:8D:24:61:B1:D4:AC:42:05:9F:DC:C5:3F:E6:43:69:7A:F4:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01BA9D92469F11F0BD2F4C8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.213.0-45.203.220.255
Signature Algorithm: sha256WithRSAEncryption
b9:c7:0d:78:42:ac:ef:85:29:d3:d5:2c:7e:9a:33:6a:47:74:
59:b8:df:17:83:01:b8:ec:41:cb:4c:10:23:2a:05:31:e4:cd:
c0:b0:9d:94:f9:90:4d:4f:9f:2b:5e:8b:97:c4:89:2a:88:70:
26:f0:6a:5f:c1:8c:74:84:57:c0:a3:06:a7:fc:91:3b:74:ba:
14:27:d9:0b:da:a1:62:0e:61:a5:37:bb:fe:cb:cb:70:e6:9c:
99:e1:12:9c:4a:cd:da:8d:d2:2f:0e:c0:a3:e8:da:66:d0:bc:
66:45:3b:32:8b:30:fa:33:f3:74:13:10:c0:d3:81:b5:a0:4e:
92:1e:70:fe:e1:86:51:d2:66:e9:42:78:53:6a:bd:98:71:08:
e0:ec:8c:59:39:fe:4d:33:56:71:bc:db:61:59:fb:4b:21:5a:
c3:da:07:87:72:a0:23:9c:d1:1f:37:21:ff:5a:1c:f5:ba:39:
f6:ca:16:6f:e1:ea:fd:4b:5e:27:b0:b0:d3:76:dd:4e:f0:5b:
8f:45:6b:6a:71:b2:52:7b:a7:a8:45:2b:11:d0:ad:95:37:f9:
95:0b:6c:41:60:ce:7c:72:51:19:42:38:8c:0c:90:04:46:f1:
39:48:2a:c5:23:0d:03:2f:93:3a:ef:23:9a:d6:57:f3:2f:29:
c3:e2:2f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:59:23 2025 by rpki-client