Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69F73F1E624211F0A6BF69D0DAE4EC9C.roa
File: 69F73F1E624211F0A6BF69D0DAE4EC9C.roa (raw, json)
Hash identifier: SR0Hptwc9Ut0JVqASMtXDkeODFX0UIliFoZdz5Pr5/U=
Subject key identifier: 05:00:52:E3:80:1B:71:FD:E7:67:5B:61:06:1D:D8:19:9E:A6:5A:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01658D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69F73F1E624211F0A6BF69D0DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 12:43:04 +0000
ROA not before: Wed 16 Jul 2025 12:42:59 +0000
ROA not after: Tue 22 Jul 2025 12:42:59 +0000
asID: 9009
IP address blocks: 45.192.130.0/24 maxlen: 24
45.192.131.0/24 maxlen: 24
45.192.132.0/22 maxlen: 24
45.192.136.0/22 maxlen: 24
45.192.140.0/24 maxlen: 24
45.192.141.0/24 maxlen: 24
45.192.142.0/24 maxlen: 24
45.192.143.0/24 maxlen: 24
45.192.144.0/24 maxlen: 24
45.192.145.0/24 maxlen: 24
45.192.146.0/24 maxlen: 24
45.192.147.0/24 maxlen: 24
45.192.148.0/22 maxlen: 24
45.192.152.0/22 maxlen: 24
45.192.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91533 (0x1658d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 12:42:59 2025 GMT
Not After : Jul 22 12:42:59 2025 GMT
Subject: CN=68779e58-5cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:b3:4f:70:6e:45:01:54:20:27:e1:4b:89:
f9:cf:05:e9:07:67:40:be:86:84:58:14:c0:de:8a:
21:ce:52:c9:1b:66:de:82:e1:a2:aa:85:be:4d:fc:
02:91:21:48:1d:bf:57:d5:a4:6f:c2:43:d2:ee:68:
f6:9e:80:98:10:32:06:f6:3b:f5:36:c5:61:c1:e8:
fe:74:97:d1:ab:73:d2:96:7e:29:b0:09:9c:5f:4b:
5b:73:22:4d:3d:ca:6f:97:8c:6d:59:51:a1:f6:cc:
71:eb:55:ae:4f:46:27:0d:96:d3:63:33:5f:3a:60:
4d:44:c1:7f:35:98:97:8b:35:56:fa:26:7c:4c:d3:
87:6e:44:f7:c0:4a:5e:ea:dd:67:63:0d:be:0a:fb:
c6:52:e9:ce:83:f8:6a:e6:4c:39:40:0d:38:5e:b9:
fa:49:b3:8c:85:18:19:c3:b8:25:85:f7:69:c7:80:
e7:af:62:e4:0b:b7:45:6d:2b:ab:21:05:10:68:69:
cc:10:4f:bb:d6:02:46:cb:94:69:06:5e:9e:ff:04:
d0:87:e1:ce:e5:5b:bd:f7:42:21:85:02:9c:bd:37:
f8:ba:45:02:47:d7:62:56:31:41:15:0e:24:6a:72:
7f:a9:cc:c6:fd:80:08:c5:d9:4a:3b:87:ff:c2:98:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:00:52:E3:80:1B:71:FD:E7:67:5B:61:06:1D:D8:19:9E:A6:5A:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69F73F1E624211F0A6BF69D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.130.0-45.192.159.255
Signature Algorithm: sha256WithRSAEncryption
45:8f:da:de:75:90:63:e3:62:aa:6d:20:84:6a:e5:54:c5:9d:
e1:55:a0:29:c1:18:0a:cd:32:d4:65:da:ae:b3:ac:0e:1e:c4:
10:14:4a:b8:32:89:eb:22:8f:d9:d8:25:73:eb:fd:2d:c6:ba:
03:80:cf:92:3d:e6:e1:30:69:9c:9e:ef:89:34:c5:42:39:b8:
c3:91:a8:e3:1e:4b:e7:96:09:cb:52:a8:9f:d8:79:3d:45:28:
1c:ca:83:f3:35:39:ff:ef:ce:6b:29:26:d0:43:d3:3f:14:31:
f7:82:47:b3:73:7e:4e:db:a6:52:c8:e1:ad:ba:de:b0:7e:6c:
bc:72:b8:cc:d4:04:6b:e5:8f:5e:1a:60:83:7b:84:bd:1e:0d:
43:ba:c8:2c:de:4d:7b:6f:09:40:d6:a9:b9:1b:7e:b5:b0:54:
8f:3c:e6:28:d1:4a:1c:ae:55:96:8b:33:18:53:0c:af:06:99:
61:52:39:ce:9d:41:b6:37:e6:3b:d4:d4:7e:d8:10:c3:ef:32:
6f:69:f1:d1:64:cb:05:f0:3b:7e:8e:68:0d:4e:99:f8:6a:9a:
45:20:3a:d1:d0:58:0d:63:fe:77:65:e4:d6:a0:33:70:f4:ef:
87:b9:e6:f1:78:e8:67:e7:75:5e:05:2f:59:88:fd:e6:d7:e8:
69:0e:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:22:43 2025 by rpki-client