Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21DD56E6608011F0A5BA65E1DAE4EC9C.roa
File: 21DD56E6608011F0A5BA65E1DAE4EC9C.roa (raw, json)
Hash identifier: tAFtzuJT2VLw6XpjIm1otKs5fqWFhfEvNVwVAuNCHGY=
Subject key identifier: 1B:87:2A:97:FD:63:33:2F:FD:C3:71:C0:3D:B8:8E:A9:7E:75:84:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0164E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21DD56E6608011F0A5BA65E1DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 06:59:49 +0000
ROA not before: Mon 14 Jul 2025 06:59:44 +0000
ROA not after: Sun 03 Aug 2025 06:59:44 +0000
asID: 2914
IP address blocks: 45.192.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91360 (0x164e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 06:59:44 2025 GMT
Not After : Aug 3 06:59:44 2025 GMT
Subject: CN=6874aae5-9562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:af:1f:a5:26:d0:39:35:11:e9:05:51:dd:
1a:f3:2d:9c:f1:40:d8:77:f4:93:a0:a4:80:6f:d9:
68:47:76:a1:b9:50:ed:d0:d1:5c:63:d7:85:d3:d3:
e1:a9:09:7f:ab:a0:ee:76:f0:5a:68:1f:08:58:4e:
ee:bb:11:c1:77:b5:19:72:50:81:f7:06:ea:56:9a:
73:85:55:de:4d:33:fb:f9:0d:23:61:59:3e:6d:00:
61:78:47:ab:e0:cd:98:26:3d:0b:38:41:6f:4a:28:
ad:a1:f5:1f:ee:f9:34:9b:b4:3c:3d:ae:c2:69:03:
11:f5:03:0d:ed:fe:39:a8:22:7b:af:b2:f4:9e:8f:
45:1e:44:ce:c8:d7:5a:ea:84:e9:49:f3:a7:53:c0:
e4:d2:87:f8:01:b3:d2:14:b3:db:1b:5b:da:db:1c:
b2:24:3c:d7:4c:15:84:3a:ef:ae:c8:df:cd:33:ef:
ff:53:10:66:29:fb:44:04:01:f7:db:c7:5e:37:e2:
2a:c8:9e:c5:fb:ca:00:bf:95:9b:35:65:af:f3:35:
e4:8f:46:09:b9:6c:f5:7d:36:3b:98:d1:9b:66:b2:
b1:bf:ad:64:0e:09:34:d5:5e:b3:c4:49:e3:25:a4:
05:9a:cb:e6:30:68:d0:77:4b:84:20:2b:2f:32:62:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:87:2A:97:FD:63:33:2F:FD:C3:71:C0:3D:B8:8E:A9:7E:75:84:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21DD56E6608011F0A5BA65E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:73:9e:ce:40:5f:fd:4a:01:58:96:fc:7d:63:58:86:12:b1:
98:0d:d7:53:77:b1:77:cc:cc:8b:82:e2:83:eb:ee:b7:6f:5a:
8e:05:1f:01:8d:d3:b2:e0:6a:12:4b:c4:30:c4:05:1d:14:c2:
01:75:85:8f:26:e2:e4:2a:e9:42:71:a4:c8:9e:45:7f:c7:9a:
88:b8:e1:54:83:2f:44:d2:bf:e2:94:0a:5e:f8:d1:48:23:68:
1c:4e:34:e0:66:39:81:71:46:30:2b:d3:06:a2:34:c4:86:a0:
89:f4:11:59:b0:0d:d0:42:ef:3b:8b:e2:11:f8:73:20:3f:b1:
d3:17:bd:3f:f6:d6:56:0a:34:32:ab:4d:a0:bb:7d:ca:97:37:
42:83:e3:ea:0e:e4:94:5e:ce:e2:a5:b7:a9:c0:60:d7:07:76:
03:c8:c4:51:d3:78:4c:c7:c0:4e:98:d1:87:7f:77:2f:da:be:
89:ad:bd:6d:e9:77:5d:77:39:e5:e6:a7:7d:f2:a2:08:f1:6b:
67:76:22:55:47:63:4c:1b:6c:57:80:1f:97:a3:75:89:06:c9:
44:ab:50:df:ad:d9:be:dc:3b:cc:bb:b6:d2:b5:67:ec:bd:5b:
56:01:a2:7c:f9:eb:aa:0f:d8:60:76:25:57:27:55:c2:ac:e9:
a6:31:a5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:52:32 2025 by rpki-client