Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ADE0AA85CF811F088D9038CDAE4EC9C.roa
File: 4ADE0AA85CF811F088D9038CDAE4EC9C.roa (raw, json)
Hash identifier: 92PbG9Gg4HWHsoDUbiLI8XK2Lm8wZlCIVhTMkSdLN7I=
Subject key identifier: 64:EB:D6:69:49:1A:7C:EC:CE:D7:B8:66:AC:83:CF:18:41:B0:F2:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016436
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ADE0AA85CF811F088D9038CDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 19:09:53 +0000
ROA not before: Wed 09 Jul 2025 19:09:48 +0000
ROA not after: Wed 20 Aug 2025 19:09:48 +0000
asID: 21859
IP address blocks: 45.198.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91190 (0x16436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 19:09:48 2025 GMT
Not After : Aug 20 19:09:48 2025 GMT
Subject: CN=686ebe81-1784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:40:eb:8a:81:36:d8:74:21:a6:ac:db:80:
ad:71:96:8f:85:0e:13:8f:43:3d:ec:8c:ab:c2:e9:
5b:88:72:1b:44:b7:d1:f9:a9:5b:20:0e:a6:97:5e:
ba:a8:95:2a:aa:06:c0:ce:8c:3c:e4:1f:97:c1:d9:
5b:43:2e:f8:a0:bc:af:7c:82:35:8e:22:4b:d6:f8:
29:63:6d:32:d8:7b:f7:a2:fa:2f:6a:0c:32:38:82:
2a:23:ca:b3:76:1c:46:99:b4:b7:95:d4:58:a5:12:
55:7a:93:b0:7c:8b:4f:09:7d:d1:df:38:3e:d7:21:
dc:11:8c:96:b8:18:ea:cb:32:62:52:15:01:97:d6:
9d:23:df:af:f4:fd:19:53:55:16:5a:4a:f6:43:f5:
02:10:fe:da:98:85:c1:0d:ec:63:c8:15:b7:7e:b7:
fa:fb:b0:18:1b:be:1c:2d:6f:53:8e:03:0c:de:70:
fc:0c:12:3c:e8:1b:2b:2c:6a:57:04:0d:ea:cd:e0:
c7:ed:08:30:84:8c:7d:32:8e:b4:c0:27:46:0f:92:
55:34:0d:17:f7:a0:50:b8:78:8e:25:de:87:c3:d6:
d1:83:b1:97:77:5d:20:0a:82:d1:84:01:47:c9:53:
7e:6b:dd:bd:f5:e9:22:43:85:e8:4a:c2:2a:d0:23:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EB:D6:69:49:1A:7C:EC:CE:D7:B8:66:AC:83:CF:18:41:B0:F2:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ADE0AA85CF811F088D9038CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.106.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1a:ba:39:94:17:89:9c:3e:63:a7:b1:64:18:7b:a0:63:53:
f6:a2:67:c8:e2:39:fe:c3:03:12:18:36:ae:f1:45:56:83:5c:
57:19:34:9e:2c:87:f9:31:2a:4f:19:a5:9e:69:73:19:1d:85:
49:ed:54:78:8a:04:9c:eb:88:1b:56:01:76:6a:9d:fe:e3:91:
e7:15:41:ed:ba:bb:c7:95:db:77:bb:06:ad:73:33:c2:8c:ee:
bd:63:f0:f6:a6:86:b2:ba:31:df:63:15:99:17:48:29:03:aa:
02:e7:66:cd:e4:a7:3e:54:17:b3:f4:64:e1:58:c2:b1:44:b3:
40:63:41:ce:9d:00:dc:39:b7:79:2e:87:e7:37:11:0e:44:08:
97:35:63:6c:4b:fd:7b:7f:ff:77:42:27:f9:2b:4d:73:f3:bb:
14:6f:40:94:cf:8e:b4:a2:87:e4:48:e2:d6:e0:27:20:d0:14:
8f:6e:fa:9c:b0:dd:d3:91:f4:4c:ce:d2:c9:31:69:c5:c9:75:
28:59:66:9d:79:4f:b4:d8:de:82:46:7c:13:4d:59:e2:7c:b5:
f3:51:ad:95:ad:42:66:fa:ab:af:2e:93:d1:69:4b:55:1b:56:
ed:16:cd:27:7e:9f:c1:37:61:b9:a1:4f:41:68:a5:e8:12:30:
f4:5e:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:44 2025 by rpki-client