Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16E1FDB4565811F08BF9A3EADAE4EC9C.roa
File: 16E1FDB4565811F08BF9A3EADAE4EC9C.roa (raw, json)
Hash identifier: s4wSpSavcwYF6CUEbQ1wRahMedPmqOdHgSfA+3A1tHw=
Subject key identifier: 25:2E:55:FD:CC:32:02:2C:EF:9E:BC:92:3F:5E:30:AE:BD:5A:88:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FAD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16E1FDB4565811F08BF9A3EADAE4EC9C.roa
Signing time: Tue 01 Jul 2025 08:47:59 +0000
ROA not before: Tue 01 Jul 2025 08:47:55 +0000
ROA not after: Wed 09 Jul 2025 08:47:55 +0000
asID: 139805
IP address blocks: 45.195.84.0/24 maxlen: 24
45.195.85.0/24 maxlen: 24
45.195.86.0/24 maxlen: 24
45.195.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90029 (0x15fad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 08:47:55 2025 GMT
Not After : Jul 9 08:47:55 2025 GMT
Subject: CN=6863a0bf-edff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a6:74:98:4f:bd:fa:1b:87:f2:6c:21:41:bd:
72:93:0e:35:12:86:8e:80:fb:f3:9f:b8:4c:4c:10:
d3:f0:5f:a4:d8:fb:c8:ef:81:1a:4e:d1:b2:b3:2c:
6d:e8:3f:b8:3b:f6:a6:63:93:1a:fa:aa:74:0d:72:
68:43:c1:32:0a:b1:21:e5:c8:cf:df:75:c4:ed:82:
06:2f:35:87:16:57:c9:02:d0:2d:7d:15:d0:8c:97:
47:c3:be:e0:99:9a:e6:79:0e:da:e5:86:24:03:15:
cd:ce:2f:32:c2:2d:d2:4b:f7:21:cc:9c:2b:c2:70:
8f:ea:28:83:03:19:61:96:07:a9:0f:e9:f0:6a:cf:
a4:06:02:2e:69:a8:50:57:56:91:71:e8:b3:b1:c2:
a3:c5:f4:ae:1d:f7:1c:f8:32:e8:bc:71:1b:88:07:
3a:9f:5a:5b:94:ed:83:b1:c5:b1:2e:1a:60:56:c9:
89:c6:0f:77:10:0f:84:e2:c2:4c:34:05:43:bb:5a:
ca:c9:0b:e0:25:06:31:62:a1:e4:98:8e:f2:17:2b:
53:5a:2f:69:4f:65:eb:c9:71:1d:42:27:5a:c4:6a:
a0:bd:23:45:d7:11:0d:c1:4b:75:d3:e3:9e:90:14:
ad:75:f8:87:20:47:55:fb:67:52:55:8a:d8:84:c1:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2E:55:FD:CC:32:02:2C:EF:9E:BC:92:3F:5E:30:AE:BD:5A:88:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16E1FDB4565811F08BF9A3EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:08:38:3a:65:70:4e:74:c9:62:d9:44:2a:f5:c9:d0:ff:a3:
4f:4a:bb:d1:1b:a4:f8:bf:a6:e0:73:60:f2:21:11:e1:4d:33:
16:b3:bb:ce:33:9e:cc:df:bd:30:f8:68:ba:df:27:f1:fa:b8:
5b:56:8f:a3:a5:a6:e7:32:db:db:17:d3:2d:87:0d:54:78:8e:
28:31:f3:cc:36:9c:01:d1:bd:9c:9f:f8:64:45:4d:21:23:62:
bd:99:f2:37:66:87:44:99:21:14:53:20:07:cd:9d:43:a5:03:
2c:a0:a3:62:1d:17:54:6f:11:2c:ee:0a:bf:c5:df:b9:71:7c:
e9:fe:87:f7:65:19:df:31:1b:5a:cb:e8:06:16:18:6c:12:c9:
c1:23:8b:aa:89:c3:8b:66:7d:77:be:a8:44:4c:d1:bc:cd:dd:
cb:51:cd:bb:98:ba:12:58:83:db:b7:77:fe:1c:c9:e3:37:f4:
6d:56:7d:18:80:cd:44:0f:1f:8a:02:34:30:8d:8b:dc:c3:6f:
0c:04:ef:93:38:bd:7f:8e:75:a3:47:fc:7c:6f:87:3b:29:1c:
4c:fd:7b:91:ef:cd:29:48:83:de:02:52:86:99:a8:d2:92:1b:
d7:6d:7b:8a:4d:29:cd:e4:af:82:9d:2e:f7:ef:30:34:56:1c:
fe:60:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:33:15 2025 by rpki-client