Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D70FB4C6511911F09CD8B5CBDAE4EC9C.roa
File: D70FB4C6511911F09CD8B5CBDAE4EC9C.roa (raw, json)
Hash identifier: THPb2gakI81JVoTlWY++YbDEKsuaWfxs86x1CviAxZ4=
Subject key identifier: 2A:28:1F:45:C4:09:2D:B7:EC:F8:A3:7E:AA:92:4F:BC:92:2B:A5:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D70FB4C6511911F09CD8B5CBDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 16:39:48 +0000
ROA not before: Tue 24 Jun 2025 16:39:43 +0000
ROA not after: Fri 08 Aug 2025 16:39:43 +0000
asID: 44559
IP address blocks: 45.207.2.0/24 maxlen: 24
45.207.3.0/24 maxlen: 24
45.207.6.0/24 maxlen: 24
45.207.148.0/24 maxlen: 24
45.207.149.0/24 maxlen: 24
45.207.150.0/24 maxlen: 24
45.207.151.0/24 maxlen: 24
45.207.160.0/24 maxlen: 24
45.207.161.0/24 maxlen: 24
45.207.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89738 (0x15e8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 16:39:43 2025 GMT
Not After : Aug 8 16:39:43 2025 GMT
Subject: CN=685ad4d3-8512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d9:3e:2a:1a:2e:1d:2d:15:e6:92:63:c1:20:
29:ee:38:24:9a:7e:b2:e2:47:8c:63:e2:ae:6f:ea:
45:07:c7:8e:42:14:84:6b:18:95:49:de:ab:41:ea:
0c:83:73:01:7c:a2:bb:fe:1f:53:e1:c2:8b:f2:c4:
38:b7:b9:54:cb:9f:f6:7b:e2:aa:8c:3f:bc:df:47:
05:e2:38:7a:7b:aa:d0:94:12:ec:55:21:b9:bb:2e:
fd:3c:48:e5:60:77:04:1f:a4:f1:28:97:8a:67:d8:
ee:e3:0e:5a:9d:48:43:5d:f3:89:15:cf:b8:55:1a:
88:06:2f:66:12:e2:25:a4:62:52:ae:c1:ab:3b:66:
c5:c3:8c:20:d6:7e:13:88:cc:15:df:2f:d0:cf:0a:
a9:e1:70:32:0d:58:48:a6:0f:81:dc:c1:82:9d:28:
e8:6b:e4:ec:1a:df:70:e8:62:24:12:ed:b5:b7:73:
c7:3a:71:e6:6b:e2:8f:13:71:07:39:87:62:9e:68:
40:45:c4:c7:b7:35:9d:50:92:17:91:3d:ae:8d:91:
7e:0b:dc:b4:2c:86:ae:2a:74:6f:91:47:0a:29:1a:
99:d1:7e:cc:c9:12:62:ee:f6:d8:53:ab:bd:63:6c:
f2:89:7c:51:5c:45:e5:6d:2b:81:99:46:12:46:25:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:28:1F:45:C4:09:2D:B7:EC:F8:A3:7E:AA:92:4F:BC:92:2B:A5:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D70FB4C6511911F09CD8B5CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.2.0/23
45.207.6.0/24
45.207.148.0/22
45.207.160.0-45.207.162.255
Signature Algorithm: sha256WithRSAEncryption
a6:5a:31:7a:c6:1a:d0:8d:ee:06:cc:51:bf:a0:6a:ef:f4:20:
8b:d2:b0:14:b3:2e:bc:d3:3b:48:36:f4:a1:82:91:e2:4a:c9:
4f:82:88:e5:9a:dd:af:b0:34:b5:75:43:96:64:8b:4c:6e:5c:
ee:d8:87:58:09:b5:29:17:59:d6:6b:11:ff:28:03:13:09:90:
2d:2c:80:5e:00:78:a2:ef:04:70:72:d3:48:13:b0:44:33:ee:
bc:98:41:97:5d:50:09:4a:d7:6e:60:86:3e:a7:af:30:65:fd:
28:ea:b3:72:2b:75:a3:38:5c:3d:40:50:a3:58:91:08:07:47:
41:45:15:18:38:9b:e4:eb:09:4f:1b:97:33:b3:0a:29:c4:97:
bd:06:bf:80:5d:18:07:5b:8a:fb:70:f0:13:2a:28:7f:3d:f8:
3a:3d:f3:3e:46:d6:45:b8:43:13:14:08:41:25:04:53:54:ba:
84:84:e0:d5:73:11:3b:a2:e1:40:9f:6a:f2:42:b7:aa:01:d7:
eb:26:ac:17:fc:a5:4a:53:76:63:61:0e:5c:d2:07:0a:7a:5c:
ce:2d:09:9a:df:60:5a:48:4d:03:9f:20:12:90:91:5f:e8:a6:
4c:9e:cf:b1:fe:d7:7e:c1:2a:66:56:f5:c3:57:91:f3:b8:b1:
65:a5:e6:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:45:34 2025 by rpki-client