Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F7746444E8211F08B47F57EDAE4EC9C.roa
File: 9F7746444E8211F08B47F57EDAE4EC9C.roa (raw, json)
Hash identifier: 7e3Jr0vJorBtwrOjMtu4VVCqxPjg35z8sKRcmV25xAo=
Subject key identifier: D2:31:9F:42:18:87:8C:1B:23:15:BC:1C:A9:8F:BC:C6:8C:EF:BB:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015DA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F7746444E8211F08B47F57EDAE4EC9C.roa
Signing time: Sat 21 Jun 2025 09:32:18 +0000
ROA not before: Sat 21 Jun 2025 09:32:14 +0000
ROA not after: Sun 27 Jul 2025 09:32:14 +0000
asID: 6079
IP address blocks: 45.197.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89504 (0x15da0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 09:32:14 2025 GMT
Not After : Jul 27 09:32:14 2025 GMT
Subject: CN=68567c22-c296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:f1:e0:62:b7:94:ff:c9:f8:48:fb:22:6f:
09:d4:28:35:df:89:c4:7e:42:73:9b:fa:28:94:9a:
df:70:f7:87:6d:0d:58:21:7a:6c:28:4c:3b:64:88:
ec:58:3c:de:72:9d:df:67:b6:8b:82:f8:c8:70:9d:
89:51:3e:52:4c:cf:a4:3f:86:b6:d8:3d:a9:13:eb:
7f:33:bb:eb:25:bd:0b:f1:46:f1:6f:39:25:62:45:
22:30:a6:b1:07:f0:9b:cf:af:51:bd:96:6c:c5:88:
41:17:07:17:d4:2f:41:25:3d:06:7c:2c:e6:2f:05:
89:9e:5f:3f:bb:3f:fb:85:7a:99:99:eb:dd:68:9b:
1b:f4:44:b4:52:e8:3d:4e:fa:9f:2a:25:86:0f:06:
64:43:f4:77:d6:5b:94:bb:54:aa:f8:bb:9d:2b:e8:
e6:76:3b:ab:fd:4a:a4:5c:4b:db:c0:3f:8c:24:35:
68:50:f9:0b:a5:9c:b2:0c:3c:bc:41:3c:b5:2a:d8:
1b:be:c0:87:55:0c:2e:6f:3e:05:db:04:9d:71:4f:
20:45:09:71:fb:68:77:93:01:ac:d6:2a:0a:ce:f2:
89:09:b9:fd:09:41:62:15:ba:66:6b:83:fb:e4:e5:
a4:11:0b:66:72:3a:a4:6a:3f:e7:cc:19:ef:42:2c:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:31:9F:42:18:87:8C:1B:23:15:BC:1C:A9:8F:BC:C6:8C:EF:BB:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F7746444E8211F08B47F57EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.240.0/20
Signature Algorithm: sha256WithRSAEncryption
63:e7:d5:29:3d:92:ff:4b:63:c2:c8:7d:1d:b3:a3:a8:57:84:
53:91:0c:0b:69:7e:06:e8:67:da:7d:4e:dd:00:ce:36:3f:fd:
3d:56:b8:c4:4c:ea:66:ea:c4:1a:66:0f:8d:69:54:aa:71:86:
a3:e5:61:1a:ec:f1:08:64:ec:b1:08:db:cd:f7:70:2c:f2:d4:
a8:7a:86:a4:69:b2:0b:09:59:29:b7:8e:93:7b:3d:f9:82:ed:
d8:ed:a0:8e:93:32:03:56:15:76:04:99:e7:4b:67:ae:76:10:
31:77:3f:3c:5f:9b:9c:85:1b:b3:4a:7a:f6:44:4e:e2:9e:a8:
70:05:29:03:94:36:0a:fc:eb:7f:14:51:a2:cc:8d:6f:24:98:
03:ce:0c:87:a1:1b:a1:54:7c:d4:45:c6:ce:e5:5e:a5:35:d8:
86:57:f9:0a:7b:2e:80:c4:26:f6:94:5c:90:ee:4f:ba:0e:55:
e8:12:12:3b:d5:30:d4:d1:1e:18:73:06:db:a1:31:fa:e2:06:
9c:32:a9:8c:3a:01:62:de:a8:78:40:d1:6c:42:ef:30:a5:14:
2c:72:f9:dc:e1:ef:59:66:9d:7a:c6:79:7a:9d:53:4a:35:9b:
15:ad:bf:ed:13:25:d7:3f:c8:03:1e:bb:0b:7c:b2:14:28:6b:
c0:be:1b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:37 2025 by rpki-client