Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D37B01444B7911F0B272B3A6DAE4EC9C.roa
File: D37B01444B7911F0B272B3A6DAE4EC9C.roa (raw, json)
Hash identifier: NAFh48YSEc+efGkjzMbB/nmNf2rcLsR4eN8KHtw5Hd4=
Subject key identifier: 5A:08:41:60:31:91:87:92:FC:C4:9B:9D:8C:84:3E:53:F7:73:AF:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D37B01444B7911F0B272B3A6DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 12:51:46 +0000
ROA not before: Tue 17 Jun 2025 12:51:39 +0000
ROA not after: Thu 17 Jul 2025 12:51:39 +0000
asID: 399195
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89252 (0x15ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 12:51:39 2025 GMT
Not After : Jul 17 12:51:39 2025 GMT
Subject: CN=685164e2-9c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:7c:ae:55:8e:f2:b2:b0:87:d3:20:52:4b:
f5:4f:f3:7d:9a:81:67:bf:85:5c:f4:e6:2a:8f:e6:
8b:d8:cb:b8:05:4a:76:f0:62:7f:a6:28:fb:13:56:
d8:cc:9e:68:d8:ca:b8:39:d2:ea:e9:42:b5:4f:82:
b0:93:e6:da:5e:e0:51:b6:35:b2:9a:1c:0c:9a:ce:
90:34:f3:c3:0b:7d:ab:d9:2d:36:3e:92:a2:be:8f:
7b:5f:11:48:52:94:69:e5:bd:60:65:66:7b:18:6e:
42:bd:7f:43:49:e9:be:1b:9d:a5:39:34:e8:ae:12:
75:cd:5b:4e:83:20:80:66:81:39:97:cd:da:3e:b0:
9a:51:fd:e6:c8:19:82:4f:60:8c:64:db:43:bf:cd:
95:5c:2d:a3:00:da:b3:95:d6:d3:f7:d8:6d:38:87:
e5:57:ad:57:99:c2:69:94:7e:08:3b:e0:8a:60:10:
9a:19:d1:b2:70:2f:05:23:a2:22:02:12:72:ad:d0:
9f:a5:31:1f:19:e7:d2:a9:92:7f:64:ee:0e:9f:a3:
e5:d4:c7:bb:ba:60:2b:41:8b:66:6f:f5:7c:97:45:
dc:ea:69:68:8b:24:22:17:dd:f2:bd:89:f2:d8:79:
55:96:53:0f:0d:04:fa:e8:d5:a3:c6:ee:3f:6d:f6:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:41:60:31:91:87:92:FC:C4:9B:9D:8C:84:3E:53:F7:73:AF:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D37B01444B7911F0B272B3A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3f:52:41:76:62:9c:28:a2:ba:13:d9:a3:67:32:1c:69:aa:f8:
21:4e:f9:0b:7e:a3:91:4e:9d:2e:a5:f0:2d:44:c9:14:33:88:
4a:2b:45:57:74:ae:19:79:50:d8:71:e5:bf:12:f0:ef:7f:0f:
26:6e:9a:df:f5:fd:98:f7:b7:49:bd:55:22:33:6d:db:31:db:
d6:73:77:a9:3d:29:a8:df:2b:a2:38:f3:63:89:4d:63:ff:64:
10:90:bd:32:17:ba:d7:7c:75:54:84:58:31:e5:95:61:81:5e:
6b:6b:c2:a4:ef:29:e1:03:41:2a:eb:91:e5:39:1d:98:2a:f6:
76:d5:9d:c6:9d:fb:ed:79:83:3f:ad:98:3c:dd:f8:c4:90:88:
3b:f6:9b:4d:89:8a:c9:1b:58:a3:f2:4a:68:cc:ff:5a:0c:6b:
aa:47:14:08:d7:5e:35:00:a5:c2:71:8d:41:d4:f4:6b:ae:c8:
e7:2c:c7:53:91:ab:95:53:e6:f1:82:cf:02:e1:13:6c:04:2a:
92:c6:d8:19:bb:ad:dd:7a:f4:1b:df:2e:8a:a2:18:d0:54:89:
62:2d:ab:8b:bd:b0:8e:47:06:ce:24:a3:65:61:cc:e3:4a:72:
f0:9e:24:d2:4d:2d:9f:60:2d:9a:dc:b2:01:95:34:44:3e:db:
29:11:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:13:07 2025 by rpki-client