Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C26E39A597F11F08674C0F6DAE4EC9C.roa
File: 7C26E39A597F11F08674C0F6DAE4EC9C.roa (raw, json)
Hash identifier: iAjTufjXer7r6p8ZiZupjZFNMRRQVMPH7xQUmL93C0k=
Subject key identifier: 4F:3E:6F:62:B7:52:73:95:F9:75:F4:BF:6C:14:B0:1C:5B:EA:48:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016177
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C26E39A597F11F08674C0F6DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 09:07:33 +0000
ROA not before: Sat 05 Jul 2025 09:07:28 +0000
ROA not after: Thu 07 Aug 2025 09:07:28 +0000
asID: 271907
IP address blocks: 45.195.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90487 (0x16177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 09:07:28 2025 GMT
Not After : Aug 7 09:07:28 2025 GMT
Subject: CN=6868eb55-1259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:22:e5:7b:df:e1:88:2f:e8:a1:7a:de:3b:
cd:97:53:f4:39:c3:98:91:54:fb:69:8c:e6:86:c2:
3c:c9:6b:de:e9:d9:15:2d:f0:30:ce:f1:dd:6e:e9:
2a:02:79:8d:7d:c4:ba:9d:90:7e:25:5b:31:ae:e1:
83:01:de:e4:d9:57:7e:57:e0:d8:bb:ee:ec:c9:8c:
48:69:f5:d1:e9:ae:56:6d:ec:95:ec:70:db:88:90:
b8:a2:f6:0e:29:7e:10:7b:85:4a:e5:10:d3:54:fa:
0e:6d:98:5e:54:43:ff:48:41:f7:36:c1:63:ed:68:
44:8a:86:65:a9:39:78:c6:b6:00:06:72:8c:23:60:
4c:3a:e0:c3:ad:d9:a2:d6:77:b2:04:13:1d:d0:1a:
44:c2:d1:d0:3c:c2:b9:33:95:e5:2b:40:3d:f8:3d:
66:bf:0d:7d:f6:a5:c7:cc:86:02:02:ee:8c:77:fa:
39:d4:e1:e2:92:98:b5:fc:8a:62:4f:52:31:72:ea:
a9:85:fe:35:8d:54:c7:9f:60:35:bc:44:fc:0f:4e:
e8:26:ef:a7:3b:7b:f4:09:62:93:3b:47:d7:90:ec:
37:bc:35:b1:18:bc:27:84:9e:f1:2c:75:c2:ac:2a:
65:3f:57:ea:67:5a:e0:96:e8:56:0c:6f:f9:f9:cf:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3E:6F:62:B7:52:73:95:F9:75:F4:BF:6C:14:B0:1C:5B:EA:48:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C26E39A597F11F08674C0F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:e8:93:64:27:16:76:9c:1f:7a:3b:6f:ff:4b:e0:87:41:49:
68:54:06:94:bd:0d:36:2d:90:00:9d:fc:d2:57:02:99:b8:71:
3b:67:63:52:4f:f4:1d:29:2d:31:ca:4f:f1:ff:f6:c1:00:4d:
3d:d7:bc:db:26:53:f7:fb:ea:d2:81:7a:44:a7:14:d6:93:43:
32:d6:a0:2a:5f:97:4f:d5:a9:68:bf:74:b5:f6:da:27:27:76:
be:2f:01:43:e0:d4:a0:50:e4:e5:42:0e:bf:9f:0d:9e:4f:63:
e3:68:99:55:28:b7:f8:ad:b5:d3:5c:cc:28:46:10:9e:37:d6:
42:1c:5c:2c:5e:20:0b:35:f2:29:76:69:b6:df:ae:51:cc:1c:
16:93:82:ca:9d:57:cc:9a:0c:85:28:37:e3:81:0d:f2:91:2b:
94:0a:40:e4:fb:94:46:5f:a2:e9:ce:4b:3c:57:c4:64:d4:c0:
00:85:c1:61:84:06:d0:6e:a9:f0:08:95:99:50:f0:da:59:cf:
02:6d:94:93:06:0e:27:4a:50:4a:4b:3f:ee:f9:90:e5:99:13:
23:68:4f:0b:bd:61:7b:c6:73:ad:c5:d5:e3:d3:e1:b9:e9:fd:
a3:bb:3d:44:d2:9b:e3:a1:1b:8e:4c:64:2f:d8:68:cc:33:aa:
68:98:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:44:27 2025 by rpki-client