Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47D43946527A11F09BEB68C6DAE4EC9C.roa
File: 47D43946527A11F09BEB68C6DAE4EC9C.roa (raw, json)
Hash identifier: eRal6cU92E7B9p10CmH0HgOxoKjCw88C8p4zVwyd2JM=
Subject key identifier: 33:21:D7:C2:8F:D9:60:D5:88:24:41:6A:DF:0E:3B:7F:36:A5:2D:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015EE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47D43946527A11F09BEB68C6DAE4EC9C.roa
Signing time: Thu 26 Jun 2025 10:42:40 +0000
ROA not before: Thu 26 Jun 2025 10:42:34 +0000
ROA not after: Thu 03 Jul 2025 10:42:34 +0000
asID: 133929
IP address blocks: 45.200.104.0/22 maxlen: 24
45.200.104.0/23 maxlen: 24
45.200.104.0/24 maxlen: 24
45.200.105.0/24 maxlen: 24
45.200.106.0/23 maxlen: 24
45.200.106.0/24 maxlen: 24
45.200.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89833 (0x15ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 10:42:34 2025 GMT
Not After : Jul 3 10:42:34 2025 GMT
Subject: CN=685d2420-ed4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:ba:1b:f0:14:93:3d:4b:10:3b:5b:8e:2e:
56:6b:38:c6:69:47:13:33:e5:5f:5e:65:e0:99:5a:
95:69:cf:1f:ac:03:37:0e:22:02:6c:37:d2:8c:21:
d0:10:7c:5c:7a:3f:ec:70:98:3b:2f:83:b1:da:2c:
78:af:fe:b5:9b:50:bf:ca:89:fd:23:c9:df:bb:22:
fb:d6:19:4b:87:19:cc:93:20:bf:bd:cf:ec:a9:fb:
62:93:b8:bd:4b:54:71:78:aa:94:84:1f:41:c1:36:
ac:db:00:17:ce:f1:b1:f4:57:eb:50:d7:c0:f6:cf:
5b:7c:2f:52:f9:1d:9f:e5:f5:eb:98:4a:b2:9b:1d:
64:64:13:0f:32:e4:f8:df:22:ce:58:ee:97:d2:50:
aa:c4:b1:ec:b9:c5:60:9b:e0:57:30:47:0d:6a:fd:
c2:d0:12:e2:ea:c5:31:20:0c:73:a5:4b:8b:ab:81:
2d:47:80:fd:09:0c:68:7e:64:e7:4b:1a:fe:6b:b9:
a1:e4:22:21:b3:23:72:2a:a4:7a:be:f8:7f:d4:e4:
27:3a:4d:b6:7c:b4:c0:3e:97:16:e7:a9:16:14:5a:
2f:b9:ab:36:43:71:c1:16:8b:ec:61:b3:8a:2a:c6:
69:c9:80:ca:df:91:a2:b1:92:ce:1e:95:b8:17:b1:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:D7:C2:8F:D9:60:D5:88:24:41:6A:DF:0E:3B:7F:36:A5:2D:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47D43946527A11F09BEB68C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:93:37:40:df:84:c4:fc:bf:41:59:9a:f4:b7:fe:0a:d4:d9:
51:37:87:33:4c:c9:b6:ea:ca:35:a1:66:56:84:8b:8c:e5:9d:
23:8b:e8:07:9b:03:eb:d6:48:0b:64:98:b0:fb:d3:fb:c6:1e:
b8:2f:82:15:bd:68:eb:54:04:2c:05:69:01:18:1c:cb:96:69:
b4:b8:01:e1:69:82:25:36:f0:7b:e1:a8:76:1c:ed:ea:5c:8d:
10:c6:48:96:fd:0e:ad:d6:2e:c2:97:d7:f8:5f:a5:6c:fa:00:
fb:c8:22:36:a2:d0:2f:c5:4e:1e:33:31:e4:11:0b:b2:32:dc:
4e:c7:3a:bf:4a:82:4a:3d:53:85:be:67:f1:10:29:cd:1d:67:
bd:9f:36:1a:85:89:a5:a1:fa:b3:3a:d0:cd:48:3c:c9:5c:90:
19:fd:79:a0:83:23:58:e5:7a:56:a2:37:81:a7:e6:96:7d:21:
53:f1:71:3f:1c:b6:9c:b8:8a:47:d7:bc:fa:6a:0e:6a:3b:31:
af:54:a8:0b:87:ac:15:27:ac:b6:0e:8c:11:bb:41:b0:cc:a7:
6a:1d:82:78:d0:bc:2b:06:ff:32:73:2e:b6:a8:46:c6:10:54:
a6:cd:0d:ed:fc:b2:3d:0a:c1:59:7e:62:f4:c9:9d:3c:3a:6d:
82:3b:fa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:30:31 2025 by rpki-client