Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFCACF5276D511F08F0B43E0DAE4EC9C.roa
File: CFCACF5276D511F08F0B43E0DAE4EC9C.roa (raw, json)
Hash identifier: AtjrwYh2OB80cG2BMzAEHDF1fKr9ojaizOjwaMytef0=
Subject key identifier: 66:91:9B:79:BB:8A:19:64:50:7C:9B:2F:50:B8:86:0C:53:0F:46:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFCACF5276D511F08F0B43E0DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 17:08:34 +0000
ROA not before: Mon 11 Aug 2025 17:08:26 +0000
ROA not after: Wed 17 Sep 2025 17:08:26 +0000
asID: 397423
IP address blocks: 45.194.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92757 (0x16a55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 17:08:26 2025 GMT
Not After : Sep 17 17:08:26 2025 GMT
Subject: CN=689a2392-e147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:30:64:18:35:13:d0:9b:5f:2b:f9:86:7f:00:
b4:ed:29:4d:f1:7e:42:43:d1:3e:78:69:a5:fb:2c:
b2:58:03:1d:28:ed:21:3a:ff:e5:a7:9e:a5:e4:87:
4e:93:41:09:02:48:3e:dc:30:b5:cc:66:93:47:e0:
ec:f4:ec:f2:a2:df:20:5e:05:79:ea:af:40:50:a4:
e8:bc:29:f7:0e:d5:42:8b:09:b9:3a:0f:f0:5b:e3:
ff:cb:87:fb:ca:3c:7b:ea:2a:dc:49:58:85:db:04:
49:79:d2:74:06:87:a8:ea:47:7f:3d:72:5d:86:d3:
2e:8e:f2:0b:67:54:92:df:b8:60:27:d6:be:0c:0c:
db:ab:61:4c:0f:0a:dc:1a:85:62:ad:24:bd:f6:fb:
3e:da:92:67:3a:0d:52:77:0c:8f:20:96:ec:03:13:
c5:55:35:82:5a:74:63:c0:cc:27:62:ef:68:66:f0:
17:f1:e2:30:66:12:5d:fa:9e:fe:bf:2b:8d:b4:d5:
33:1a:2e:30:4b:47:e3:b3:7c:ba:c3:fc:25:09:bb:
56:50:cc:b1:c2:82:00:5d:86:62:8d:07:34:31:6a:
4e:26:23:ba:83:7b:a5:56:39:55:f2:ea:70:ed:ac:
51:b7:d0:cb:2e:78:43:37:d1:42:4c:8e:85:6b:70:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:91:9B:79:BB:8A:19:64:50:7C:9B:2F:50:B8:86:0C:53:0F:46:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFCACF5276D511F08F0B43E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.28.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b0:12:4c:1a:3d:e4:71:bc:3d:fe:66:10:b5:52:b6:ea:fe:
c9:e2:b7:fa:af:d4:9d:ce:af:0c:e3:b4:a5:68:9d:64:56:54:
bf:c0:eb:6a:65:9e:85:3c:5d:bb:6b:ee:c2:c8:90:f0:84:51:
52:08:e2:a8:ff:ef:49:f5:28:66:b5:61:46:ac:cf:41:02:5e:
02:82:fb:f2:9c:d9:34:42:eb:75:e5:bc:3b:b8:6b:16:3a:c0:
b9:e9:c8:c7:34:9b:d7:ec:ee:95:d6:7f:5a:06:84:0c:32:b2:
6c:32:2b:14:b5:59:11:a2:b4:79:49:0e:59:7e:79:c9:29:33:
c8:f0:f3:d4:b1:3c:ac:f0:8d:09:9b:53:42:91:af:04:9c:fb:
d5:4b:09:0a:a4:46:96:0b:5d:18:70:10:b2:10:19:c5:ff:34:
19:a8:d5:d6:15:43:dd:42:18:ee:d7:99:bf:c9:78:d0:fd:7a:
7b:4c:1d:6d:c5:15:ef:15:ef:b7:ef:9c:ed:aa:00:62:77:1f:
c2:a6:9d:bc:47:7b:6c:e4:ac:c1:c6:64:4b:77:e3:1e:b7:ef:
10:97:13:01:21:61:0c:43:8b:38:81:96:28:df:1a:ca:e0:24:
68:17:c6:60:c6:a0:7c:3b:5c:f1:21:c7:7f:1f:59:ba:a3:91:
c6:1b:0c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:03:27 2025 by rpki-client