Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF433E5663A411F0BE3495EADAE4EC9C.roa
File: BF433E5663A411F0BE3495EADAE4EC9C.roa (raw, json)
Hash identifier: 6A6fqftIzXH88V6Y2UDUIXdcxwvbiLEQxdDrzw1+m/w=
Subject key identifier: 71:65:1F:31:3D:56:78:8B:95:28:69:B5:AA:B2:30:53:53:5D:21:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF433E5663A411F0BE3495EADAE4EC9C.roa
Signing time: Fri 18 Jul 2025 06:59:29 +0000
ROA not before: Fri 18 Jul 2025 06:59:23 +0000
ROA not after: Sat 23 Aug 2025 06:59:23 +0000
asID: 395793
IP address blocks: 45.192.115.0/24 maxlen: 24
45.194.0.0/24 maxlen: 24
45.194.12.0/23 maxlen: 24
45.194.24.0/24 maxlen: 24
45.195.255.0/24 maxlen: 24
45.201.16.0/21 maxlen: 24
45.201.24.0/23 maxlen: 24
45.201.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91643 (0x165fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 06:59:23 2025 GMT
Not After : Aug 23 06:59:23 2025 GMT
Subject: CN=6879f0d1-bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:95:43:6f:96:91:f6:d3:c3:fe:08:17:b5:
d0:dc:7a:2e:d1:33:37:ab:ee:d4:1b:db:2d:d1:83:
07:30:c2:cd:ff:f9:10:2a:69:dc:dd:21:88:88:54:
65:84:cb:50:ef:b8:38:8a:33:b2:1c:9e:b3:56:f1:
fb:6c:3c:f6:17:a9:12:f7:0e:87:83:c5:87:f4:0b:
03:e5:25:70:66:16:30:f2:d5:5b:f6:90:a0:f5:d9:
24:55:96:16:85:7e:fa:a9:bf:2b:14:96:50:5d:fc:
8a:0d:fb:7f:95:c0:49:7f:35:f6:a7:74:e3:53:87:
9a:bf:0c:ca:32:19:f3:b2:de:2f:e6:07:12:b7:59:
9a:80:f3:a2:90:e6:62:9a:4b:8b:41:28:2b:f8:55:
e4:67:00:32:8a:dc:9e:08:52:de:3a:f7:5b:1b:c7:
73:50:3b:3d:40:8e:17:a3:fe:ee:24:81:89:2f:42:
37:f7:6b:0f:e7:28:a7:b5:16:e6:1f:cb:8b:50:50:
66:e1:74:96:bf:4e:b1:11:a6:ca:cd:87:0a:6b:96:
39:a6:a6:82:b3:88:9a:b0:00:b6:f3:3b:c3:9d:16:
0d:a8:48:e7:d6:09:6d:d3:23:a4:1a:e3:b8:48:00:
44:cc:62:71:a3:57:d6:19:9a:96:6b:be:ab:b8:b6:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:65:1F:31:3D:56:78:8B:95:28:69:B5:AA:B2:30:53:53:5D:21:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF433E5663A411F0BE3495EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.115.0/24
45.194.0.0/24
45.194.12.0/23
45.194.24.0/24
45.195.255.0/24
45.201.16.0-45.201.26.255
Signature Algorithm: sha256WithRSAEncryption
40:c7:96:1d:f4:cf:84:26:9c:0e:7e:64:80:33:6e:a2:fe:22:
83:0d:06:52:f3:83:91:9a:38:47:cd:5e:0a:7c:30:47:3c:3f:
17:72:0e:89:f5:67:05:bc:54:8b:3f:79:ce:f1:9e:a2:6a:0e:
77:d6:7b:3b:f0:8a:50:0f:48:d9:6b:23:08:e3:34:74:ae:31:
17:07:67:ee:82:4e:63:f3:cf:b2:b4:ed:1e:ca:71:e9:76:a3:
d0:ea:97:05:f0:6a:c4:7c:da:b0:bb:b3:ff:2b:9a:80:f4:2d:
bc:e8:10:d7:24:38:0a:0b:a4:72:37:b1:38:fe:1b:3e:b4:1b:
a9:bc:3d:79:62:bc:1e:09:11:38:93:5a:21:03:e6:a8:02:0e:
3a:63:04:b0:48:46:73:17:a9:94:2f:16:e9:ba:23:c7:e5:2a:
4c:6a:29:bb:73:38:59:78:0e:77:9e:b8:13:4d:50:25:7a:2e:
aa:91:36:74:06:30:cb:52:90:5b:73:62:99:95:ee:68:ac:53:
35:9c:f3:d9:d5:ad:9c:0b:d0:bc:d7:e8:74:3a:ac:23:1e:77:
42:47:e4:32:d6:95:6c:e0:db:95:a8:22:e5:5b:cb:e4:11:f3:
ef:88:25:11:c8:57:4b:a3:2d:24:df:28:57:96:32:8b:4f:ef:
cd:91:5e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:45:34 2025 by rpki-client