Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43DAA31C4B7611F0B5935C91DAE4EC9C.roa
File: 43DAA31C4B7611F0B5935C91DAE4EC9C.roa (raw, json)
Hash identifier: DCPUSk3deLCL2iS78SM57hyp7O7pv8Lour8QfhB06D4=
Subject key identifier: 6B:5C:88:A6:92:8A:06:32:02:CC:65:28:31:4D:7A:77:6C:E2:48:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43DAA31C4B7611F0B5935C91DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 12:26:17 +0000
ROA not before: Tue 17 Jun 2025 12:26:10 +0000
ROA not after: Thu 24 Jul 2025 12:26:10 +0000
asID: 6079
IP address blocks: 45.203.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89246 (0x15c9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 12:26:10 2025 GMT
Not After : Jul 24 12:26:10 2025 GMT
Subject: CN=68515ee9-8e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:f6:9d:96:42:67:2d:f5:12:5c:cb:d5:af:
24:71:70:a3:21:98:d0:73:aa:7a:aa:1b:00:24:35:
c1:8d:ff:19:d2:1e:2a:bc:28:1c:c4:02:b8:2d:3e:
53:de:ad:ce:d8:c7:47:1c:1f:76:91:d9:55:5f:6d:
89:d4:4a:83:3d:5e:61:38:bf:25:b9:17:c6:64:f0:
4e:3b:38:4e:6c:99:d8:40:0b:2a:96:c9:83:4d:6d:
66:81:4e:d9:b5:d8:1d:9b:cb:59:2f:b1:32:73:a9:
35:d9:f5:59:3c:26:12:19:ad:f8:68:a1:2f:a9:24:
a4:74:05:0e:f6:3a:f4:1e:68:74:37:0e:65:91:f5:
a5:d0:1f:0c:f3:f8:ed:23:7c:fb:bf:21:54:10:46:
74:ce:9a:d4:24:6a:0e:f1:3f:63:69:3c:d6:d1:a4:
e0:c4:3f:86:3e:22:85:9f:3a:b1:0c:46:c6:dd:06:
ef:00:31:94:e8:8d:0b:74:64:96:13:1c:fb:87:cf:
22:0b:4f:21:f6:09:03:2d:c6:79:e0:d6:1b:fd:dd:
09:07:53:6f:45:89:82:f2:5b:25:e6:0b:ee:aa:c6:
b8:5d:d9:f2:cd:c5:ac:59:f7:ff:44:4f:c0:4c:17:
97:54:1b:74:3d:6b:28:7a:23:56:32:52:8f:55:63:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5C:88:A6:92:8A:06:32:02:CC:65:28:31:4D:7A:77:6C:E2:48:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43DAA31C4B7611F0B5935C91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.0.0/19
Signature Algorithm: sha256WithRSAEncryption
04:23:30:3e:fa:31:45:57:23:cb:0e:42:7d:9b:17:25:a7:3e:
7f:47:15:df:b6:89:70:53:37:23:f2:a3:e0:dc:bb:a1:20:32:
ec:19:86:24:38:1e:84:ec:79:1d:d2:7a:6b:6c:95:4d:19:00:
29:f8:f0:e6:bc:2c:24:a6:55:b2:4b:db:c5:f9:59:99:1f:c1:
33:f5:01:9b:6c:81:25:0e:99:48:c3:49:6f:7d:33:64:8b:04:
a2:33:d7:af:36:fd:ce:01:74:6a:83:b2:ff:fb:cc:00:c4:5f:
8e:9b:3c:0d:30:04:71:47:e1:3d:0e:d1:8d:b2:e0:42:34:a9:
67:b8:91:32:e4:7d:47:58:d9:12:7d:f5:53:07:48:44:a2:ea:
13:8d:13:e4:ed:4b:7f:0c:4c:87:e5:8d:1b:28:2c:ac:1a:c1:
6e:cf:b3:1a:bd:b7:6b:29:45:87:46:ed:10:d9:9c:4e:dd:68:
cf:c8:0b:1b:d6:59:62:a7:b5:db:76:93:a3:b1:f2:47:7a:7d:
10:79:50:7e:76:8f:de:28:f0:82:56:af:9d:9e:e7:7f:77:f2:
ad:82:74:f5:18:6e:db:92:60:58:7d:10:f0:05:d7:c5:e7:bd:
57:80:36:74:77:cf:e1:6c:66:b3:86:3e:cb:d6:91:a1:5f:40:
5c:f8:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:20:57 2025 by rpki-client