Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95A6C554543611F08A530D8ADAE4EC9C.roa
File: 95A6C554543611F08A530D8ADAE4EC9C.roa (raw, json)
Hash identifier: 874RWVMf+1DAKrvldbgziES82mSXem4EWaiFuYfHedo=
Subject key identifier: C9:1F:27:5E:93:84:43:1C:28:55:2C:99:E5:F4:B3:6D:3D:D7:23:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95A6C554543611F08A530D8ADAE4EC9C.roa
Signing time: Sat 28 Jun 2025 15:43:07 +0000
ROA not before: Sat 28 Jun 2025 15:43:01 +0000
ROA not after: Sun 03 Aug 2025 15:43:01 +0000
asID: 401615
IP address blocks: 45.196.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89931 (0x15f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 15:43:01 2025 GMT
Not After : Aug 3 15:43:01 2025 GMT
Subject: CN=68600d8b-0c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:bc:3a:06:d4:df:9e:fc:8f:9e:68:23:47:
f4:68:a4:98:17:bb:c1:33:57:4a:de:37:5f:01:cf:
6c:4a:fb:15:ab:3f:5c:2e:ac:2e:76:12:76:d7:21:
46:d2:91:03:ac:92:6b:6c:58:18:a8:49:4c:57:24:
e0:ed:f2:55:85:d8:02:11:80:ea:06:6e:bf:e5:fa:
fd:f9:bc:8f:a0:40:5b:20:e5:ce:0a:ea:3c:a3:99:
ce:fa:92:c5:ba:df:4b:99:75:14:9a:b2:72:84:eb:
d8:70:51:e4:fb:a7:86:8b:0c:d2:e3:7a:ee:9d:b5:
f4:d0:5f:d5:a5:86:4d:55:fd:f0:4c:c3:5b:dc:0f:
41:09:95:35:13:1e:b6:38:eb:cb:a3:7d:1c:a9:1c:
30:6d:d7:d5:c9:1d:8b:a1:ff:5d:fd:70:b7:cf:56:
95:5d:b4:c3:f7:be:e6:c5:2c:f3:0a:f1:f0:d5:43:
cf:e7:89:0d:7c:d0:d5:56:bd:62:ea:cf:ae:e5:57:
95:95:ac:a3:df:72:18:5f:b5:b0:6d:a2:25:d7:78:
77:83:0f:fe:11:a8:a5:d2:ad:8b:e6:d1:8f:13:e1:
14:88:46:66:32:5f:a6:51:31:e8:95:9f:b6:76:e2:
6d:a0:7e:e5:37:f0:f4:3c:ab:9c:a1:8e:3e:9d:73:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1F:27:5E:93:84:43:1C:28:55:2C:99:E5:F4:B3:6D:3D:D7:23:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95A6C554543611F08A530D8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.218.0/23
Signature Algorithm: sha256WithRSAEncryption
79:67:e4:bd:12:4f:0b:c3:32:7a:da:ab:2d:a5:3b:4b:49:fa:
79:e4:cd:46:da:db:cd:45:35:15:8b:72:63:e7:ed:59:a0:e0:
fa:97:36:fa:ae:7c:d3:53:c4:96:6d:66:bf:0a:14:c7:98:7a:
99:da:f4:b8:4f:76:60:7b:2d:80:ba:56:fd:b5:7d:a0:52:34:
91:1b:1e:2d:5e:8b:53:c1:33:87:c0:e9:e6:a1:62:31:59:cf:
2f:67:21:15:ef:13:97:7a:2a:b2:1e:ef:96:00:23:2d:73:9f:
95:71:d5:73:9f:26:82:4a:24:33:61:90:25:9d:e3:5e:d1:e3:
b6:3f:70:67:42:de:78:4c:78:bf:8b:d3:03:b3:a0:02:bf:5f:
ab:f7:8c:d8:71:06:58:a1:03:10:17:4b:a3:21:67:d3:2f:22:
b2:44:86:9d:f8:5c:73:c7:8d:5c:55:e8:86:cf:54:6a:c5:24:
fb:b4:33:c9:b4:56:2a:5c:21:e9:72:3f:03:09:39:6f:c9:49:
89:31:8c:74:cd:20:23:d6:53:24:40:1c:21:22:17:91:ac:95:
0c:28:f7:41:24:f8:58:13:8f:12:4e:ec:c5:be:27:cb:77:1b:
81:26:0f:c7:3b:c9:d4:14:b2:b0:01:e7:df:32:a1:c0:bf:ec:
65:e6:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:18:42 2025 by rpki-client