Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26632F0250DF11F08D7B46D5DAE4EC9C.roa
File: 26632F0250DF11F08D7B46D5DAE4EC9C.roa (raw, json)
Hash identifier: 6VvfKtihagEooaQ2khYo7VuEck+lR1pRILLW1Rl63MQ=
Subject key identifier: F5:0F:D9:64:AC:3C:37:83:A7:65:95:90:92:41:F2:02:BF:62:4A:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26632F0250DF11F08D7B46D5DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 09:39:40 +0000
ROA not before: Tue 24 Jun 2025 09:39:35 +0000
ROA not after: Thu 18 Sep 2025 09:39:35 +0000
asID: 140401
IP address blocks: 45.198.248.0/24 maxlen: 24
45.198.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89684 (0x15e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 09:39:35 2025 GMT
Not After : Sep 18 09:39:35 2025 GMT
Subject: CN=685a725c-198d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:70:3b:1e:d7:55:75:f4:ee:11:3b:08:4a:bb:
26:a9:f2:29:57:99:0d:f5:30:db:52:eb:7d:e3:e8:
d5:24:65:17:83:9b:62:52:b1:e9:78:e2:8e:94:65:
70:5d:1f:9e:de:39:ef:5a:ec:d4:91:cf:6f:6f:b2:
42:60:9e:0c:84:be:9f:31:2d:2f:df:d6:6a:b6:c6:
5b:10:08:5b:c7:f6:8d:f7:db:41:78:00:95:db:0b:
76:6a:db:7b:88:ca:a9:cd:a2:6b:3f:02:0b:b7:69:
7b:c1:de:3c:f1:4a:d3:f6:58:6d:5e:29:ae:c2:e2:
6c:6b:63:d9:47:8c:1d:d1:2f:17:8d:7e:43:b4:8b:
2d:78:b1:8e:6a:0e:5d:a2:49:47:0f:9c:34:a6:68:
49:16:51:fe:ca:5c:9c:b9:7a:fd:65:b4:3f:c4:c1:
8f:f5:7d:c8:e1:7b:c1:9d:ae:96:c2:3e:9d:3f:4d:
79:76:01:e0:5b:b6:56:21:6d:7a:86:14:f3:00:7b:
41:eb:b3:57:8f:29:18:cd:68:2d:ea:33:b9:f4:58:
77:2c:15:7d:9f:99:f3:02:d1:74:6f:2f:a1:f4:a8:
f0:b0:0c:c9:cc:75:c8:72:c9:91:23:db:7b:54:dd:
dd:29:ff:8a:3d:03:35:89:5b:1b:ed:0b:ae:36:4b:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0F:D9:64:AC:3C:37:83:A7:65:95:90:92:41:F2:02:BF:62:4A:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26632F0250DF11F08D7B46D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.248.0/23
Signature Algorithm: sha256WithRSAEncryption
32:d4:02:96:ea:79:18:02:b1:d1:47:f9:23:32:03:02:29:c6:
a5:b1:97:71:8c:b7:2f:91:a5:b9:19:18:d0:85:fc:0c:6e:d7:
d6:04:c1:ca:e5:ee:f4:1b:67:7a:b8:67:41:33:a6:4f:8f:23:
6e:e5:af:5d:e3:d3:40:16:aa:d8:a7:4f:26:95:01:1a:f4:b1:
ba:2e:b8:ac:61:da:ca:13:0e:b0:50:14:78:3a:b2:3f:10:ea:
c2:39:0c:3a:5a:4f:9e:f3:9d:26:8c:fc:5a:07:3c:00:ce:67:
1a:e5:80:7c:23:fd:39:8a:5b:f0:38:47:08:e9:8d:2f:a2:3f:
2c:0e:12:ec:5f:44:39:65:f0:52:b7:2d:8e:d3:96:92:a1:90:
35:7c:7e:09:b2:d9:e4:48:a3:4d:c2:a5:96:7f:14:dc:37:07:
17:fe:33:5f:ef:75:59:90:d9:8a:23:a4:8d:f8:a4:1a:5f:ba:
b7:84:f5:7b:86:d6:b8:9f:98:3a:b8:c5:bf:08:40:8e:79:86:
8c:5b:72:ac:4f:89:0e:9a:51:6a:31:83:50:f3:f6:65:d8:39:
67:b5:78:56:54:db:26:34:20:f3:f1:8c:65:5d:f6:03:8a:6a:
4d:c7:20:b8:d9:8b:ed:4a:13:a3:f3:a6:e2:91:0e:10:ec:92:
8d:e7:07:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:38:21 2025 by rpki-client