Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B98C7C0573C11F0948FF7B4DAE4EC9C.roa
File: 3B98C7C0573C11F0948FF7B4DAE4EC9C.roa (raw, json)
Hash identifier: 4Gb/GJ55Df+98U9UNmXBf9MTAMZ6tHxHq8+hG/CTsJU=
Subject key identifier: 3F:45:37:9D:C9:0C:A4:54:46:BE:C2:32:54:00:DE:2E:C8:4B:C7:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016012
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B98C7C0573C11F0948FF7B4DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 12:01:06 +0000
ROA not before: Wed 02 Jul 2025 12:01:01 +0000
ROA not after: Wed 23 Jul 2025 12:01:01 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90130 (0x16012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 12:01:01 2025 GMT
Not After : Jul 23 12:01:01 2025 GMT
Subject: CN=68651f82-5b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:e4:4e:4e:a6:76:6e:10:02:96:bc:0d:f4:
2f:05:de:ab:72:7f:9f:bd:d8:be:75:c5:93:7c:f7:
d9:8f:d0:c5:1f:09:81:30:1b:3c:77:b6:79:ad:3a:
f8:4d:7e:88:9e:74:2a:4d:65:90:35:b6:4e:56:9c:
5d:d1:bd:14:25:56:88:df:82:c7:2b:10:77:8a:73:
28:22:1c:96:f5:47:83:7b:93:72:8a:09:76:1c:04:
e1:2a:6b:56:f5:70:9f:76:ca:41:73:dd:c9:77:73:
38:4a:0f:2c:0f:1e:8e:a0:22:89:64:3f:0e:7f:42:
79:1e:07:d6:e4:0e:f5:9e:ab:df:0c:e0:d5:6e:9b:
d0:6e:a2:b5:c0:9b:5e:e8:8d:d5:89:a4:46:26:7c:
a9:11:c1:1e:e2:7c:89:95:6c:66:31:97:6c:c7:6a:
d4:de:c6:8d:c7:4f:ce:14:71:96:9c:f4:03:99:3d:
d2:1c:7d:c3:a0:a5:44:6d:8d:96:b8:38:df:94:3f:
5b:0d:ce:66:ab:e9:a2:30:6d:58:80:93:d7:e3:68:
c0:f3:c3:1c:d3:56:56:4c:58:d2:41:25:c6:f8:de:
14:e8:97:18:f2:d6:67:b6:4a:93:43:02:d7:87:89:
43:bb:37:35:34:72:b7:b0:ea:4c:62:7c:4c:c0:fe:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:45:37:9D:C9:0C:A4:54:46:BE:C2:32:54:00:DE:2E:C8:4B:C7:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B98C7C0573C11F0948FF7B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:df:2a:d8:96:1a:e2:e9:3d:45:ce:70:08:61:24:d9:d6:48:
66:d7:a9:36:92:23:57:7f:5f:73:06:42:77:26:1a:71:6e:2f:
a2:33:96:6a:c8:a9:85:d4:78:d1:0d:4e:85:87:79:49:bc:53:
b4:9d:bf:5e:1f:fa:77:bb:c6:e0:5f:67:a0:94:a0:63:c0:05:
4b:86:be:33:f4:39:19:a7:c4:14:d3:2e:58:f0:f2:4c:8e:6d:
ff:f7:d1:56:f4:54:53:f2:b1:2c:b2:bf:d5:1c:e2:58:0c:ca:
96:7f:30:ef:70:b8:bb:ea:8e:55:d6:a1:a1:c5:3c:42:1d:bd:
a9:5b:40:8e:f7:c7:99:c8:cd:ab:56:1d:b8:87:e3:2b:22:2b:
46:90:a9:73:33:f1:05:e1:ef:d6:ac:c6:56:00:8c:33:f8:7e:
03:14:b5:97:f0:ba:06:e4:d9:49:12:6b:24:a0:63:85:00:07:
63:9e:20:7b:5d:45:6d:ba:cb:04:b1:50:54:a6:a7:b4:8b:58:
2e:71:9e:ed:74:07:9d:3e:60:6a:70:44:ba:6d:2f:08:8e:c6:
04:44:7c:cc:22:bb:c8:07:ef:a5:72:2f:73:b9:12:f0:61:84:
dc:9f:57:b5:56:80:57:8b:8c:47:32:af:22:14:ce:2d:0f:80:
84:ba:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:04:16 2025 by rpki-client