Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97CB550E7CE311F0B42233E6DAE4EC9C.roa
File: 97CB550E7CE311F0B42233E6DAE4EC9C.roa (raw, json)
Hash identifier: SpD/0551EoHljX/o9hmiAWP9BgwTRp1AYqPYTQCgjNU=
Subject key identifier: A4:BA:62:72:BE:5D:3D:3D:CE:9A:8F:ED:ED:4E:48:AB:3A:E5:C0:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016C16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97CB550E7CE311F0B42233E6DAE4EC9C.roa
Signing time: Tue 19 Aug 2025 10:02:20 +0000
ROA not before: Tue 19 Aug 2025 10:02:15 +0000
ROA not after: Fri 26 Sep 2025 10:02:15 +0000
asID: 9304
IP address blocks: 45.198.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93206 (0x16c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 10:02:15 2025 GMT
Not After : Sep 26 10:02:15 2025 GMT
Subject: CN=68a44bac-15e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:a8:34:12:9c:d9:25:5f:25:11:b5:e1:af:
d0:41:1a:cb:07:3e:28:cb:05:56:2b:72:96:89:d6:
98:92:ff:1e:37:8d:31:d5:e3:2a:89:ab:60:a6:8f:
82:20:9b:0a:79:8f:78:99:cb:75:39:d5:e0:38:ea:
d0:de:b7:63:ba:17:7b:e5:7a:78:01:0c:f4:97:e9:
07:1a:f6:84:e1:a8:68:28:94:db:39:3b:b3:2c:5a:
60:27:9d:6d:41:70:41:90:ca:65:03:6d:18:7b:db:
d5:8a:a1:c6:89:0f:21:0a:cc:1d:46:eb:ca:cb:7c:
db:5e:12:9f:71:34:5c:94:f1:91:18:20:13:45:5f:
24:ad:29:ed:67:62:2e:14:52:95:72:40:f3:96:7b:
8e:27:71:ad:66:4f:8f:7e:17:e4:a9:ce:5a:a3:d0:
1a:e0:41:7f:6f:e3:25:11:01:58:c0:23:d7:a3:9e:
14:06:b4:b1:5a:24:2e:b2:18:23:d1:86:33:80:a7:
f0:b6:16:74:25:d6:21:8a:a5:dc:a8:72:fe:03:b9:
5b:00:1b:6e:1d:e4:c1:19:1f:3b:80:04:5d:13:06:
4c:2b:84:b7:aa:7a:88:bc:c2:c7:2a:37:53:45:dc:
43:58:c9:f7:2b:e8:b8:01:2e:da:fc:7e:32:18:56:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:62:72:BE:5D:3D:3D:CE:9A:8F:ED:ED:4E:48:AB:3A:E5:C0:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97CB550E7CE311F0B42233E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.183.0/24
Signature Algorithm: sha256WithRSAEncryption
25:95:29:f0:b1:ce:6f:f2:cf:51:5f:35:44:4c:69:7c:99:54:
c8:2c:8d:f4:3e:0a:86:bf:74:1e:c8:5c:f2:9b:27:db:17:bf:
a1:ff:de:f7:48:b9:91:fd:50:89:ab:18:4e:0b:eb:e2:16:7a:
d1:10:71:06:d6:67:62:cd:86:9e:3f:99:9f:70:3a:3d:08:32:
02:0a:0d:24:85:8b:18:79:a7:c1:11:90:50:f7:f6:04:35:a1:
25:32:13:c6:ae:e5:b2:da:97:1d:29:26:bb:27:0a:78:2d:a1:
38:6e:d9:b0:f7:7f:66:33:8a:28:ad:4d:f9:07:d2:f9:f1:55:
4a:67:6a:40:c6:51:75:bb:d6:fd:dc:35:00:86:2a:4c:db:99:
49:0f:b0:cc:dc:9d:5e:9a:14:98:a6:dc:10:9f:49:72:0d:03:
92:c4:3c:5a:35:ae:8e:13:03:43:aa:ec:90:c6:2c:93:13:2e:
b7:1a:06:af:70:c5:da:79:48:f6:91:1b:17:02:d5:5d:c6:32:
aa:7d:51:23:ff:86:19:a5:b0:dc:39:ae:ef:32:7d:8b:c9:65:
14:74:a1:9a:fa:82:22:0b:06:7c:3b:b7:35:72:51:24:b7:3e:
0c:c5:20:47:d2:d2:eb:06:bb:1b:c5:68:f0:ca:b5:f0:13:e1:
3b:8d:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:35 2025 by rpki-client