Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3BFE3CC5CB711F09B4DD9EEDAE4EC9C.roa
File: E3BFE3CC5CB711F09B4DD9EEDAE4EC9C.roa (raw, json)
Hash identifier: uxBw7nTrwRepm4EF9gc+KTIRglHyWDtWkxqam4B6S60=
Subject key identifier: C8:20:89:34:EB:99:48:A2:B2:94:75:13:A7:68:CE:63:90:F0:55:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0163B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3BFE3CC5CB711F09B4DD9EEDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 11:28:52 +0000
ROA not before: Wed 09 Jul 2025 11:28:47 +0000
ROA not after: Sat 09 Aug 2025 11:28:47 +0000
asID: 14315
IP address blocks: 45.197.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91058 (0x163b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 11:28:47 2025 GMT
Not After : Aug 9 11:28:47 2025 GMT
Subject: CN=686e5274-e8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:34:f2:8f:06:fd:a0:33:fd:54:47:f8:d6:
19:90:52:77:29:03:8a:90:35:4b:c9:58:0e:dd:85:
de:8a:66:78:47:48:c3:55:65:12:f7:d3:3d:e5:9b:
72:f5:7b:f0:7a:20:de:61:c6:78:a0:21:2a:14:67:
a8:68:74:67:de:42:39:ee:5d:65:bf:14:85:a5:8e:
22:d7:bd:cd:91:67:33:c2:11:1b:c6:eb:25:94:30:
0e:21:19:94:eb:27:aa:31:b2:dc:ee:e1:85:b5:2f:
4a:4e:a6:e4:f8:ce:bb:0e:a2:a4:99:bc:a0:78:04:
d5:01:4f:74:d6:1e:43:d2:4e:e1:26:11:dc:c5:7a:
87:05:1e:7a:01:8a:d0:10:12:5a:d2:36:b2:d2:ac:
79:1d:ed:9c:f8:0d:72:a5:40:91:f8:7d:88:01:f6:
f2:73:57:46:2f:70:5e:7a:05:77:16:a2:65:ad:17:
7b:88:b9:b5:55:63:1c:ce:00:ed:e9:df:43:8e:da:
c1:15:0a:e8:5e:b7:1e:e5:63:de:95:b2:a7:46:a1:
46:a8:48:6c:cf:53:bd:5c:9b:9c:d5:65:8f:16:a0:
c7:55:43:b9:da:d8:6d:b9:73:4b:3f:dd:3c:58:43:
56:e5:9c:8d:69:fb:53:64:e2:4c:80:14:de:77:42:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:20:89:34:EB:99:48:A2:B2:94:75:13:A7:68:CE:63:90:F0:55:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3BFE3CC5CB711F09B4DD9EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.137.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fa:35:1f:6c:08:d7:64:ae:da:20:20:19:94:68:43:01:7d:
74:b6:d7:83:84:b0:f5:11:aa:0a:62:68:c3:d6:c0:05:8d:02:
64:97:48:d5:83:b6:68:28:91:11:77:a6:25:9e:63:c8:7a:ed:
84:76:93:a8:5f:12:59:39:e2:bd:27:15:34:bf:3f:7a:5e:1b:
7b:49:66:41:e1:ef:33:be:02:28:92:d0:7f:23:cb:06:d6:cb:
55:51:3d:0c:26:9b:51:a4:39:06:72:b4:48:fd:6a:41:cc:4f:
cb:52:b9:d4:60:51:70:d6:2b:ae:69:06:a0:4c:80:2f:4e:1d:
d5:6f:f8:8b:35:24:fb:91:89:2e:a0:8e:54:ae:50:b7:34:df:
3d:ee:87:ed:d0:44:8a:d2:bb:53:36:79:ad:fd:13:3b:24:d2:
5f:1f:71:4f:d9:45:82:54:c7:69:66:f3:08:08:d9:ad:6a:40:
68:c1:c4:2e:3e:75:b9:87:76:99:f9:ed:21:2e:33:60:c9:52:
74:e0:81:55:e9:33:1e:c5:4a:3e:2f:a6:e4:75:43:20:93:de:
fd:40:67:47:17:18:75:39:84:b5:29:9b:af:8b:0a:35:0a:a1:
ea:9a:cc:f2:d5:5b:76:43:c3:9e:8c:57:ac:9a:6d:c1:96:84:
c8:0b:d8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:31:21 2025 by rpki-client