Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD3437444B5B11F0B0BC89E9DAE4EC9C.roa
File: FD3437444B5B11F0B0BC89E9DAE4EC9C.roa (raw, json)
Hash identifier: 5h1acsi/xl9VkxXsZB7WfRtFDOlIUViQjdtpYnQpWe8=
Subject key identifier: 2F:75:52:99:5C:81:A0:4A:E3:8F:B8:4A:F5:E1:8E:C0:D6:1A:40:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD3437444B5B11F0B0BC89E9DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 09:18:12 +0000
ROA not before: Tue 17 Jun 2025 09:18:04 +0000
ROA not after: Tue 15 Jul 2025 09:18:04 +0000
asID: 134365
IP address blocks: 45.197.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89212 (0x15c7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 09:18:04 2025 GMT
Not After : Jul 15 09:18:04 2025 GMT
Subject: CN=685132d4-ee66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:7c:57:ad:12:dc:f5:11:49:c5:eb:de:ba:
9b:46:f0:e1:a6:3f:5f:58:b0:86:42:55:68:2b:8e:
82:a5:c9:d4:50:de:d1:cc:40:ea:fe:5e:a3:22:a4:
a5:3a:1f:a9:9f:e8:d1:d8:16:2f:93:b4:3d:29:03:
e3:d6:de:0e:52:06:b2:ea:05:e9:a3:ec:94:c0:13:
63:74:05:b6:f6:06:28:93:53:8c:f4:39:c7:ef:f6:
92:72:16:05:8c:c4:e1:4c:5e:00:42:fd:b9:6b:f1:
96:63:22:bc:c4:4a:30:39:35:78:73:b4:f8:89:1d:
df:0a:e9:71:6d:2c:63:62:8c:30:64:c9:57:59:a2:
94:45:65:bc:d0:66:b4:e4:6a:44:ec:65:fa:81:50:
42:59:27:2f:a9:94:cf:c7:62:e9:da:2f:42:a2:8f:
4c:1a:f0:ef:b6:9a:42:71:2a:0b:3d:3a:08:a2:fb:
3f:ad:7c:57:c0:77:95:6d:55:4d:f3:85:95:31:b2:
86:09:f8:aa:f6:cf:dc:6d:48:6a:37:63:ee:aa:02:
2d:11:5b:91:0f:7b:d0:30:24:8a:d4:95:fe:4a:3a:
ac:2d:7e:f8:f6:73:56:fb:62:11:78:b4:07:f2:a2:
18:13:b7:d2:9a:6e:01:3b:d1:52:d6:52:17:6e:74:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:75:52:99:5C:81:A0:4A:E3:8F:B8:4A:F5:E1:8E:C0:D6:1A:40:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD3437444B5B11F0B0BC89E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.144.0/21
Signature Algorithm: sha256WithRSAEncryption
22:ca:9d:9c:f1:2f:f3:9d:b1:89:88:13:0d:1d:b8:f5:5c:ba:
88:18:92:47:28:7f:d3:e5:f5:b6:ca:40:aa:e7:ae:20:4b:1f:
e8:01:83:ca:11:cd:89:53:fb:bd:15:c7:f6:9d:a1:74:7f:ed:
6c:5b:27:e6:25:9d:58:6f:51:10:70:cf:3b:c8:4e:98:e2:a7:
76:d0:34:23:34:0a:36:ca:cb:d9:0d:10:d1:63:27:c9:61:91:
dd:3d:0c:12:74:5d:d8:05:ef:a9:e9:ee:04:d8:0e:33:1b:a9:
bd:05:7d:06:e4:18:a5:40:9c:b5:6d:52:88:e5:58:bf:16:c0:
b3:79:f6:cd:0e:ba:85:15:c9:4d:1d:b3:cc:c3:45:4f:cd:e3:
cf:ef:3a:9a:91:eb:b2:88:c1:cc:3f:25:6d:6c:0a:c3:0b:1f:
dc:57:49:98:02:e9:ef:ac:48:4a:8d:30:72:5f:a1:2c:f1:a3:
d4:63:28:ef:2f:bf:a1:c4:c0:0d:cc:e7:26:fc:6f:ae:74:0e:
5d:f4:f5:4f:d8:03:27:fa:ce:62:3b:59:12:5c:3a:4a:6d:81:
4e:ff:e7:c1:e0:ee:d3:60:ec:02:08:3e:69:49:24:b4:cd:30:
c4:47:1d:3a:4e:98:8e:af:ad:0b:9a:7c:65:47:35:a1:6c:71:
24:0e:01:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:50:54 2025 by rpki-client