Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34CCCA705CC011F0B08D9AA3DAE4EC9C.roa
File: 34CCCA705CC011F0B08D9AA3DAE4EC9C.roa (raw, json)
Hash identifier: W7AfTACIgdSoLuV4d1CCuPXGvGgugyFkYZ0l80q1tqA=
Subject key identifier: 50:0A:5E:31:7A:10:53:14:D4:FC:19:6B:BB:B0:10:FD:96:F7:EF:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0163D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34CCCA705CC011F0B08D9AA3DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 12:28:24 +0000
ROA not before: Wed 09 Jul 2025 12:28:19 +0000
ROA not after: Sun 10 Aug 2025 12:28:19 +0000
asID: 32043
IP address blocks: 45.192.120.0/21 maxlen: 24
45.194.114.0/23 maxlen: 24
45.194.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91095 (0x163d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 12:28:19 2025 GMT
Not After : Aug 10 12:28:19 2025 GMT
Subject: CN=686e6068-de56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:eb:03:1a:a6:ec:f8:d1:16:3e:2e:e5:a5:
c6:77:cb:e9:15:d8:eb:ca:a5:d9:30:f3:3f:67:29:
be:8d:75:cb:b0:b7:eb:ce:60:1d:d0:dd:35:e7:44:
eb:04:3b:8a:7e:99:ec:32:35:e9:2d:38:b7:40:b6:
f4:c2:fd:d1:2c:43:82:32:19:5c:e0:9f:f1:f5:94:
3f:fb:ea:6f:dc:05:d4:9d:50:c3:e1:61:0e:a4:c9:
31:dd:08:7f:2e:f9:d3:72:de:f7:ee:65:bf:7f:67:
13:f8:86:66:52:48:96:ce:98:a9:14:3d:d2:96:ba:
80:82:69:ee:c7:fa:a9:d9:af:cc:ec:8d:fa:16:94:
8a:75:02:36:f0:2b:7b:02:c7:7f:4d:15:b5:02:90:
97:d0:73:78:e9:27:5f:78:54:f2:78:95:16:6d:8d:
68:bf:e1:5c:3c:2a:01:d4:db:c7:16:9c:9c:4f:1d:
25:0b:20:28:47:5b:32:9c:9c:eb:94:aa:d1:3c:3a:
49:57:d9:db:4d:43:b9:38:45:7d:71:60:10:2a:68:
85:2b:0d:dd:10:35:e3:ce:d7:94:f3:ef:a9:73:1a:
4e:fd:6d:fe:07:e1:6a:67:6e:f2:73:b9:2a:53:cd:
82:c6:c0:28:cf:b8:2a:3d:27:3c:b1:29:01:6e:38:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0A:5E:31:7A:10:53:14:D4:FC:19:6B:BB:B0:10:FD:96:F7:EF:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34CCCA705CC011F0B08D9AA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.120.0/21
45.194.114.0/23
45.194.118.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2b:f9:30:37:3f:b6:4e:b2:ad:dc:95:2e:b3:4f:0f:24:4e:
2a:d7:14:d8:64:d9:d3:7e:82:71:e9:84:67:a0:b7:3d:05:c0:
4c:25:04:95:4e:92:41:e9:0d:e9:68:d8:7e:de:0b:7c:45:91:
4c:d0:50:eb:e3:c2:81:79:30:ac:12:a9:42:28:6a:47:83:c4:
c5:53:18:69:a1:73:ab:d9:ba:0a:07:64:f4:d7:ee:71:2f:6d:
70:69:74:92:8d:35:5c:e3:9a:d6:60:7f:78:5b:de:97:75:a6:
1c:9a:4a:f2:96:57:a6:96:43:60:d7:49:a6:e7:06:3a:95:9e:
98:3e:99:1c:7e:5c:6c:c6:fe:23:77:3b:4a:41:f2:a0:5f:40:
35:a6:15:49:04:aa:c9:57:2c:85:23:2f:39:c6:55:de:65:19:
54:07:68:1b:e1:77:07:c8:ae:24:7e:31:5a:3e:92:ed:ca:a5:
b6:39:12:2e:cf:b5:37:24:08:ac:94:49:bd:8d:df:4e:32:25:
61:83:6c:3c:cb:d5:77:15:db:9f:12:6f:46:7d:f5:69:c4:a7:
e4:9c:e2:74:84:0c:bb:a4:43:3c:bb:7f:25:5b:75:fc:a5:37:
17:11:9a:d0:cd:67:c4:d8:e9:24:15:cf:99:a5:e6:0d:17:ed:
29:5f:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:13:43 2025 by rpki-client