Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F73C90058C911F093C242CFDAE4EC9C.roa
File: 4F73C90058C911F093C242CFDAE4EC9C.roa (raw, json)
Hash identifier: IlUPKbeSF8WnYtq5VJJaEf9PjxG2NDlFuGMv0gRqyzc=
Subject key identifier: FE:FD:CC:9C:BD:FD:E5:BE:3F:2A:BB:5D:09:12:45:15:5B:C5:45:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F73C90058C911F093C242CFDAE4EC9C.roa
Signing time: Fri 04 Jul 2025 11:23:30 +0000
ROA not before: Fri 04 Jul 2025 11:23:24 +0000
ROA not after: Wed 23 Jul 2025 11:23:24 +0000
asID: 131471
IP address blocks: 45.195.130.0/24 maxlen: 24
45.195.131.0/24 maxlen: 24
45.195.194.0/24 maxlen: 24
45.195.195.0/24 maxlen: 24
45.195.210.0/24 maxlen: 24
45.195.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 04:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90354 (0x160f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 11:23:24 2025 GMT
Not After : Jul 23 11:23:24 2025 GMT
Subject: CN=6867b9b2-25d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fb:f7:a8:05:35:b5:1f:99:bc:24:fe:57:2b:
92:f3:23:66:b4:b5:53:a7:dd:65:dd:ff:73:9c:c4:
90:c2:43:2c:2b:3d:1e:88:74:35:7b:79:6f:5a:11:
16:c2:79:3d:f2:59:b7:d5:d0:cf:52:69:2c:a0:e0:
d2:ed:59:10:ec:8e:54:08:03:85:35:2f:7a:46:2e:
bd:2e:3a:35:ff:bb:74:e6:87:22:aa:ea:4f:70:c3:
56:04:11:6f:b5:77:69:2c:da:74:4b:1b:a5:c7:3a:
59:fc:f2:73:a9:c9:22:d8:c3:8a:90:8f:95:aa:b6:
02:04:d9:e7:ec:e9:3c:d1:28:fa:1a:4b:51:6f:12:
1e:0c:c9:8e:5a:73:34:ce:8f:37:0c:15:04:d3:1f:
af:e0:22:a0:fc:df:ca:17:c2:4d:6e:77:85:64:b1:
7d:a2:24:d4:fe:94:9c:22:78:cf:e2:93:c5:c7:e0:
21:ee:4a:bd:2f:f8:11:b6:44:ba:52:53:d1:52:f2:
f1:81:f8:73:1d:ce:7e:23:61:06:9f:14:77:ac:9f:
a5:ae:58:97:3b:94:0f:16:c2:ab:7e:70:6c:b8:f7:
d1:f9:9e:3b:1c:1e:aa:0e:e9:f8:55:84:8b:4c:c5:
fc:89:ee:6b:36:14:9e:9c:06:9f:95:7c:9d:82:34:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:CC:9C:BD:FD:E5:BE:3F:2A:BB:5D:09:12:45:15:5B:C5:45:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F73C90058C911F093C242CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.130.0/23
45.195.194.0/23
45.195.210.0/23
Signature Algorithm: sha256WithRSAEncryption
17:9c:01:d0:e6:1c:df:99:ac:ef:9a:a4:3f:9e:ab:20:da:07:
3b:23:3e:d8:1c:59:cf:f7:9a:08:cd:ac:ed:7f:8c:cb:40:32:
10:a6:07:23:55:ab:ce:ef:ea:dd:ba:fb:df:8f:7c:d1:8b:30:
59:a5:ce:ce:13:a6:89:b7:5a:70:26:b4:2d:76:b7:35:24:bb:
08:70:13:31:b3:49:b6:6f:eb:88:b5:58:7e:00:77:ac:05:46:
ad:67:b5:c0:50:00:1b:a6:26:d7:0d:2b:02:1e:91:37:a3:00:
f3:0e:d3:0b:76:44:76:3f:0a:6b:95:36:d1:a4:4d:82:1e:9a:
28:bb:55:40:28:f3:a8:5d:61:db:ba:14:58:4f:b8:d2:ff:85:
b9:5d:04:0a:ac:f8:7f:61:01:c5:9e:e2:21:9c:76:a9:68:38:
5a:ac:f7:03:be:3f:e6:d8:a8:23:d9:6a:e3:b2:fe:a0:c1:b7:
d5:94:17:c5:a3:15:29:79:cd:e6:9f:e1:be:d2:a9:e4:fa:e6:
b1:2e:ec:d2:10:b7:a0:5e:89:02:22:d4:fa:5b:bd:c4:d7:a8:
fc:3c:a1:d9:51:a1:a3:72:66:d9:bc:5b:19:a1:b9:9f:26:88:
d0:dd:7c:28:ac:db:6e:b2:3e:ec:19:bf:08:7e:b0:16:bf:1b:
b4:2d:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:19:06 2025 by rpki-client