Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06AE0E6E889511F09F09D5BCDAE4EC9C.roa
File: 06AE0E6E889511F09F09D5BCDAE4EC9C.roa (raw, json)
Hash identifier: PGmCHvZYQms0YXLjeh6KUVscgHRT23oQfjfWFKQmO/g=
Subject key identifier: 95:2C:5A:2D:06:87:A4:64:3F:91:B5:0B:6A:9D:07:74:11:3A:61:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017742
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06AE0E6E889511F09F09D5BCDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 07:10:10 +0000
ROA not before: Wed 03 Sep 2025 07:10:02 +0000
ROA not after: Tue 30 Sep 2025 07:10:02 +0000
asID: 401783
IP address blocks: 45.197.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96066 (0x17742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 07:10:02 2025 GMT
Not After : Sep 30 07:10:02 2025 GMT
Subject: CN=68b7e9d1-f896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:8f:7b:31:85:79:6a:f6:ec:77:91:98:45:
73:a3:b9:45:7b:47:d6:aa:60:59:be:e7:f0:ef:d4:
5e:4f:a6:fb:bf:6c:6b:66:f7:6e:e8:f3:36:f7:56:
c4:0a:ae:9d:d4:5b:a5:01:df:bb:7d:0d:91:cd:e5:
fc:52:e6:ae:e5:f2:c9:16:ea:d5:f6:ef:c7:ff:d3:
a9:7d:a3:42:b3:a1:6e:c2:1e:bd:af:fe:bb:ae:82:
d1:31:b1:7f:3f:79:d5:3b:0a:18:03:a4:89:21:3e:
c4:f0:a1:9f:ce:7e:9f:9a:a3:75:60:52:c9:67:a8:
e4:33:d2:da:49:e6:87:cc:af:93:d6:99:a2:d0:33:
64:f9:6e:97:be:5c:f0:96:97:bd:75:25:5b:da:7b:
4a:26:eb:db:83:06:77:f5:1d:ac:b2:cc:ae:2a:d3:
b9:09:18:90:73:dd:7a:2a:54:d3:de:e4:5e:94:ec:
80:23:9a:99:cb:a0:23:43:a2:d2:5d:fc:da:48:da:
26:64:7a:9c:b0:93:a7:40:d2:a2:df:60:4d:6f:b0:
7d:d5:22:a8:5b:6b:0b:88:fd:df:db:57:e2:07:61:
89:c9:60:4f:87:6a:96:03:d0:c4:af:40:cd:cc:76:
26:82:48:17:c2:7f:4d:73:47:0f:2d:aa:f6:9e:68:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2C:5A:2D:06:87:A4:64:3F:91:B5:0B:6A:9D:07:74:11:3A:61:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06AE0E6E889511F09F09D5BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.24.0/24
Signature Algorithm: sha256WithRSAEncryption
34:cd:da:2c:68:76:02:9c:aa:78:a7:25:b7:2b:ae:bc:27:d1:
64:7b:02:78:e1:f5:bd:c1:8e:2a:5e:38:17:90:91:28:4b:22:
1a:32:37:0c:e4:85:28:cf:92:d6:ad:4b:3b:cc:cc:20:3e:3e:
f1:26:78:32:62:aa:ee:62:61:ea:ea:a2:d0:dd:a5:fa:e4:19:
e9:4c:a2:d7:37:7d:db:65:e7:2b:20:06:e7:6b:a1:32:9a:5b:
80:85:99:5d:84:7f:39:26:d4:9f:98:d8:5f:67:f7:4e:47:f7:
fb:ac:f8:ba:01:9c:81:f3:a7:4a:2c:ed:b1:4e:1d:41:ca:26:
5a:85:1a:fc:79:c1:9a:fa:71:92:e5:3f:cd:13:69:34:4e:2a:
74:0c:cf:62:52:ac:59:28:d9:18:b1:ca:5c:b4:37:fa:1a:6e:
fc:f7:25:30:76:c3:b1:0d:18:e0:08:d3:fe:84:94:ef:12:39:
54:6b:30:c7:1f:96:d9:c8:3f:66:b5:4a:48:8b:63:16:8c:a4:
db:cb:86:99:39:40:76:c7:c5:53:46:a5:bc:cb:47:f9:65:15:
8b:53:2a:56:03:d0:ab:7c:ed:8a:3c:fe:cd:a6:71:26:62:66:
3f:e1:9d:c3:ad:6b:8c:f3:a6:f9:22:e3:12:a9:6f:43:94:1b:
02:a4:4e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:02 2025 by rpki-client