Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97B0E9E2511B11F08DA637D6DAE4EC9C.roa
File: 97B0E9E2511B11F08DA637D6DAE4EC9C.roa (raw, json)
Hash identifier: qRlEOWLpuNdIu21CvEFnsq7yssXaapum0xHNTfj3Ysw=
Subject key identifier: 94:16:FF:4F:FF:05:BD:55:61:3B:3E:3E:CF:23:15:A2:A7:C2:9F:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97B0E9E2511B11F08DA637D6DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 16:52:20 +0000
ROA not before: Tue 24 Jun 2025 16:52:16 +0000
ROA not after: Sat 09 Aug 2025 16:52:16 +0000
asID: 138915
IP address blocks: 45.197.74.0/24 maxlen: 24
45.197.75.0/24 maxlen: 24
45.197.106.0/24 maxlen: 24
45.197.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89742 (0x15e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 16:52:16 2025 GMT
Not After : Aug 9 16:52:16 2025 GMT
Subject: CN=685ad7c4-3a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:d5:5f:03:bc:a0:86:04:ba:26:e7:d0:e9:
89:95:6b:7c:31:a7:d3:53:cc:3b:6c:5f:ec:9f:fa:
a6:ea:27:1e:6d:a8:d0:ac:32:cd:58:b5:2b:a1:a5:
9b:c6:e8:24:f7:ef:10:8d:d5:f8:70:f9:12:3f:73:
e9:19:5e:1f:77:49:d2:e8:f8:1c:60:56:8a:9c:8b:
b4:85:86:89:57:18:bf:14:9a:a6:3e:1a:d9:01:69:
c2:d3:2e:df:2c:37:e6:6a:55:60:c0:9a:fc:d6:1d:
1d:eb:97:d5:9a:8c:05:a5:86:ec:83:fc:9d:09:19:
52:de:22:49:70:57:c9:88:be:fb:04:c8:40:db:5a:
2c:07:50:07:37:6a:1f:07:0b:fa:f8:2b:2f:02:c4:
e4:e1:eb:ec:08:47:b7:f2:59:31:77:db:3e:40:fd:
fc:ae:14:27:06:71:6a:1a:5f:fe:a4:85:b1:10:33:
49:25:7b:ce:5e:f8:b9:6f:c3:e9:64:bc:70:52:d8:
18:91:1c:01:7a:22:e0:d9:9a:9b:31:21:50:5c:38:
92:48:2b:46:3d:38:77:06:60:5b:7c:ee:3d:71:4d:
11:7c:f2:2c:43:55:48:a4:ba:13:7a:7f:39:e8:f1:
a5:0b:c4:53:d5:36:e3:dd:28:e5:0c:d2:29:92:48:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:16:FF:4F:FF:05:BD:55:61:3B:3E:3E:CF:23:15:A2:A7:C2:9F:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97B0E9E2511B11F08DA637D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.74.0/23
45.197.106.0/23
Signature Algorithm: sha256WithRSAEncryption
91:82:b7:84:61:c9:29:90:28:67:22:1e:50:d3:a5:91:b9:be:
ca:e3:5a:b9:6d:33:88:d6:df:9f:ab:85:20:44:2a:fd:7a:dd:
27:af:6f:a2:9d:45:2d:a3:41:7c:ce:4d:9b:59:85:5d:fd:9b:
0c:5b:fa:6a:bb:d9:bf:5d:70:8c:5a:87:99:7e:8d:88:89:55:
0e:a2:8b:e4:81:73:12:af:e6:07:17:b0:f8:71:b6:9d:59:a6:
f9:ac:2d:42:f1:8b:08:89:a7:e8:c9:4e:5a:48:e0:96:0c:7e:
13:58:7a:d6:81:d2:69:2a:e4:25:d1:10:69:38:92:56:15:9c:
b1:13:77:fc:5d:af:25:cc:eb:f7:38:fd:94:c4:6e:a0:d0:ea:
2b:8a:1d:f1:6c:4e:1d:22:a0:fe:f4:74:f4:7c:14:2b:6e:e2:
af:30:21:71:ba:c1:52:4a:ff:79:bb:80:23:20:38:30:75:ab:
17:c7:81:26:ae:8e:e4:77:ba:0e:b7:77:9e:66:9c:1c:ea:fc:
a9:aa:7b:e5:46:a0:29:1c:38:f5:40:2b:3d:b6:07:ad:a1:f1:
a8:4a:7c:44:6c:3c:e5:c0:45:86:c9:74:58:a4:f6:88:9c:d1:
98:ef:78:c4:22:9d:14:9e:b7:f4:dc:01:db:02:7c:8a:07:b9:
a0:d2:70:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:26:38 2025 by rpki-client