Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/896BD4E6542211F09A74458CDAE4EC9C.roa
File: 896BD4E6542211F09A74458CDAE4EC9C.roa (raw, json)
Hash identifier: gxJXVh0GtdhhXkqQ9Fn/aZM9TOW9+7kRmbfvr5tm+Bs=
Subject key identifier: 89:BE:25:E4:CE:8D:7A:C4:2F:52:DB:BE:CD:9B:2E:42:46:EB:C3:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/896BD4E6542211F09A74458CDAE4EC9C.roa
Signing time: Sat 28 Jun 2025 13:19:36 +0000
ROA not before: Sat 28 Jun 2025 13:19:32 +0000
ROA not after: Thu 10 Jul 2025 13:19:32 +0000
asID: 32043
IP address blocks: 45.192.120.0/21 maxlen: 24
45.194.114.0/23 maxlen: 24
45.194.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89893 (0x15f25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 13:19:32 2025 GMT
Not After : Jul 10 13:19:32 2025 GMT
Subject: CN=685febe8-2f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:de:27:ae:f6:b4:6f:16:4f:c3:3c:c9:f6:
9c:8a:6c:9f:cd:c3:96:0e:25:d4:fe:40:da:84:f6:
2a:48:dc:a3:d9:9b:33:5d:65:23:58:df:09:a5:45:
43:38:83:38:4c:56:f9:ae:96:4e:42:72:28:e4:3c:
83:e7:28:a1:38:a6:a3:6d:78:bc:3c:b4:97:73:77:
57:bf:a5:84:cf:17:05:11:9a:81:7d:d9:d0:0e:05:
a3:f5:ad:27:e0:ea:7e:1b:ce:a9:13:41:ae:f2:38:
df:cd:6b:70:48:a0:53:62:15:5d:ee:28:14:e1:ed:
1d:b4:f4:c5:21:55:df:2f:1e:f7:f1:37:db:8e:f4:
9f:a2:93:df:17:b0:a5:82:fe:20:c4:fa:89:c4:7b:
5c:d8:3a:43:63:8d:9f:95:30:05:07:be:4a:0c:3b:
ca:f3:ff:d3:4f:52:c8:cd:dd:1e:1c:66:58:22:4f:
68:aa:b7:f4:2d:d4:ab:da:a9:34:0b:a1:58:a7:68:
ee:8e:8c:73:c3:d5:3c:24:34:81:a1:25:bc:1e:3f:
d7:ef:cd:a8:89:e9:cd:2c:98:e5:9a:4e:7d:36:84:
32:ce:7c:e5:49:0a:d9:b9:76:da:b2:25:e4:75:3b:
8b:17:15:c5:b6:79:5f:4b:99:ea:1a:f9:5a:04:fc:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BE:25:E4:CE:8D:7A:C4:2F:52:DB:BE:CD:9B:2E:42:46:EB:C3:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/896BD4E6542211F09A74458CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.120.0/21
45.194.114.0/23
45.194.118.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:8d:e6:ff:47:68:fe:14:d8:43:fb:49:c8:2c:cd:a1:ab:77:
55:2a:25:02:04:91:df:9f:15:4b:12:f9:fd:43:54:89:03:14:
9f:87:8a:c5:3e:5f:24:2e:e1:d7:21:ea:21:e5:ec:d9:31:c4:
6d:73:17:5f:fa:9e:8f:cc:6f:d5:87:43:33:84:2a:a8:e8:0a:
4d:e1:db:98:f7:03:ed:16:a8:86:0e:9b:02:df:c1:d6:d4:cd:
77:ec:a8:6d:cf:52:6a:8c:bc:c6:5c:ad:8d:ee:9f:61:73:41:
41:fd:8a:12:69:a9:6e:45:98:2e:75:0a:4b:69:ad:e6:90:f0:
fc:df:97:e2:e1:c3:a7:0c:59:81:c1:fd:a6:c3:6d:43:b3:8c:
70:77:d9:80:3b:b0:83:dd:65:02:e4:a3:ec:bf:d3:48:bf:70:
a6:f0:04:5d:d0:08:81:c6:47:b7:0e:88:80:bf:b7:0c:74:31:
1f:cb:41:4e:ca:6a:dd:76:7b:69:43:fd:be:00:32:0d:c2:95:
9e:dd:69:b7:18:04:f2:59:8d:bf:a2:bd:6c:0b:84:47:e5:2c:
9a:f1:c8:8e:93:8f:32:3c:f9:15:04:a1:b7:dc:70:b8:9c:4b:
dd:f4:c8:b0:4f:c3:be:7f:a5:c9:ff:e3:ce:7a:89:41:75:50:
a7:0e:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:55:34 2025 by rpki-client