Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E23F3945A7711F0BD8D5BBADAE4EC9C.roa
File: 5E23F3945A7711F0BD8D5BBADAE4EC9C.roa (raw, json)
Hash identifier: VOnWq4H3HM4VvM/1PZMLFpposKHjiTe/DeLoe/xtx6Y=
Subject key identifier: 6E:6F:20:D1:F0:6B:EF:B3:5F:4F:03:3D:15:42:66:44:7F:57:AD:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01622F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E23F3945A7711F0BD8D5BBADAE4EC9C.roa
Signing time: Sun 06 Jul 2025 14:41:58 +0000
ROA not before: Sun 06 Jul 2025 14:41:53 +0000
ROA not after: Wed 23 Jul 2025 14:41:53 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90671 (0x1622f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 14:41:53 2025 GMT
Not After : Jul 23 14:41:53 2025 GMT
Subject: CN=686a8b36-4892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:ab:b7:c6:10:85:9d:51:66:7f:42:01:30:
11:c2:7c:f9:cb:4b:88:70:7e:17:cb:9a:50:ff:f0:
bb:32:1b:71:18:3b:30:9f:1f:b1:7b:a3:05:4f:26:
db:90:74:e8:3a:3b:27:8c:0b:28:4d:c5:72:eb:49:
6f:56:21:98:b2:a3:66:6d:88:ce:bb:32:f3:c3:c8:
83:09:ba:f8:58:ee:53:87:24:17:7a:a4:8f:6b:47:
52:4a:cc:9a:aa:05:19:9f:5c:b4:43:24:09:73:13:
bd:2a:08:f9:bc:73:45:23:85:40:6b:fa:10:4a:af:
69:86:bd:5e:63:06:7b:05:cb:03:33:02:04:6d:62:
15:ae:c5:eb:30:03:bc:e4:12:de:92:36:19:72:cf:
bb:dd:31:36:0c:50:5e:bc:be:40:ec:ca:0d:1d:0d:
49:c2:a2:2c:68:75:55:0e:9e:d2:16:51:13:f6:67:
11:3b:ae:9d:45:6c:51:81:c9:cc:16:e4:35:d4:84:
5b:ea:6b:9e:dd:20:68:48:bb:fe:7f:e9:05:e3:ba:
25:de:28:40:3e:82:74:e5:8c:0e:c4:c7:13:a9:d6:
ec:e6:97:bc:ea:9b:cc:01:1d:11:d7:8c:cf:05:0e:
68:1e:a3:db:ee:6c:ba:76:9f:fd:56:5b:2c:64:ec:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6F:20:D1:F0:6B:EF:B3:5F:4F:03:3D:15:42:66:44:7F:57:AD:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E23F3945A7711F0BD8D5BBADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
74:88:b5:af:68:2a:c0:13:30:d0:08:ee:30:71:90:8a:db:09:
77:b4:7b:9d:d9:68:18:f8:ed:27:5c:82:42:cd:18:50:a3:fb:
58:8d:d8:db:23:c9:58:98:8c:f0:e9:bb:e0:1e:d1:73:79:58:
1f:fa:86:7a:df:f3:63:1a:54:28:c6:d5:04:26:99:be:d5:3c:
75:fb:b8:ee:c9:d1:7d:ac:e1:d2:fb:00:ed:0e:78:e6:13:8e:
a4:38:bc:62:ca:8d:38:41:ca:84:a5:28:fa:dc:d9:c2:bd:3f:
1c:46:32:11:a6:29:52:e3:20:02:8f:cc:df:1c:04:64:a4:5c:
5c:90:fc:c0:55:3b:a1:96:30:db:15:1d:b7:4b:a0:51:9d:1a:
f4:90:df:51:76:8e:b8:f7:41:d9:47:e3:71:2e:5c:2f:cd:52:
1f:98:a0:60:df:26:c0:a5:6d:f8:02:dd:a1:c9:d8:83:54:02:
0f:a1:1c:4e:7f:0e:c4:bd:9e:f5:57:69:02:d1:ac:8a:b9:e7:
61:f9:36:b4:2f:70:55:89:eb:86:2a:3d:87:b3:18:9a:5e:8a:
5a:77:f2:3c:57:97:11:f3:0f:c5:c0:77:4e:83:c9:ce:0a:77:
af:f9:59:42:f6:97:4a:73:b2:14:4d:91:af:83:2b:5e:fc:6d:
28:12:99:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:03:22 2025 by rpki-client