Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CE0A160519211F09127DEE5DAE4EC9C.roa
File: 4CE0A160519211F09127DEE5DAE4EC9C.roa (raw, json)
Hash identifier: 5kCQAWypu6gQ2y+gEWm/SStODe2GdT9c2DbdcpWr5zk=
Subject key identifier: 37:88:42:9F:D8:3F:11:DD:07:32:81:E6:A5:A3:90:D5:9E:34:0A:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015EB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CE0A160519211F09127DEE5DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 07:02:05 +0000
ROA not before: Wed 25 Jun 2025 07:02:00 +0000
ROA not after: Thu 31 Jul 2025 07:02:00 +0000
asID: 19318
IP address blocks: 45.196.212.0/23 maxlen: 24
45.197.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89781 (0x15eb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 07:02:00 2025 GMT
Not After : Jul 31 07:02:00 2025 GMT
Subject: CN=685b9eed-f17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:fe:91:00:15:c2:42:a6:cc:26:58:c1:16:
61:ff:73:b2:eb:9f:28:47:8e:72:c5:ca:95:75:b7:
69:77:89:ea:e3:aa:fd:a7:82:22:db:6c:2b:51:a5:
92:b2:23:1b:ff:e1:b8:c2:9f:d4:0f:c4:28:2c:c8:
06:92:2c:66:38:56:ee:08:0b:ef:e5:85:9b:8e:1e:
4e:26:cc:60:c7:16:18:5f:73:72:57:17:ad:3a:7c:
e3:a3:4c:fd:26:5b:5e:0d:bf:c5:0c:e8:45:0a:1d:
d2:cc:20:5f:a3:b6:3c:bd:4d:6a:d4:f2:a8:46:4c:
28:d5:a8:40:7b:23:1a:45:1c:f9:15:c1:95:c1:d5:
fc:22:e6:47:9a:cc:5f:82:bd:28:70:fd:f5:6a:6a:
e9:3f:d6:38:e0:b2:c0:fe:1e:e8:4b:dc:4f:d8:7d:
16:38:fe:6a:51:f7:c2:00:21:b1:58:33:ef:9e:0f:
53:1a:2d:fd:af:0f:9c:19:44:ef:3e:3b:be:76:a0:
91:11:1b:00:d9:ca:be:5c:db:13:7f:37:88:df:e4:
bc:52:8c:6d:d3:38:cd:36:f8:1a:0b:d4:ce:7d:a1:
99:fa:1e:12:8b:93:68:1d:99:f1:c5:ec:53:17:a2:
17:e0:01:ed:16:bb:95:60:80:d0:a5:17:9a:12:96:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:88:42:9F:D8:3F:11:DD:07:32:81:E6:A5:A3:90:D5:9E:34:0A:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CE0A160519211F09127DEE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.212.0/23
45.197.22.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:59:42:da:93:f2:49:2a:de:14:72:2c:d8:86:76:df:ce:2a:
e7:16:b5:be:74:1e:5f:6f:af:a4:3c:2e:f9:44:e4:f1:13:e1:
69:df:f3:1e:9a:11:cf:8a:41:72:50:94:0c:f5:54:24:71:29:
78:6d:4e:08:38:39:f2:09:67:85:32:c3:d1:25:fb:b7:e5:4f:
e2:3e:15:b2:63:97:8a:02:22:c3:28:46:ec:52:89:e0:25:af:
0b:46:c4:08:fb:70:bd:23:b6:2c:74:f3:6c:01:35:4f:5d:c4:
15:39:9f:c1:53:18:68:aa:83:92:31:ea:c2:95:33:3c:fc:63:
8f:23:20:2b:a2:ec:0f:9a:4d:85:f0:6d:85:c7:08:f0:cd:71:
f0:3f:70:18:9f:25:89:e5:97:4a:2c:6b:e9:cd:fc:20:ac:df:
e0:3c:4d:38:21:77:67:9e:3a:8e:5a:59:46:ed:8f:76:22:99:
d5:0b:74:b7:be:b2:27:a5:1c:40:57:53:12:46:f1:a9:e1:cb:
2b:78:d1:88:5d:f2:dd:88:61:27:bb:9b:a1:fb:b6:51:b5:be:
44:c3:5c:43:f0:0e:27:8a:d9:57:1f:aa:f3:66:8d:c2:5d:ce:
27:98:76:85:e6:1d:56:2a:68:e4:e9:2d:dd:a6:f9:0b:11:f1:
ea:c1:e0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:09:52 2025 by rpki-client