Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FB4BB3C49D711F0AE67348DDAE4EC9C.roa
File: 9FB4BB3C49D711F0AE67348DDAE4EC9C.roa (raw, json)
Hash identifier: VZPT4qiy3/WN3WkUIxLA9Iv7NHH5eq10NgtUUNd27uw=
Subject key identifier: 30:5B:E1:38:B2:81:39:FE:63:A9:06:65:06:7F:27:44:50:01:73:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FB4BB3C49D711F0AE67348DDAE4EC9C.roa
Signing time: Sun 15 Jun 2025 10:58:10 +0000
ROA not before: Sun 15 Jun 2025 10:58:05 +0000
ROA not after: Sun 20 Jul 2025 10:58:05 +0000
asID: 23470
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89172 (0x15c54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 10:58:05 2025 GMT
Not After : Jul 20 10:58:05 2025 GMT
Subject: CN=684ea742-7f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b6:b4:34:d5:9f:a8:e3:b6:da:67:0b:4b:af:
a7:7a:57:4b:6d:13:1e:44:ec:dc:25:1e:88:50:10:
a2:f1:1b:e0:2d:a0:3d:d1:a3:58:f7:38:73:3d:ea:
4a:4f:bf:82:e9:5e:c6:0d:58:c0:c2:b5:d6:d8:be:
b1:c1:05:42:63:20:d9:f4:39:e2:7b:2a:88:82:9d:
7b:4c:59:5b:77:44:cb:1e:12:25:83:47:6f:e8:6c:
76:ae:9c:0d:bb:1c:58:4c:dd:a9:e7:01:ac:ce:90:
64:ff:2a:f9:43:ab:11:81:f3:63:38:1c:a4:b7:a3:
45:53:41:1f:f4:09:68:b9:0d:aa:5c:ab:ee:6f:cd:
10:f5:cf:b4:ee:01:2c:ef:81:8d:3f:ce:7e:f5:fb:
fe:4f:2b:a5:68:7c:b0:0e:47:43:3d:1e:39:89:51:
6c:9e:22:24:f4:83:3d:ba:7e:b6:4d:c7:52:03:f3:
15:be:86:77:7a:64:52:b0:c3:43:a8:f9:f8:05:d5:
c5:5b:5f:84:66:ac:75:84:e8:4b:3d:61:1b:be:59:
6f:4f:ed:0e:4a:40:8a:b7:3a:6d:8b:7d:4f:ac:84:
da:2d:07:31:5e:41:c9:3c:f4:c3:2b:3e:7c:19:68:
ee:09:50:ea:43:47:11:16:35:9a:a0:14:10:f1:43:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5B:E1:38:B2:81:39:FE:63:A9:06:65:06:7F:27:44:50:01:73:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FB4BB3C49D711F0AE67348DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c6:88:5e:b3:97:2e:bd:c2:5a:3c:58:db:32:85:f7:a9:ba:
e2:1b:9d:79:9b:8f:cb:e9:92:b5:a4:37:19:6b:da:5f:18:5e:
fd:7c:6c:50:77:f4:92:32:a5:91:db:b7:1f:05:e0:62:01:fa:
fe:d6:85:b3:11:18:8b:06:0a:f4:22:78:ab:f2:61:30:9f:6d:
75:1a:6e:89:9a:cd:66:3e:98:15:30:34:61:51:9f:aa:8e:be:
f5:f0:0a:2d:be:30:62:97:25:ad:06:23:e9:e9:23:1d:ce:c1:
dd:68:47:68:e2:4b:bf:10:6a:1e:37:d3:67:f5:cb:5c:05:55:
55:87:09:39:40:60:ae:1a:17:86:2b:c1:72:69:96:4b:38:1e:
24:d6:51:8e:e1:72:75:32:db:41:99:ba:07:fa:c5:09:1f:56:
cb:24:93:56:e8:a5:4f:ac:67:51:8a:eb:13:48:2e:90:28:94:
1b:d6:49:be:67:d1:ae:f9:dc:00:82:04:fd:d3:78:af:c0:64:
30:57:0f:a6:96:5f:56:97:0c:39:f6:af:76:7c:6a:80:c8:40:
0f:06:a2:00:23:a5:c8:c9:de:b4:53:c9:40:7b:47:21:b8:3a:
c9:f5:7c:04:00:93:a2:8c:e5:4f:d6:51:82:3f:2c:5c:bf:7c:
bd:30:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:23:23 2025 by rpki-client