Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5919A74678E911F0A22FD4F6DAE4EC9C.roa
File: 5919A74678E911F0A22FD4F6DAE4EC9C.roa (raw, json)
Hash identifier: ZU0Sji2NwqkeBiTdNXq9Zw9rzZ/1MuC4ZPvpeyA+iCs=
Subject key identifier: 85:11:CC:4E:EB:15:E9:D3:47:1B:EB:0F:F0:5B:8B:17:A7:0F:EB:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016AE5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5919A74678E911F0A22FD4F6DAE4EC9C.roa
Signing time: Thu 14 Aug 2025 08:33:27 +0000
ROA not before: Thu 14 Aug 2025 08:33:21 +0000
ROA not after: Tue 02 Sep 2025 08:33:21 +0000
asID: 215391
IP address blocks: 45.192.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92901 (0x16ae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 14 08:33:21 2025 GMT
Not After : Sep 2 08:33:21 2025 GMT
Subject: CN=689d9f57-d2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:3b:9d:82:86:61:d7:4c:72:76:c5:87:15:
e9:db:24:f4:68:5f:83:7f:ea:2f:f9:dc:07:b1:10:
45:0c:79:66:d6:80:04:10:64:a4:2a:73:29:76:b6:
69:b7:bf:3a:5f:bd:cc:3b:91:c9:c0:cf:19:eb:a7:
cc:98:a5:34:f5:e5:b2:97:82:09:32:07:19:c1:c7:
08:a0:7d:b5:a8:a3:2c:1a:3d:f5:64:2d:b0:8d:86:
2b:2a:52:39:06:d9:da:e1:07:c5:56:15:3c:a7:a4:
99:a0:94:fe:2e:b4:c8:3d:77:fe:73:56:38:5d:88:
42:70:35:fb:33:81:be:bc:4e:67:c0:23:c4:42:d9:
7b:1d:2e:05:b8:05:b6:9b:67:4e:45:2f:ed:f1:06:
8d:82:fc:23:51:2e:87:66:72:79:4b:4f:c4:31:24:
93:e3:81:56:b5:8c:d1:fc:2d:28:ce:f7:77:64:46:
c7:d3:6c:99:46:26:5b:81:a9:6a:3a:41:bf:b9:ad:
56:79:cc:0f:84:3e:28:a8:75:92:de:a5:1e:62:de:
26:7d:02:09:7d:6d:a3:ec:4e:cb:ce:4c:07:98:3d:
f4:2c:37:47:1e:06:ca:74:c7:a2:de:95:e7:74:60:
e5:7d:73:f8:e1:7f:ee:83:74:02:99:66:65:a2:8f:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:11:CC:4E:EB:15:E9:D3:47:1B:EB:0F:F0:5B:8B:17:A7:0F:EB:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5919A74678E911F0A22FD4F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.19.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b7:17:a2:00:c7:47:c0:f7:b6:22:fc:fe:7a:6a:52:24:f5:
d6:46:3a:65:ae:22:76:ae:94:de:09:1c:c1:db:29:7a:8e:52:
84:2e:6e:ef:61:5a:be:f7:cc:5b:51:9c:06:f5:ca:f1:14:e5:
c2:eb:30:dd:b4:1c:b0:ba:08:f7:93:03:92:1b:ce:49:da:05:
1f:fe:61:eb:14:11:6a:fb:af:23:f4:ea:33:5b:57:51:40:08:
32:a3:98:be:6d:26:68:44:58:25:d8:34:10:d1:75:9d:0d:cd:
c5:ea:8c:42:b2:ee:52:71:d5:81:8e:47:00:c8:06:b9:40:22:
60:84:05:fe:33:00:d2:1d:51:1b:6f:3d:d2:f2:70:f8:88:be:
3b:f4:a6:76:5d:50:af:f1:3b:3e:cf:33:84:e9:11:08:83:5f:
3c:37:11:09:84:05:af:83:1f:68:f0:2b:ef:d7:ad:5e:c9:10:
99:1a:0c:10:5e:4a:31:7f:86:9b:54:95:bc:ee:19:5a:61:df:
51:4b:d6:a7:94:ba:0e:ff:da:35:f6:e5:68:7f:1b:28:9c:7f:
d9:64:51:7f:c8:59:47:89:43:5b:48:d0:08:27:56:48:85:f9:
5c:5c:a2:4b:da:4b:78:d8:ee:27:a2:0f:c7:29:56:37:50:b9:
e2:13:98:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:21 2025 by rpki-client