Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EB6BEE8647B11F09A4BC2DCDAE4EC9C.roa
File: 3EB6BEE8647B11F09A4BC2DCDAE4EC9C.roa (raw, json)
Hash identifier: UARBcnNbuvI/FA2sJLxL5PTkpcH9BZfHdJWSQFgjgPE=
Subject key identifier: A3:A2:EE:B6:2E:83:DB:3B:16:79:2D:D4:95:A5:DF:50:08:A6:2F:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01660C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EB6BEE8647B11F09A4BC2DCDAE4EC9C.roa
Signing time: Sat 19 Jul 2025 08:34:55 +0000
ROA not before: Sat 19 Jul 2025 08:34:50 +0000
ROA not after: Mon 11 Aug 2025 08:34:50 +0000
asID: 21859
IP address blocks: 45.194.112.0/23 maxlen: 24
45.194.112.0/24 maxlen: 24
45.194.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91660 (0x1660c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 08:34:50 2025 GMT
Not After : Aug 11 08:34:50 2025 GMT
Subject: CN=687b58af-c643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:73:3f:5f:15:a4:13:05:ca:7e:a9:80:f4:
86:24:8a:82:1d:2e:c0:8a:dd:e9:2e:24:61:be:8a:
89:4d:5f:9c:d1:4c:32:3f:1e:f3:01:cc:7f:ca:26:
2e:0e:d5:c0:46:ca:72:59:eb:15:03:fc:7a:23:b7:
a9:64:ae:13:2c:b3:10:e3:2a:44:25:ba:b3:43:9c:
53:33:8b:04:f0:43:24:d6:88:59:80:2c:d1:e1:99:
bd:c8:fc:f5:44:6b:a7:34:a7:b1:10:bf:97:7e:d4:
a2:1f:d0:18:bd:8e:10:c4:1d:13:dc:40:bf:b2:97:
c3:52:91:eb:67:e5:1b:5c:f2:25:26:cd:27:76:7f:
cb:91:78:c1:90:44:82:c4:49:25:2e:6f:87:f0:43:
9d:be:04:f7:83:7f:7a:e2:27:a2:26:35:5b:02:17:
ff:c2:74:0d:da:29:32:92:b9:4e:ba:2f:30:11:14:
09:ef:02:bb:a7:1e:42:56:8e:b1:46:65:b5:d1:cc:
8f:ed:85:27:7c:92:da:00:32:ea:e6:04:53:ad:3e:
86:ed:33:85:ed:36:da:2d:11:dd:fb:35:e7:19:f0:
10:81:15:c6:eb:fd:e1:82:b3:c7:06:05:c8:d7:94:
58:d2:e3:73:7c:bc:5c:68:12:38:23:b4:58:f8:d8:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A2:EE:B6:2E:83:DB:3B:16:79:2D:D4:95:A5:DF:50:08:A6:2F:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EB6BEE8647B11F09A4BC2DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.112.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:0d:7a:8e:10:a2:88:2c:16:65:0b:c3:5e:dd:08:c4:db:7a:
ac:7c:c4:2c:75:00:41:c8:bf:55:68:dd:af:9a:19:6a:44:6b:
5c:84:88:2e:15:16:38:d4:94:30:0c:7c:6e:34:ce:91:00:18:
df:49:16:36:d3:79:d2:c2:e0:9a:92:26:66:91:7e:49:98:ee:
05:7b:40:bc:b9:6f:2b:23:88:93:44:a0:10:ff:c3:d8:1a:22:
20:6d:5d:b2:87:05:f8:18:91:aa:be:ef:4e:8e:6e:b3:1e:74:
56:17:12:12:e6:39:79:74:8a:27:fe:e0:06:2f:36:6d:5f:16:
1a:34:78:fb:43:95:b6:99:e0:6e:c5:eb:43:9a:0a:80:c4:e3:
26:d1:ce:11:b0:d3:5a:fb:fa:f3:05:e1:5a:2e:9e:65:cf:ee:
8e:b4:b6:a4:07:55:47:ff:6a:85:52:44:f7:12:8d:62:89:90:
04:6e:59:ce:34:78:10:43:70:2e:f0:4c:2d:39:0d:cf:0f:6a:
02:d5:3a:29:e1:2b:85:30:04:17:86:bd:39:dc:3a:72:69:21:
20:8c:80:e5:0e:93:19:c4:85:43:1e:88:37:c5:98:62:9c:10:
7e:7c:ec:6c:28:ec:42:35:03:a4:8b:15:78:4e:cf:10:29:10:
48:97:a7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:44 2025 by rpki-client