Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E407F7B4590D11F08855EC86DAE4EC9C.roa
File: E407F7B4590D11F08855EC86DAE4EC9C.roa (raw, json)
Hash identifier: OHzM2bA6KwoXgTEwhWPj9VTcg+PtVESuXO9z0/F5iho=
Subject key identifier: B0:88:9E:17:84:E5:D4:A2:41:E1:94:ED:E5:72:6B:30:6C:0A:76:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01613C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E407F7B4590D11F08855EC86DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 19:34:25 +0000
ROA not before: Fri 04 Jul 2025 19:34:20 +0000
ROA not after: Wed 10 Sep 2025 19:34:20 +0000
asID: 395793
IP address blocks: 45.192.244.0/24 maxlen: 24
45.195.133.0/24 maxlen: 24
45.201.28.0/24 maxlen: 24
45.201.29.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
45.204.147.0/24 maxlen: 24
45.204.148.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90428 (0x1613c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 19:34:20 2025 GMT
Not After : Sep 10 19:34:20 2025 GMT
Subject: CN=68682cc1-d7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:5d:d8:d9:96:be:2c:7f:39:35:25:09:b1:
16:bb:b7:bb:cd:21:8b:0b:1d:86:93:78:d8:e3:5b:
42:7a:5b:88:7a:a2:c3:36:4d:27:b2:ba:55:76:16:
d8:37:95:ff:d4:05:01:5a:c9:9b:67:02:fd:40:be:
81:c0:1f:24:78:af:b4:3d:fb:60:56:8a:aa:f6:f6:
09:1d:64:4e:14:f3:ee:ff:55:c3:ff:67:83:34:d3:
b5:81:78:8c:0f:54:41:c1:95:05:bf:bd:85:04:89:
a4:ff:93:70:a2:45:e1:e7:f6:9a:8b:3f:99:9f:b9:
da:1c:2c:f9:ac:5d:2f:db:92:ee:f6:df:28:e6:ea:
4e:ea:bc:7c:1a:94:87:18:06:7e:01:6f:a8:b3:76:
aa:b9:05:85:b4:1e:de:03:12:0d:7a:3f:1a:99:57:
76:c7:66:77:70:72:1d:6d:6f:1a:4f:57:a7:f2:4b:
3b:c8:d5:68:93:2e:82:f3:24:7b:ce:8c:67:e5:34:
ae:83:5a:9d:e9:ea:4a:e7:6f:74:11:44:ff:53:fc:
cc:0f:27:5c:4a:b1:d1:28:e0:fa:ee:45:98:e9:6a:
70:eb:df:46:12:ae:db:71:f3:fa:dc:7f:08:c1:1b:
af:02:fa:1c:09:24:d5:49:cc:41:d9:53:ef:a9:f4:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:88:9E:17:84:E5:D4:A2:41:E1:94:ED:E5:72:6B:30:6C:0A:76:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E407F7B4590D11F08855EC86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.244.0/24
45.195.133.0/24
45.201.28.0-45.201.32.255
45.204.147.0-45.204.151.255
Signature Algorithm: sha256WithRSAEncryption
bb:9e:01:23:3a:44:f0:a5:11:41:c7:31:7b:6a:33:60:4a:14:
fe:48:d5:70:3a:4e:36:38:14:d8:54:e1:71:9f:6c:be:b5:53:
12:52:13:cf:c4:3e:3e:31:d4:4f:c6:20:45:40:ec:94:2c:05:
95:78:39:a6:d7:43:bb:fc:a4:bd:c4:42:19:60:22:c6:a9:03:
58:59:c0:8f:69:cc:b1:cf:0a:c9:56:ca:1f:34:e3:e8:0c:12:
cc:7f:04:2e:b0:26:6f:15:0c:9d:3b:de:bb:b3:54:34:d3:91:
2a:fb:17:b8:7b:89:ed:fc:fd:da:5b:73:ff:db:9c:89:1b:64:
71:76:7a:cd:35:67:aa:b9:d6:9a:6d:25:2d:0a:de:8e:af:52:
5d:83:71:e0:13:c0:b3:69:3a:e5:22:12:3a:ce:b1:6b:da:d5:
d4:78:b4:24:dd:e5:6f:27:bb:f1:12:a2:bd:c7:b7:94:05:9e:
74:df:67:73:f6:b1:98:f1:d2:a8:4c:f7:d6:69:3c:57:0d:df:
59:75:44:b9:b3:d8:a1:7b:ce:fb:24:65:92:3e:97:19:2a:d1:
08:b7:34:1d:da:be:44:88:cf:d1:3c:d8:d0:93:1d:c8:55:d4:
d4:8b:94:e2:1b:11:b3:84:38:5d:23:00:de:47:69:96:ef:70:
b3:8d:5f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:15:46 2025 by rpki-client