Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5083924850FA11F0BB9E4E84DAE4EC9C.roa
File: 5083924850FA11F0BB9E4E84DAE4EC9C.roa (raw, json)
Hash identifier: AIVgfDa5Hj24juyBlfUXEr9dHmDMtDM+fSU/V8Xwca8=
Subject key identifier: 41:25:9D:46:4B:5A:C5:FB:DD:F1:81:62:C8:65:26:00:4B:53:2A:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E78
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5083924850FA11F0BB9E4E84DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 12:54:08 +0000
ROA not before: Tue 24 Jun 2025 12:54:02 +0000
ROA not after: Mon 04 Aug 2025 12:54:02 +0000
asID: 33182
IP address blocks: 45.192.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89720 (0x15e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 12:54:02 2025 GMT
Not After : Aug 4 12:54:02 2025 GMT
Subject: CN=685a9fef-42d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:65:51:2d:13:c6:40:7c:f0:0e:8b:70:39:
7a:d2:a9:cd:c2:ca:8c:ce:99:0a:c0:b8:80:6b:4d:
59:de:9f:6c:1b:bb:c9:33:3b:c2:bf:77:de:93:ea:
10:a5:51:30:99:18:f2:fe:2e:78:ff:06:6c:f4:cd:
97:dc:53:cf:9e:df:ac:10:ae:17:3a:72:e4:49:f0:
cf:6d:52:be:7a:46:0b:35:44:5b:21:e2:c4:41:85:
16:fa:86:b1:2c:96:2c:3c:e1:8d:88:38:ea:06:1b:
45:f9:fc:70:62:ac:dc:16:78:85:8f:10:ee:03:c4:
ea:da:68:63:c6:70:9d:b9:e4:e0:d7:29:89:89:29:
e9:8d:a5:06:04:ff:bc:63:ba:87:8d:57:1b:f4:0b:
a5:ce:32:14:83:3c:96:bd:ed:a7:57:af:ab:b6:9a:
5d:d7:16:0f:31:7b:7b:71:06:6c:fa:ef:8d:5d:ac:
62:81:a9:7e:30:d9:90:cb:ba:15:93:56:78:05:ef:
50:dc:24:18:05:7c:8a:6e:b2:6f:85:95:ae:3b:fc:
a2:56:0a:4b:1e:aa:ab:7e:9b:7a:cf:19:67:d8:b4:
e3:2f:27:45:a5:f3:f2:c7:21:f1:62:55:71:12:24:
bb:60:1c:4d:1d:a5:dd:37:72:82:1c:0e:4d:0f:fe:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:25:9D:46:4B:5A:C5:FB:DD:F1:81:62:C8:65:26:00:4B:53:2A:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5083924850FA11F0BB9E4E84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d5:7b:1c:02:57:72:a3:90:1e:9a:85:83:84:02:94:c7:42:
6e:99:6b:cd:e8:e8:d3:b6:d2:a4:5b:b0:05:76:f5:8b:9e:f3:
18:ea:73:98:96:f1:2e:82:99:b3:15:d8:98:f1:88:b1:aa:cb:
36:01:82:ab:39:c9:40:18:16:f9:12:1e:a3:8c:5a:7f:40:fe:
b2:53:e7:df:7b:31:d3:78:6d:87:0a:0f:43:7c:f9:d3:92:69:
9f:39:ba:bc:79:b5:64:70:ac:df:68:3d:e2:7b:e8:ee:86:4c:
38:16:42:3b:8a:94:1e:4a:d0:b7:bb:00:b1:a4:0f:70:3f:8c:
9b:71:56:5a:84:b4:71:36:a3:45:50:0c:60:a0:a4:65:74:81:
1c:78:51:d7:72:dd:9b:df:02:3f:8a:ee:f9:7b:00:ea:5e:bf:
9a:7e:a3:c7:d2:98:54:f7:bc:dc:5a:2f:5d:af:00:2d:cc:85:
7c:98:c2:19:eb:07:3c:48:18:b2:e4:e9:a1:f8:fd:68:de:66:
09:43:70:9f:8c:0e:02:e6:b5:fd:06:98:d0:38:24:56:fc:01:
5f:2c:cf:28:f2:d6:3a:cf:43:25:b5:e4:3e:e4:2f:84:7a:57:
af:18:15:bd:aa:1f:41:ea:b0:00:47:2b:52:88:2d:9f:1d:ea:
74:e7:a0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:15:19 2025 by rpki-client