Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74F8206458CD11F0885377EADAE4EC9C.roa
File: 74F8206458CD11F0885377EADAE4EC9C.roa (raw, json)
Hash identifier: KI+OS2Y/cKnqgELAJZ0JeE/q/DU0eyGLtSikQLppQiM=
Subject key identifier: 43:F4:02:1A:B0:72:ED:20:36:B0:35:F1:47:E5:DD:53:09:8D:9B:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74F8206458CD11F0885377EADAE4EC9C.roa
Signing time: Fri 04 Jul 2025 11:53:11 +0000
ROA not before: Fri 04 Jul 2025 11:53:06 +0000
ROA not after: Sun 10 Aug 2025 11:53:06 +0000
asID: 32043
IP address blocks: 45.192.120.0/21 maxlen: 24
45.194.114.0/23 maxlen: 24
45.194.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90364 (0x160fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 11:53:06 2025 GMT
Not After : Aug 10 11:53:06 2025 GMT
Subject: CN=6867c0a6-ac66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:4f:fc:e4:76:b0:26:84:30:c6:25:de:8a:
e8:40:92:37:72:f6:3e:f7:d8:7b:89:db:db:e7:e4:
9e:f0:a1:50:c5:54:d6:40:6f:12:f7:24:1f:d6:6a:
46:31:06:d0:60:36:9b:e3:0d:a9:17:bc:97:87:cc:
8e:5f:38:44:3b:bb:0f:b9:3f:93:34:1d:72:ee:bd:
fd:ba:a6:da:7a:eb:97:fe:23:e6:62:43:da:da:97:
30:d4:97:7b:c8:fc:d5:2b:d2:7b:8d:e8:58:37:f9:
4f:3a:6c:8c:20:eb:e6:45:98:9f:55:fc:da:84:2c:
07:b6:b5:1e:94:a3:7d:37:0a:7d:13:f7:63:79:59:
44:31:1f:65:19:bf:f5:38:56:04:f4:24:95:e2:86:
53:78:09:20:6f:f3:a9:01:a2:f9:c5:77:af:d1:e0:
40:4c:2b:c9:2a:2c:27:64:dd:cd:22:7e:f1:e4:64:
0b:51:2f:6d:87:f4:dc:86:01:50:85:49:74:13:fb:
3c:77:02:1f:29:cc:47:05:ae:b7:1d:16:c2:1e:1e:
05:6f:3a:06:6a:b9:02:9b:83:5e:fb:24:ee:ae:b0:
6b:6f:11:3a:42:ff:08:f0:ab:34:e6:31:eb:bb:c6:
2b:e5:4e:3e:41:fc:c4:ad:d4:05:90:84:c9:ad:79:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F4:02:1A:B0:72:ED:20:36:B0:35:F1:47:E5:DD:53:09:8D:9B:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74F8206458CD11F0885377EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.120.0/21
45.194.114.0/23
45.194.118.0/24
Signature Algorithm: sha256WithRSAEncryption
68:93:a0:7e:55:33:46:88:e9:e8:38:5b:08:59:0f:56:63:99:
80:ea:d0:ab:ec:17:93:e3:09:e3:3a:0e:89:8b:b6:d3:e0:56:
26:3b:35:51:a3:ca:6b:50:ea:76:70:c1:55:60:80:3b:64:36:
e7:17:e3:a7:0f:f8:69:ab:03:92:30:b8:7d:a2:43:8b:0a:0b:
82:04:d1:05:61:b4:eb:17:8f:54:97:bd:77:56:90:16:d0:c0:
4c:d3:98:5f:86:b3:6a:fe:f5:6f:c0:9d:09:0b:76:04:71:17:
2f:40:c8:d3:b7:cc:ce:8b:e0:37:91:73:c5:2d:d1:93:81:cf:
1a:2c:00:ca:15:b8:1f:5f:bb:b2:28:1e:cc:fe:cd:dd:3e:4f:
91:80:09:b5:1f:df:2b:e1:8a:c2:c6:99:2b:5d:3a:bb:70:f7:
59:02:1b:ad:83:06:ff:df:b7:c6:c9:bc:71:5c:a0:c6:df:69:
91:06:20:cc:67:3b:8e:56:e0:50:cf:4b:13:2f:68:b6:83:93:
b9:bd:8d:08:2c:9c:5c:16:93:c6:69:42:5c:6f:d8:fc:88:24:
ac:14:27:37:8a:71:21:28:e3:cf:7d:8c:e4:36:a5:b6:45:db:
56:d7:87:87:06:be:fb:f2:95:cc:b7:57:19:ec:b5:c4:bb:7f:
31:87:28:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:35:38 2025 by rpki-client