Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EB4E9EE532C11F0A5D579CEDAE4EC9C.roa
File: 2EB4E9EE532C11F0A5D579CEDAE4EC9C.roa (raw, json)
Hash identifier: 4KkI8IGiwe/mO4j0yamPLWZmgvG/iSnqn61AraJAk0Y=
Subject key identifier: ED:C8:06:1B:8C:D1:2A:A5:2C:EC:20:2E:91:12:0D:91:DC:15:D8:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EB4E9EE532C11F0A5D579CEDAE4EC9C.roa
Signing time: Fri 27 Jun 2025 07:56:08 +0000
ROA not before: Fri 27 Jun 2025 07:56:03 +0000
ROA not after: Sat 02 Aug 2025 07:56:03 +0000
asID: 401366
IP address blocks: 45.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89857 (0x15f01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 07:56:03 2025 GMT
Not After : Aug 2 07:56:03 2025 GMT
Subject: CN=685e4e98-fa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:25:11:6d:d2:b2:b5:6a:6f:fb:86:82:45:
c9:c6:c0:ab:7d:95:22:b9:a8:ba:9a:87:f2:8c:64:
a8:8d:55:11:17:44:7f:2a:7e:f9:3b:e2:da:f9:a0:
00:4f:a7:8a:76:78:4b:b7:c6:99:e3:99:90:72:6c:
ef:76:62:cb:92:ce:d2:ee:0b:fa:c2:52:c2:b2:7e:
ca:56:ac:31:51:86:2b:f1:e0:3e:cb:91:45:84:74:
74:ac:d2:84:5c:6f:10:22:bc:57:e6:69:73:9e:f7:
4d:79:69:cc:6b:ea:7f:99:44:2c:e3:85:d0:e6:ca:
14:a6:71:96:7c:5a:b4:98:6d:3a:a9:3c:05:4b:19:
45:8c:4b:d1:ce:3c:4b:7c:f6:b0:f2:9b:95:79:cb:
9c:0f:bc:89:46:23:30:c6:3c:75:9b:38:27:1f:7f:
4a:66:4d:4a:5e:01:81:1d:bf:a6:d4:73:e6:53:e5:
69:4b:61:3a:61:06:65:bf:ff:05:4f:34:7c:fe:6e:
45:53:a4:c1:b7:28:c4:72:07:b0:7e:91:36:be:b1:
6d:2c:5e:6c:14:13:cb:f2:ad:42:dd:6d:49:e3:0f:
bf:9b:9a:bf:39:d5:62:04:38:2c:5b:1a:96:37:3e:
19:4f:43:00:46:89:aa:f8:8b:f3:92:af:d7:f1:cf:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C8:06:1B:8C:D1:2A:A5:2C:EC:20:2E:91:12:0D:91:DC:15:D8:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EB4E9EE532C11F0A5D579CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
77:19:5f:bb:93:b2:56:d7:39:86:69:6e:7a:16:4c:27:cf:b5:
2b:5b:09:83:2c:9b:24:b5:2c:06:28:b5:f5:d7:fd:50:c8:d9:
a6:f9:7d:1e:64:ee:70:5e:a4:2d:2e:39:54:52:2d:81:6e:98:
8a:43:4f:2f:e1:40:66:72:d0:3a:c2:11:3d:68:1c:b4:c5:1d:
d6:c6:6d:05:d4:70:fe:d2:b7:2f:cf:58:8d:5c:e9:70:c9:19:
ea:62:93:5e:b7:24:64:d8:df:df:f1:7f:fd:cf:95:a5:d7:35:
06:91:bf:87:37:a2:00:09:2d:5b:86:48:27:85:23:c5:d7:02:
47:b2:5c:30:94:aa:01:00:5c:11:75:55:fc:12:58:cc:32:a9:
41:00:f6:75:d6:1a:c1:3c:56:24:ed:90:a1:d7:0a:10:e1:10:
e1:2c:86:70:cd:51:15:79:a6:80:0d:d6:01:f0:6c:3a:c3:cc:
a3:fe:9a:63:ff:59:8c:20:73:fc:fd:d1:df:3e:11:64:ea:53:
75:d3:b3:40:93:b9:24:68:3b:32:c2:05:30:cd:17:64:f0:75:
06:82:3d:dd:b9:69:02:fe:2b:ba:8e:9e:01:7d:1f:dd:0b:99:
38:54:f1:2c:3a:95:fb:11:72:f5:91:b5:db:5c:c8:de:7c:73:
7e:9b:99:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:17 2025 by rpki-client