Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF5B08524C5011F08DC462B0DAE4EC9C.roa
File: CF5B08524C5011F08DC462B0DAE4EC9C.roa (raw, json)
Hash identifier: UvElGxS0x44g+rt2GV3UYAX1qofTMx+Xy5e/jIwu7d0=
Subject key identifier: 26:D0:51:35:02:53:E7:13:E6:41:72:69:23:DB:D1:19:C4:9C:D3:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF5B08524C5011F08DC462B0DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 14:30:41 +0000
ROA not before: Wed 18 Jun 2025 14:30:36 +0000
ROA not after: Fri 25 Jul 2025 14:30:36 +0000
asID: 2914
IP address blocks: 45.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89324 (0x15cec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 14:30:36 2025 GMT
Not After : Jul 25 14:30:36 2025 GMT
Subject: CN=6852cd91-b282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:8a:9a:c8:79:4a:d9:42:39:9a:e3:8d:1c:
cf:f8:a7:d6:87:6c:a2:9c:cc:be:33:05:1c:53:3f:
d7:82:d0:d8:be:2f:1a:10:11:07:de:6a:57:ae:c3:
4b:1c:17:00:9d:54:7f:af:8b:f0:6b:5b:65:6f:ad:
3b:1e:5a:ea:23:9d:56:91:ac:bf:ec:da:10:53:7c:
b1:59:07:0e:f2:1a:cd:a4:48:47:57:7b:a4:38:f2:
0f:ce:61:ca:a6:9f:0e:13:60:6b:c9:28:3f:f1:88:
d3:7c:85:9a:fa:d4:94:cb:f0:ac:10:48:47:0b:35:
fc:32:1c:d1:1f:19:e8:4d:8c:0e:60:d1:54:56:77:
52:35:f5:07:e7:e3:44:04:8a:45:70:39:ee:fe:22:
f2:72:ce:cb:9f:f0:12:8e:f1:11:41:86:a7:07:4d:
10:68:c8:e2:aa:4b:1c:8d:0d:10:48:eb:2c:e2:82:
9a:f8:ab:c7:77:23:02:e3:e6:04:f2:5c:a6:ee:3c:
ca:e0:94:bb:7e:78:88:0a:58:67:61:bb:4e:48:f9:
a1:73:9e:a2:a3:b8:fa:d1:b3:75:9e:6a:78:79:e0:
57:17:c1:d8:f5:ac:fe:9a:01:21:b2:a8:bb:97:d0:
40:88:95:a1:55:fa:73:de:40:d2:40:15:bd:43:3c:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D0:51:35:02:53:E7:13:E6:41:72:69:23:DB:D1:19:C4:9C:D3:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF5B08524C5011F08DC462B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
20:3f:df:4e:81:c1:90:e2:b2:d4:81:e2:c5:ee:49:e8:04:13:
ca:f0:4b:1d:b4:5c:e9:2c:26:35:11:bc:72:56:6f:d9:a9:d4:
e9:36:e6:35:be:b4:36:c5:13:0a:78:69:37:20:7f:20:06:d4:
26:00:9c:d1:a8:ab:f0:a7:61:88:69:0c:21:6b:3d:fe:d7:4b:
5f:97:9a:9f:72:0c:cc:c9:46:7d:67:83:bd:09:eb:36:b6:f9:
0f:03:b6:2c:ec:e1:64:56:40:ae:9a:d5:fc:f9:25:d6:a0:3e:
2d:ed:7b:ff:97:fe:fd:4d:57:66:db:3e:ba:ed:0e:03:28:25:
8f:3d:6c:ae:d9:a0:9b:00:5c:8e:d2:2c:b8:75:80:78:57:d5:
a5:92:a9:8e:c4:4f:51:4a:7c:e5:73:33:5c:96:52:8c:02:4b:
ed:b8:40:8f:c3:0c:c2:9f:5f:c8:cd:70:e7:b8:89:ec:3d:cc:
3e:39:9a:a9:cf:30:9b:8f:27:a4:19:94:28:b0:db:19:aa:78:
b3:70:1f:9d:69:13:e7:5d:ca:c6:d3:3c:dd:58:1d:da:84:9a:
3a:ca:45:b9:f8:64:f3:de:ce:60:67:12:84:04:df:02:5a:dc:
57:39:ab:fd:15:00:6f:f9:86:e7:8d:32:72:c5:eb:b9:a4:f9:
71:6b:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:56:42 2025 by rpki-client