Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/E2B1CB3E4D5E11F0AC9C0484DAE4EC9C.roa
File: E2B1CB3E4D5E11F0AC9C0484DAE4EC9C.roa (raw, json)
Hash identifier: yv5AfJmE56S5ts/c2onzn6ricd3K2oEmGaCJUOJTiXA=
Subject key identifier: AF:09:0C:36:53:FB:FA:69:31:75:84:CD:10:5C:82:DD:08:AB:CE:7F
Certificate issuer: /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Certificate serial: 08D9
Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
Authority info access: rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/E2B1CB3E4D5E11F0AC9C0484DAE4EC9C.roa
Signing time: Thu 19 Jun 2025 22:43:58 +0000
ROA not before: Fri 20 Jun 2025 22:43:53 +0000
ROA not after: Wed 20 Jun 2035 22:43:53 +0000
asID: 37049
IP address blocks: 165.16.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2265 (0x8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AR, serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Validity
Not Before: Jun 20 22:43:53 2025 GMT
Not After : Jun 20 22:43:53 2035 GMT
Subject: CN=685492ae-4382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:aa:e3:90:5e:0c:1c:74:8b:37:22:61:fa:
e2:65:00:d7:7b:e2:69:24:81:30:b1:40:8a:59:de:
fb:70:14:2c:2a:1f:73:b2:bd:dd:65:a1:9c:f1:9c:
99:6a:8d:df:87:08:fc:07:ab:2f:db:b4:90:88:ea:
20:33:ec:3e:8e:9c:5a:77:59:3f:d9:54:cf:3b:83:
c5:76:2c:fc:a2:58:c9:eb:31:83:59:77:98:18:bd:
b4:55:98:38:fb:1e:87:95:ce:22:d0:de:40:0b:ac:
f7:f2:27:26:fe:b5:65:21:37:05:25:a0:36:20:b9:
59:aa:e7:cf:f2:58:86:b1:eb:f5:94:11:d0:95:65:
02:39:90:da:4a:00:39:7e:6c:ad:9a:99:10:4e:b1:
5e:45:f4:95:27:2b:93:b0:ef:ad:98:6f:6f:ef:6d:
be:71:d6:3a:77:b4:e1:74:42:43:ee:d7:f8:4e:37:
16:84:2e:15:15:0f:60:72:8f:a7:50:40:86:b7:ab:
47:ba:53:e2:2e:67:e2:ae:bf:4c:05:f1:f8:4f:9d:
85:b3:f4:22:3b:3b:cc:0f:b7:85:56:1a:b1:e8:f4:
47:4f:78:d0:1a:da:a9:f1:69:47:45:a3:49:63:db:
f4:34:79:6a:4e:d5:93:92:b3:9e:ab:90:e7:71:44:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:0C:36:53:FB:FA:69:31:75:84:CD:10:5C:82:DD:08:AB:CE:7F
X509v3 Authority Key Identifier:
keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/E2B1CB3E4D5E11F0AC9C0484DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.16.161.0/24
Signature Algorithm: sha256WithRSAEncryption
29:14:11:6a:ce:47:bf:94:5d:dc:c7:cf:f8:e0:ac:e2:20:3c:
11:80:3e:d9:71:78:48:32:8a:3d:d3:ac:db:a9:dd:47:dc:4a:
6e:9b:76:72:2c:ed:85:f9:75:34:d6:d0:f6:63:26:61:f4:ab:
18:c4:d1:78:1a:4c:9e:81:aa:c0:5c:89:90:f7:9d:d5:8d:37:
43:a0:d6:96:76:79:92:13:22:41:04:d8:12:d7:95:47:74:ad:
23:6a:70:c5:91:93:aa:16:c4:f5:57:dc:49:5d:57:cc:f5:eb:
eb:89:e0:31:6b:05:61:14:e1:6c:92:ee:96:14:9e:76:f4:47:
66:59:71:fa:e9:9e:71:cb:7a:9e:55:34:29:54:eb:84:29:63:
af:1e:2d:f5:1a:2d:03:89:cb:5a:55:26:11:f2:f2:e7:c9:fb:
e8:f3:b6:f0:55:44:27:5d:97:bb:48:98:c4:ae:ba:d8:63:d7:
9d:af:f2:b0:76:a7:f7:a2:1b:12:33:38:81:22:ac:1c:09:7a:
60:a3:d0:06:29:c0:e5:f5:d8:9c:c0:0a:0c:41:5e:53:13:b3:
a0:a6:a7:0f:bf:4b:84:4a:ff:c7:35:7c:7c:9f:b1:e3:c3:1b:
48:6d:d0:3e:87:c9:d8:83:b6:a5:8a:d6:d7:fe:83:77:f7:59:
be:fc:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:15:48 2025 by rpki-client