Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7459C17A60A311F08B5820C3DAE4EC9C.roa
File: 7459C17A60A311F08B5820C3DAE4EC9C.roa (raw, json)
Hash identifier: gx2pv8EBx8Xl0STSH8gGoSKa2cbmfx3sALX/thekRDU=
Subject key identifier: B6:43:99:38:B3:DD:57:CD:2C:E2:70:10:7A:A3:8E:5C:8F:83:BF:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016522
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7459C17A60A311F08B5820C3DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 11:12:40 +0000
ROA not before: Mon 14 Jul 2025 11:12:35 +0000
ROA not after: Thu 24 Jul 2025 11:12:35 +0000
asID: 139646
IP address blocks: 45.201.240.0/20 maxlen: 24
45.207.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91426 (0x16522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 11:12:35 2025 GMT
Not After : Jul 24 11:12:35 2025 GMT
Subject: CN=6874e628-9cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:b6:8a:e2:e3:34:61:61:fc:0f:ca:a1:b0:
ba:63:00:32:7f:d6:50:ac:57:7b:15:93:ad:20:00:
9c:31:6f:9a:47:d0:3f:f1:a8:18:49:af:54:40:60:
5f:28:65:15:12:59:6c:96:49:46:a6:59:51:ff:04:
e1:86:b0:8b:fe:a1:b1:0e:aa:41:26:4e:21:71:84:
97:a5:f7:6c:fd:7f:7c:71:db:fc:cf:23:42:96:20:
3e:4a:b6:51:d8:6e:bd:bf:41:ea:b4:30:c9:18:ab:
d9:d2:1e:e6:a1:aa:72:98:aa:1d:17:3e:84:58:e3:
d9:fd:85:5d:53:4c:e3:dc:02:ee:71:42:1e:69:5a:
50:a6:02:ae:96:db:28:44:f8:1b:b5:7a:4c:8e:c2:
9c:89:3e:1c:06:71:a9:95:83:2d:ca:4d:6a:82:88:
17:cb:f2:95:c3:b3:fb:e8:d9:0e:d4:b7:6a:7a:31:
30:ee:63:3b:93:1b:e2:8a:23:b2:2c:12:82:6d:99:
46:a1:69:7f:57:66:cd:86:d1:0b:e1:d2:06:ac:20:
c7:60:a0:15:93:ad:20:93:1f:47:1d:b1:54:cc:e3:
26:7a:08:f0:f6:e3:47:4a:5f:02:23:5a:49:8f:f3:
02:32:3c:65:28:1c:e5:ae:4d:ac:e1:43:81:e2:83:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:43:99:38:B3:DD:57:CD:2C:E2:70:10:7A:A3:8E:5C:8F:83:BF:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7459C17A60A311F08B5820C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.240.0/20
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
44:a0:ea:c6:dc:79:6a:fe:0a:3d:10:c6:cb:ce:26:19:d6:3a:
69:7a:69:98:1c:0d:58:2b:5a:b8:5a:55:1f:f2:e4:29:07:57:
f4:6e:1b:1b:ea:79:54:ea:39:19:37:c8:72:6f:c4:52:71:48:
93:6b:fa:67:19:cb:d1:af:85:45:71:1d:e1:ec:b1:c2:0e:ff:
27:58:c0:98:7e:bc:cf:4c:f9:63:cc:7f:a6:80:53:28:03:92:
b2:4a:6e:a7:83:b2:c4:df:4e:05:6a:aa:3b:e1:6b:8b:73:78:
3a:66:0b:95:2e:bf:34:c9:60:0d:11:c8:b2:41:1b:d1:3e:d8:
72:de:69:ef:43:34:d5:4b:39:ca:87:3b:cd:7c:01:4f:bc:5a:
44:ee:dd:ef:ca:61:96:40:2b:5d:6c:b5:f9:0c:48:46:e2:cd:
d6:69:fa:25:1c:88:9f:d6:b0:6c:5e:0f:7d:e5:5e:dc:42:06:
56:2d:83:cd:ca:d7:34:50:87:e0:d2:c5:60:b1:4c:b0:9d:70:
3c:90:aa:71:f4:44:6b:06:3b:f5:f3:0b:2c:09:48:c8:8a:40:
56:df:e8:ea:e3:91:a8:8f:d8:cc:09:e2:87:7e:bd:f9:2f:7f:
7a:bb:95:e1:1e:c6:6d:0c:46:ec:ec:71:d4:94:81:ce:7b:57:
51:49:39:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:38:49 2025 by rpki-client