Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED5DD5BC634511F099F8CBF2DAE4EC9C.roa
File: ED5DD5BC634511F099F8CBF2DAE4EC9C.roa (raw, json)
Hash identifier: 9YKseqavatoaDlJZuo9DX6sEALjHGD3jdBBS6tHe9I0=
Subject key identifier: 38:10:59:F2:4D:17:90:07:4C:16:0F:8D:0F:D0:E1:D4:FB:03:CD:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED5DD5BC634511F099F8CBF2DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 19:40:44 +0000
ROA not before: Thu 17 Jul 2025 19:40:37 +0000
ROA not after: Tue 12 Aug 2025 19:40:37 +0000
asID: 52468
IP address blocks: 45.195.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91636 (0x165f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 19:40:37 2025 GMT
Not After : Aug 12 19:40:37 2025 GMT
Subject: CN=687951bc-b794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:f5:42:93:ab:dd:98:b2:47:2b:ca:22:15:
14:4b:0e:d5:24:56:4e:a8:10:1c:c9:45:90:23:ff:
0e:60:88:59:d7:ae:3c:6b:d2:bd:8a:88:88:90:a7:
d4:50:9b:dc:80:e7:20:bb:d5:b5:5e:31:dd:b3:58:
7c:85:2b:ad:fc:a0:2b:ba:c2:9c:a8:7c:40:66:3b:
07:1c:4e:63:a2:01:34:ed:c2:1e:b3:18:7a:3a:6d:
f6:c8:d0:e1:2d:97:ec:28:06:08:bd:74:14:7e:bb:
c9:d6:5f:b6:75:48:53:02:7a:29:fd:53:5a:f0:12:
af:73:8b:06:80:4a:1a:8f:03:a6:72:ab:42:cf:9d:
09:6f:4c:e5:ee:6d:b6:f8:a3:80:98:c4:53:ed:9d:
fa:9f:28:a3:e9:54:9e:31:3e:92:80:1f:76:a8:d6:
f7:8e:a6:e9:b4:5d:f9:79:a1:1a:37:80:d6:80:a6:
1d:ca:36:30:26:ae:06:68:2e:85:7d:32:f5:f6:83:
6a:c8:bd:e9:67:e8:5d:e9:de:cb:f7:27:f0:c4:6e:
c7:b8:6b:33:a4:8f:45:32:2f:b1:b9:0c:cd:54:8e:
36:ec:f0:23:63:73:c7:c7:56:fc:c3:c1:13:c3:0d:
b9:c8:76:8c:08:cd:a6:bf:c2:30:1d:cd:27:d4:8b:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:10:59:F2:4D:17:90:07:4C:16:0F:8D:0F:D0:E1:D4:FB:03:CD:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED5DD5BC634511F099F8CBF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.95.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1a:45:2f:a7:9b:23:d5:e1:e6:6b:d0:10:3b:96:b3:45:87:
3a:40:6b:e2:92:fb:1c:d7:66:ee:a5:38:25:2e:48:71:80:fb:
3b:f8:0c:e6:f0:98:a7:b9:f0:c6:05:a0:ca:b4:74:0c:42:52:
4d:ec:d2:d2:c4:da:7c:c0:57:06:66:d9:d0:ed:bf:c8:99:0c:
e9:21:39:a8:ef:c2:b5:5c:fd:c8:0f:dd:0e:9e:d6:00:ea:00:
c5:9f:e7:8d:db:bb:bd:3a:c1:5d:06:8b:65:a4:a4:8e:8b:04:
06:5c:ce:1f:74:5e:ba:cb:3e:3f:76:55:1b:82:ee:42:13:cf:
51:00:cf:56:ba:b3:32:9b:a0:26:d8:21:8c:ba:1d:9e:33:8f:
8a:91:be:12:bd:8c:c6:da:e9:24:c3:d1:6f:82:68:11:b3:ee:
72:fb:2d:a6:b8:d4:23:12:36:55:b7:ee:8f:a0:0e:af:22:9f:
10:8f:7e:17:f8:e3:d6:ab:e0:54:5f:cb:eb:3b:97:38:d8:6a:
bd:a3:b4:2d:ec:9f:08:70:a3:05:47:96:2b:d7:2c:ec:45:ec:
aa:a5:5d:99:68:0c:a7:b9:75:12:77:f1:53:e1:40:29:46:06:
30:c3:41:a2:a5:c7:dc:67:b6:5b:23:9a:10:ca:08:06:3c:3a:
c1:9e:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:29:46 2025 by rpki-client