Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/297E16E05B1411F0930674C1DAE4EC9C.roa
File: 297E16E05B1411F0930674C1DAE4EC9C.roa (raw, json)
Hash identifier: +Q9MoUtfZT3mkrxvFvgLgI0wlqKy02R5mikxDwKgMzs=
Subject key identifier: 53:6F:F1:05:5F:A2:DE:3B:8B:CD:90:40:89:0F:64:92:A8:96:BF:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0162E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/297E16E05B1411F0930674C1DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 09:24:21 +0000
ROA not before: Mon 07 Jul 2025 09:24:15 +0000
ROA not after: Wed 23 Jul 2025 09:24:15 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90854 (0x162e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 09:24:15 2025 GMT
Not After : Jul 23 09:24:15 2025 GMT
Subject: CN=686b9245-eda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:44:48:eb:32:37:27:71:f2:37:52:9f:ca:
f1:27:50:9f:0b:5e:93:82:5e:6b:d8:6e:6c:5c:51:
f0:89:d6:6d:a6:81:0c:76:f3:e2:53:d5:48:eb:cb:
f9:2e:24:9a:5b:75:d3:f2:0e:56:e4:f2:b8:94:f5:
4f:68:12:66:19:d3:b4:96:46:67:c8:45:73:3b:02:
66:05:8a:ef:14:57:5f:55:17:e7:4f:3f:1d:33:b4:
fa:f7:8e:b2:d7:d1:80:76:80:36:e7:97:49:9f:06:
3c:93:64:3f:a1:1e:70:72:0c:83:ae:15:4d:52:45:
b8:42:a6:20:12:e9:6b:d3:11:24:ce:57:70:f2:45:
c0:b8:55:1f:ca:fc:c1:eb:b2:85:d5:07:f8:16:60:
6b:d1:76:ef:b8:f5:08:be:5a:7e:71:fa:bc:ec:4e:
13:31:23:5e:73:54:91:88:c4:40:fc:d7:ca:ca:7b:
f5:42:b3:d0:82:8c:91:d1:1d:6b:1f:db:96:50:63:
29:6c:cb:38:f2:07:0c:5d:61:f9:bd:21:05:ca:97:
cb:25:5a:fc:a4:e1:9a:99:e2:ab:9e:82:b3:87:ad:
d5:1c:59:e0:89:a9:d3:16:4c:f7:8b:1b:ea:ad:81:
f3:01:68:0c:36:96:57:60:1b:18:b0:a5:97:a6:fd:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6F:F1:05:5F:A2:DE:3B:8B:CD:90:40:89:0F:64:92:A8:96:BF:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/297E16E05B1411F0930674C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
97:8e:b5:8e:cc:9a:da:61:fe:86:6d:f6:d1:c9:34:9e:2a:1d:
2e:07:4a:87:2c:67:ff:36:07:d5:11:c9:26:27:e7:59:77:97:
6c:9b:3c:71:56:b3:f2:72:87:d2:7c:ea:b2:c4:e0:d8:7c:1e:
21:65:17:f5:3d:2f:08:37:0c:33:00:3c:9e:04:45:95:95:77:
fa:58:05:fc:f5:ad:ee:7c:94:46:fc:61:4c:dc:de:f7:bf:82:
dd:dd:2c:52:25:86:50:09:ef:bc:67:3e:0b:38:83:8c:be:89:
e7:21:74:ea:d7:55:b2:0d:77:23:fb:c9:c3:9b:76:74:d9:5b:
bb:85:fe:e2:14:45:ce:34:99:a9:c9:9a:16:aa:f3:16:70:2f:
dd:56:20:5a:67:1e:a8:83:40:2a:69:f5:ea:bc:fa:f7:07:59:
d5:b3:41:c3:76:b7:1c:83:94:f8:4b:92:05:c1:50:9d:a9:53:
7b:af:9d:27:b7:ef:c4:fb:4e:a9:d6:b5:f3:f7:12:3d:93:54:
63:ea:d3:47:6b:4d:26:58:83:f3:d0:4e:c5:1c:39:d5:c8:a0:
94:75:8c:71:8f:44:13:a1:7a:94:c8:eb:77:a5:49:a2:35:8a:
b2:35:7d:03:ba:05:3f:96:5e:29:b5:f3:31:d6:13:4e:fe:26:
5e:e6:67:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:41:46 2025 by rpki-client