Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3284E8EA599D11F09420A2B3DAE4EC9C.roa
File: 3284E8EA599D11F09420A2B3DAE4EC9C.roa (raw, json)
Hash identifier: BLZAHV19uQ4FTj427KxZQIoc5uetl6IoJL4mh1H2l38=
Subject key identifier: C2:6A:61:E6:4E:15:CF:73:CD:96:7E:26:F3:42:F1:15:98:E9:18:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3284E8EA599D11F09420A2B3DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 12:40:14 +0000
ROA not before: Sat 05 Jul 2025 12:40:10 +0000
ROA not after: Thu 23 Jul 2026 12:40:10 +0000
asID: 136744
IP address blocks: 45.206.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90533 (0x161a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 12:40:10 2025 GMT
Not After : Jul 23 12:40:10 2026 GMT
Subject: CN=68691d2e-cf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:f4:9b:55:48:12:27:34:92:46:76:2c:f8:
85:66:80:98:98:af:fe:4f:2c:6f:44:80:ab:c9:f9:
e1:89:d0:5c:7d:75:8a:c9:1a:b0:f5:5b:15:1d:c9:
a3:e6:cd:75:7b:86:03:31:20:06:92:ba:0c:12:ef:
f0:41:77:a6:dd:78:1c:b2:d4:47:06:c3:b6:ab:9b:
16:af:68:6e:41:a1:cf:d6:ea:c2:57:97:01:92:95:
f1:cf:df:37:61:1b:41:5e:66:86:f4:db:d1:48:c3:
f9:9d:ea:13:77:73:d8:4a:4a:f1:04:fb:e4:8a:3a:
bf:72:45:a5:64:8a:33:66:79:0b:e0:1d:61:30:56:
aa:94:49:e4:0f:1d:86:99:5e:f3:f8:97:65:ed:79:
62:cc:08:18:14:03:44:7c:40:a9:4e:48:e3:aa:1d:
33:2a:17:b9:4e:4f:37:34:d7:d8:80:3d:c8:ba:7d:
22:8f:ed:7b:a9:9f:56:02:41:f4:80:af:14:af:9f:
63:47:1d:20:aa:55:91:f3:14:3a:b9:71:c2:f5:8c:
27:8e:a1:9f:01:fd:16:32:d8:27:56:e9:6e:57:5d:
b6:78:eb:9c:53:ec:6f:a7:da:d5:08:25:d0:26:0f:
14:0e:3b:cc:97:8b:87:11:76:54:08:73:0c:61:51:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6A:61:E6:4E:15:CF:73:CD:96:7E:26:F3:42:F1:15:98:E9:18:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3284E8EA599D11F09420A2B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.60.0/24
Signature Algorithm: sha256WithRSAEncryption
33:0f:ce:a5:8a:8d:b7:cf:54:ac:24:26:ad:6c:44:1b:21:14:
c0:c9:01:bc:43:2a:4c:50:67:e0:cc:d3:65:03:98:e6:e8:53:
09:48:c7:22:80:76:66:40:ae:a5:6a:12:93:a8:a8:6f:b5:af:
ef:d0:5f:59:7e:40:2c:02:3c:e8:ab:bb:1f:06:a1:7e:01:c3:
07:a7:0c:bd:04:31:8d:25:cf:cf:19:40:6f:34:cc:14:b9:a9:
c4:75:6e:d0:54:5f:3f:73:42:54:a9:94:7c:87:03:13:63:1f:
ef:c6:a0:63:e4:e2:fd:a5:1a:60:38:75:eb:0e:9c:02:02:7e:
91:c8:e1:ec:4c:2b:8c:95:5f:ca:66:d3:e1:9b:ea:97:46:a8:
fb:19:fc:2e:24:3f:26:47:68:59:5d:1e:9e:ec:f9:46:0a:ab:
3f:e3:53:24:ca:e4:a2:6f:51:1c:6a:81:a9:fb:e7:a3:d7:ff:
d8:5c:f4:c0:1f:2c:e8:1d:6e:9a:b7:6d:90:a0:3b:6b:75:69:
21:c6:1e:77:19:07:f6:90:0f:cd:21:d2:61:ad:c4:83:01:f9:
5e:98:f5:ec:1c:7c:b0:2c:c4:bf:db:ca:97:7e:91:5a:5d:ea:
14:d4:ad:e1:cb:c7:78:b0:58:70:7c:f2:d7:e7:43:10:59:cc:
6a:62:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:44:26 2025 by rpki-client