Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF2CA26A580911F0A9924FEEDAE4EC9C.roa
File: FF2CA26A580911F0A9924FEEDAE4EC9C.roa (raw, json)
Hash identifier: J78hpkMoIel+1mj30Tm5s9uT282lT0f29xCNQj/9ons=
Subject key identifier: 87:26:1D:26:6B:D3:87:6B:8A:66:EE:A6:7F:7B:EC:9A:AA:34:C1:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01607A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF2CA26A580911F0A9924FEEDAE4EC9C.roa
Signing time: Thu 03 Jul 2025 12:34:01 +0000
ROA not before: Thu 03 Jul 2025 12:33:56 +0000
ROA not after: Wed 23 Jul 2025 12:33:56 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90234 (0x1607a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 12:33:56 2025 GMT
Not After : Jul 23 12:33:56 2025 GMT
Subject: CN=686678b9-787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:32:bd:20:82:82:28:f9:50:cd:d7:57:52:e5:
72:77:76:fd:0f:24:8e:49:53:28:22:35:3f:33:9f:
de:65:24:a8:38:43:c4:0f:5a:cc:66:d2:59:a1:76:
d8:e0:d1:af:cc:2f:bd:af:19:52:70:32:9f:08:5d:
53:9e:e0:18:45:2a:38:5d:fa:99:e8:6a:d2:d4:ba:
34:18:25:18:fb:b1:4f:33:f4:bc:9f:5b:2c:0e:5f:
b4:0d:69:c4:b6:22:e0:1d:1d:2e:5d:5d:47:c2:20:
73:3b:bd:3f:f0:8e:f5:cd:4e:9e:82:72:08:03:50:
7a:fe:4f:e6:89:a7:cc:3b:f8:18:01:c2:47:9c:bc:
1b:9a:58:31:ff:d9:fa:f6:d3:27:b1:20:45:db:27:
a9:f8:bc:eb:76:a1:4f:77:95:8a:16:2a:6b:be:10:
5f:aa:df:da:b8:f7:df:bd:ab:bb:41:4b:ef:7c:7a:
2d:09:ed:84:14:af:ce:b6:e1:45:c4:54:bb:67:6a:
4f:bd:b0:20:64:7f:e6:b9:b4:e1:39:6f:9e:7b:60:
a2:a4:45:98:62:3b:e3:8e:cc:5d:54:fc:e2:05:4a:
45:27:8d:c5:d1:13:ea:46:27:49:95:a3:ac:b7:80:
12:27:64:2a:36:46:3a:15:0b:0d:c2:d5:1c:df:59:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:26:1D:26:6B:D3:87:6B:8A:66:EE:A6:7F:7B:EC:9A:AA:34:C1:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF2CA26A580911F0A9924FEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:24:d2:f0:62:4b:9b:14:4b:1b:13:d2:4e:4c:93:f7:67:44:
e1:ed:4b:73:12:42:20:38:00:f8:7d:c8:51:92:86:a8:1d:8e:
8f:6e:af:4f:30:3d:9d:de:9d:b0:fc:2c:09:6a:a1:ae:49:bf:
ea:9f:78:23:ab:bc:8a:d5:10:c0:b6:a3:c5:f2:03:e1:9d:a0:
6b:6d:f4:10:06:a0:7d:13:22:f2:d4:4e:df:d8:72:04:0c:11:
03:a7:16:0e:ba:cd:06:ac:54:7b:c4:73:1f:53:6b:84:76:b2:
45:5a:f6:a5:bd:90:59:34:51:18:55:17:c4:2a:66:60:c7:fd:
d9:7a:7c:2e:97:16:d1:12:b2:33:89:99:5f:0d:46:11:db:03:
d8:74:56:91:43:4a:ab:02:c3:0e:9e:c6:72:1d:39:1a:52:75:
e4:5f:78:4d:50:90:95:59:ef:97:3e:23:22:ac:31:b6:06:17:
f8:43:14:f5:ec:26:a1:40:c5:e7:6d:55:e8:3d:12:f3:40:0a:
76:05:78:45:95:5a:b4:18:be:ad:a6:50:d3:c6:86:5c:6f:cb:
15:1a:ba:32:1b:e3:6e:b1:a7:6e:7c:98:6b:d6:a2:e1:50:cb:
36:b7:c1:74:e9:0d:ab:9e:b5:19:48:4c:b1:d1:a9:32:bd:3a:
4c:ed:f0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:31:24 2025 by rpki-client