Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D572B874542111F09AF9E187DAE4EC9C.roa
File: D572B874542111F09AF9E187DAE4EC9C.roa (raw, json)
Hash identifier: tD7it+Em/U8+gHr75WSpdA93709o+jzQxLKQyH3KKSU=
Subject key identifier: EC:8D:C8:B8:6F:1E:20:C3:0C:3C:E6:6D:57:0F:C2:FF:CF:89:84:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D572B874542111F09AF9E187DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 13:14:34 +0000
ROA not before: Sat 28 Jun 2025 13:14:29 +0000
ROA not after: Sat 05 Jul 2025 13:14:29 +0000
asID: 137263
IP address blocks: 45.195.16.0/24 maxlen: 24
45.195.17.0/24 maxlen: 24
45.195.18.0/24 maxlen: 24
45.195.19.0/24 maxlen: 24
45.195.20.0/24 maxlen: 24
45.195.21.0/24 maxlen: 24
45.195.22.0/24 maxlen: 24
45.195.23.0/24 maxlen: 24
45.195.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89891 (0x15f23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 13:14:29 2025 GMT
Not After : Jul 5 13:14:29 2025 GMT
Subject: CN=685feaba-2a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:3c:b9:12:52:1d:72:d7:57:3f:98:f0:1d:
4a:00:95:d6:89:9a:00:75:7c:26:b2:b9:ca:a9:71:
85:96:98:e5:cb:fc:f4:69:ac:08:6f:81:4c:6f:17:
2c:19:ea:85:de:7e:83:54:23:a2:b0:1a:43:1f:2d:
5d:72:27:30:f6:03:01:b0:8e:59:0f:f7:26:5f:3d:
6b:58:70:0d:e2:64:18:7b:91:38:43:3a:53:41:b2:
86:5b:0d:b3:cf:dc:c2:27:08:d1:63:61:80:b6:bc:
d1:77:34:1c:d1:8b:4f:b5:10:4c:f9:24:5a:aa:76:
e2:2a:19:f8:0c:1e:5e:09:f0:7e:64:ad:01:ab:f7:
23:c4:f5:a5:ca:88:73:6d:93:00:b0:d5:88:b4:eb:
07:e1:bf:48:e6:79:72:26:8d:5e:5c:9c:4c:15:9d:
7d:ac:a0:17:c5:04:b0:61:64:41:73:35:11:4b:a0:
83:d2:02:eb:dd:6a:0d:f5:ea:8b:de:8c:e7:45:c3:
30:2b:71:bc:1d:d3:ad:0e:a5:17:24:b7:74:dc:e1:
19:c1:7b:55:49:23:23:46:ea:28:9e:e5:fe:a5:b0:
8d:fa:f9:74:30:c7:13:23:38:0d:62:a2:1a:3d:dd:
ae:59:de:9f:6e:68:74:a6:0c:16:9a:4d:0d:71:07:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8D:C8:B8:6F:1E:20:C3:0C:3C:E6:6D:57:0F:C2:FF:CF:89:84:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D572B874542111F09AF9E187DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.16.0-45.195.24.255
Signature Algorithm: sha256WithRSAEncryption
49:c6:d4:96:cb:2c:1c:4c:c5:11:89:b1:ae:b2:2e:35:1f:e6:
a8:17:e8:cb:b1:b8:91:e0:45:05:32:22:1f:91:32:9b:93:a5:
cb:82:51:a8:0d:45:6b:96:82:98:0b:b3:ce:84:06:9a:cc:99:
7c:dc:fd:f9:be:64:3e:dd:8d:0b:4f:e6:e5:e7:94:a2:78:5b:
82:87:38:5a:ba:72:b6:a3:4e:c6:c8:25:63:1c:58:0f:7f:67:
4a:83:84:70:a4:92:f4:f5:a0:4d:30:52:b7:d6:40:a9:75:9f:
ae:1e:1f:63:22:aa:0f:6a:8f:3a:91:7c:d9:5c:75:dd:33:4b:
49:d2:bd:eb:81:d3:a5:b9:1b:94:df:9d:12:cf:60:68:54:3e:
31:e2:54:51:c2:80:26:24:cc:1e:8a:5c:9b:e5:da:d6:38:19:
14:07:e6:0e:0a:ca:96:ca:9f:46:6c:85:f9:52:92:03:a1:6b:
d2:36:30:3e:6d:dd:00:ef:e7:93:bc:00:d0:00:aa:f5:7e:ad:
9d:94:63:71:b3:db:c2:ec:10:54:2f:8f:17:1f:19:73:c8:e6:
14:33:f2:5f:bd:42:80:41:2d:a1:60:b1:51:14:b7:36:77:ce:
b8:ec:df:7b:18:5d:3f:56:7d:26:68:89:11:b2:c0:4a:4b:e2:
04:17:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:38:48 2025 by rpki-client