Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A84B87185B1011F0B36A90ABDAE4EC9C.roa
File: A84B87185B1011F0B36A90ABDAE4EC9C.roa (raw, json)
Hash identifier: q8Uc6+gzoCEGQ/imIRlvezWbuWTcmetT+9OU0b8hw+E=
Subject key identifier: 06:40:84:4F:71:C1:E9:A8:10:50:2B:F9:17:DD:13:CF:D0:62:D9:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0162DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A84B87185B1011F0B36A90ABDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 08:59:15 +0000
ROA not before: Mon 07 Jul 2025 08:59:10 +0000
ROA not after: Sat 09 Aug 2025 08:59:10 +0000
asID: 211241
IP address blocks: 45.192.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90846 (0x162de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 08:59:10 2025 GMT
Not After : Aug 9 08:59:10 2025 GMT
Subject: CN=686b8c63-832e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:06:ce:97:fb:36:d0:82:4f:c5:e6:0b:ce:
23:64:73:46:5d:dd:99:f6:f9:b9:9b:b4:e8:16:f3:
89:c5:29:a3:d6:f4:aa:7e:1d:da:3f:26:27:57:55:
f9:84:09:9f:dd:e3:57:2e:d7:48:e8:4f:16:b5:92:
40:18:09:f3:dc:32:eb:23:12:a5:d2:da:57:cd:14:
07:cb:22:50:b8:7c:15:ba:d0:bc:d5:32:0e:36:2d:
f7:ea:29:f0:2f:8e:9e:66:bc:0c:6f:51:d8:ff:21:
ed:ed:38:32:a5:cd:c2:7e:05:2d:3c:47:f8:3c:8c:
cc:2b:e5:0b:97:73:df:ef:f4:c0:20:7f:fa:e9:f0:
2e:db:b9:7d:d8:b0:5a:cf:d2:36:89:14:09:c7:72:
e6:09:1a:19:70:bf:98:52:6e:af:8b:8d:f1:cf:fa:
ec:4a:9b:61:d5:30:1d:42:26:cf:83:f4:b5:b1:37:
f8:30:02:e8:14:fd:17:e9:35:64:d7:62:fc:0e:50:
43:02:22:61:31:b4:be:5f:bd:38:97:15:6f:81:5a:
17:a5:e0:5a:b1:ef:1e:5b:bb:23:71:a4:34:a3:da:
49:97:56:47:ec:5b:9b:16:74:64:9c:2a:6a:f9:33:
2f:bc:c6:47:04:89:95:cd:04:c3:43:31:19:92:8f:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:40:84:4F:71:C1:E9:A8:10:50:2B:F9:17:DD:13:CF:D0:62:D9:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A84B87185B1011F0B36A90ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.19.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1e:31:9f:fb:bd:1c:ab:65:54:45:d8:f9:e4:8b:75:7d:7a:
4b:43:81:a3:41:7e:51:13:5c:ca:43:59:c5:4e:55:e6:13:c0:
e2:ec:e9:f5:70:01:ab:c4:99:72:dd:e6:38:91:ad:3e:7c:b7:
87:17:61:3f:8c:a2:03:e1:1e:bc:46:9c:e2:50:b0:9c:1c:52:
99:1b:2c:fc:5e:f6:45:5a:80:57:0b:1d:4b:fe:5d:7d:b3:d7:
10:16:cd:b1:3c:b3:04:d2:e5:3f:61:19:65:3f:50:41:7b:af:
91:0b:87:b3:95:95:fe:78:6a:58:1b:96:53:e7:8c:50:d6:ad:
c9:61:2c:6c:3c:cd:f7:d6:01:9e:8c:1f:0f:35:08:30:db:fc:
c4:fd:2b:34:9e:e5:52:ef:6c:87:b7:16:b8:c7:ec:9d:a6:7d:
82:7a:b5:e3:6a:fd:0f:39:dc:78:70:13:2c:db:e2:07:6d:57:
e2:de:b6:a0:c9:a4:7e:6c:40:11:23:b5:ef:35:6e:8a:2d:7d:
ff:a1:76:fd:34:8e:60:9d:e7:f7:f9:5d:c3:a2:bb:fe:61:e0:
3e:e3:b2:af:2d:9e:50:80:6e:39:4e:fa:52:96:c5:39:55:90:
92:d7:ef:4d:b3:7d:f6:30:d9:5d:4b:51:30:d8:9b:d6:d7:3c:
c0:c6:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:47 2025 by rpki-client