Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/654086B64C5211F0A06F46BBDAE4EC9C.roa
File: 654086B64C5211F0A06F46BBDAE4EC9C.roa (raw, json)
Hash identifier: uIXUW7IT7UIvn45MQCouZ2gtTWx2jdJ/FLhaE8KZTOU=
Subject key identifier: 84:F3:23:14:FD:33:09:AF:3D:A3:E3:2B:3A:A3:FB:9C:11:D7:91:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/654086B64C5211F0A06F46BBDAE4EC9C.roa
Signing time: Wed 18 Jun 2025 14:42:02 +0000
ROA not before: Wed 18 Jun 2025 14:41:57 +0000
ROA not after: Tue 08 Jul 2025 14:41:57 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89330 (0x15cf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 14:41:57 2025 GMT
Not After : Jul 8 14:41:57 2025 GMT
Subject: CN=6852d03a-0baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:f9:aa:9f:97:fa:6c:06:42:1b:18:0d:9a:
7b:3e:80:32:6f:35:03:04:77:5a:dc:6e:cb:77:2b:
40:48:d9:9c:2f:50:79:60:05:fc:28:4c:5a:cf:ca:
79:d4:86:71:5b:7c:de:2d:8f:ed:86:9b:e0:8a:8d:
70:9a:96:e1:f7:a5:52:97:9f:6e:f2:18:9d:72:63:
ba:67:37:e9:69:66:79:e8:8e:05:49:0d:fb:1a:cd:
ce:35:62:28:d9:c7:1d:45:1b:fa:cd:d6:53:41:78:
be:46:ef:1b:93:cb:78:6d:cc:04:c7:29:6d:ab:8a:
14:c8:20:cb:53:50:03:99:8b:2e:24:fb:2a:45:16:
fe:a8:5f:4c:43:94:62:73:d5:45:51:3a:c9:01:d9:
f9:91:18:13:de:36:86:79:be:55:8d:3c:ce:da:97:
d2:70:e2:80:29:f2:27:fb:8a:e5:39:b4:4a:10:df:
2e:f9:0a:83:37:f2:f1:44:c4:6d:53:6b:80:4e:07:
e0:7e:23:60:5c:6a:98:d4:68:3b:ca:7f:0b:01:b5:
63:5e:d5:a8:96:0d:9d:1a:1d:29:fb:43:32:f1:42:
79:ca:a6:ac:12:28:0f:97:fa:bf:36:bd:ef:46:db:
fb:ea:7a:07:a9:cd:f8:65:cc:34:a2:11:e2:1a:e5:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F3:23:14:FD:33:09:AF:3D:A3:E3:2B:3A:A3:FB:9C:11:D7:91:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/654086B64C5211F0A06F46BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ff:90:7f:1a:70:96:de:ae:98:97:32:46:f1:86:8d:10:55:
ca:0b:ca:b4:68:3d:97:17:77:6e:3c:38:97:39:7a:2a:a4:f3:
97:66:e9:9d:21:58:c0:ea:5f:ec:6a:b0:93:85:d0:51:9a:25:
1d:89:28:0d:3a:a1:65:73:d7:ec:d9:88:4d:51:59:8a:98:53:
c6:4f:04:16:6e:67:9a:4d:9e:de:e9:8f:e8:46:c0:2b:d0:1d:
5a:bd:8d:f0:f9:a1:7a:08:e6:cb:31:57:c7:91:c7:80:39:6d:
d5:4f:6c:5d:4b:fd:cc:f4:8b:a2:f8:ee:7c:1a:9e:01:5b:4e:
4d:53:ac:68:2d:ce:0c:b8:e0:c5:7a:e5:e5:bb:0e:72:b1:7e:
c3:56:c4:d7:1e:1a:07:a4:e8:6d:25:6a:19:54:cf:00:95:b2:
37:59:39:0d:0d:34:b5:78:b5:15:83:4a:1d:7f:c7:aa:ad:21:
8f:3e:f3:11:92:3a:58:0a:76:e4:50:86:e4:76:55:58:12:78:
ff:d0:17:4d:37:d4:00:d6:81:2d:e0:a1:ef:2d:a6:86:a8:b7:
d0:94:8c:c1:e8:30:7d:b1:c8:b9:e3:79:ff:96:ef:33:b8:c4:
65:9d:57:43:07:37:a8:2e:7b:ae:0c:98:60:21:3a:a5:a8:1e:
42:67:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:19:11 2025 by rpki-client