Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/247BE98C8CCA11F089BFD98DDAE4EC9C.roa
File: 247BE98C8CCA11F089BFD98DDAE4EC9C.roa (raw, json)
Hash identifier: RBZz7xmy09IEnT+ravGCxQ4d4YiF+wGgIESeQ7xA6V4=
Subject key identifier: C7:8D:A6:78:74:34:41:32:56:83:F9:37:45:1A:59:0A:90:DA:2E:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0179D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/247BE98C8CCA11F089BFD98DDAE4EC9C.roa
Signing time: Mon 08 Sep 2025 15:40:28 +0000
ROA not before: Mon 08 Sep 2025 15:40:23 +0000
ROA not after: Wed 09 Aug 2028 15:40:23 +0000
asID: 17561
IP address blocks: 45.194.66.0/24 maxlen: 24
45.195.139.0/24 maxlen: 24
45.198.29.0/24 maxlen: 24
45.201.34.0/24 maxlen: 24
45.206.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96726 (0x179d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 8 15:40:23 2025 GMT
Not After : Aug 9 15:40:23 2028 GMT
Subject: CN=68bef8eb-67a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:87:ee:96:96:9f:f3:92:98:94:9d:f0:de:de:
8f:06:01:f3:02:3c:0c:7b:26:b8:0e:44:dd:29:23:
58:c9:83:b3:a2:b7:85:bf:f1:50:b3:89:df:7b:a9:
b2:0c:b9:06:4d:81:e2:27:df:20:5b:94:1f:5d:7a:
74:de:2b:b0:5d:38:8d:1c:a4:7e:e5:43:0a:83:e0:
e4:9e:ea:fb:56:98:d0:23:18:02:ce:4d:b0:a7:b4:
c1:e8:b4:20:5b:f0:39:37:28:18:6f:8f:18:2c:69:
91:92:3d:1a:02:b2:01:3b:d7:06:76:89:8d:3c:00:
f8:85:2c:62:de:9e:29:af:bb:ef:f2:4d:f1:7e:b3:
ae:14:8e:b4:9f:3a:b2:91:c6:d9:1f:79:13:c3:0b:
44:b1:a9:f3:0c:65:66:d1:dc:89:f8:ae:00:dc:83:
e0:ef:98:95:74:6e:f9:d1:a2:91:2e:51:fb:23:b8:
4a:1e:dc:ee:a2:70:e0:52:5d:8b:fb:46:eb:f8:d2:
f8:7b:aa:71:c7:dd:e9:6c:69:02:67:53:5e:02:db:
46:c7:45:a6:5f:06:20:3e:39:05:32:7a:78:94:fb:
37:62:6e:c3:3f:b3:e9:9b:f9:e2:df:d5:9e:3c:fd:
8f:49:c8:16:e6:71:15:f9:ef:96:b4:07:e0:db:36:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8D:A6:78:74:34:41:32:56:83:F9:37:45:1A:59:0A:90:DA:2E:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/247BE98C8CCA11F089BFD98DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.66.0/24
45.195.139.0/24
45.198.29.0/24
45.201.34.0/24
45.206.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:49:db:3e:3c:2a:b3:ec:36:bf:2a:42:1c:a4:44:d5:97:9c:
a1:be:35:bf:de:50:b8:89:19:d9:01:2e:cd:ba:69:a9:18:af:
16:fa:bb:e6:e7:fc:fe:14:c5:e4:dc:4c:79:28:e7:69:92:f9:
cb:b2:fd:af:0f:7e:4f:78:93:67:b5:4e:10:75:5c:43:bf:5d:
cb:0f:7d:1b:48:8d:36:77:d8:82:80:e6:97:64:50:11:f8:bd:
d9:92:2f:b1:fc:a7:da:c3:cc:58:72:c1:5e:0d:59:87:11:3e:
2f:88:e6:42:c2:ac:d6:2a:eb:45:74:ae:e6:c4:99:e0:93:8f:
a5:dd:e9:e9:66:f6:2c:df:ab:2a:86:1e:48:bd:a3:a5:a7:a3:
a8:4e:bf:d0:b9:b1:7a:74:26:65:82:b6:7a:e7:ca:e7:37:dd:
aa:4d:77:c3:83:91:e6:41:78:3c:d2:ff:48:7c:26:6c:f5:b0:
83:c8:07:c7:c8:3a:f3:97:5e:00:95:4c:9b:8d:5f:bf:e4:91:
98:fa:b0:c4:f6:f0:92:6a:3b:fa:61:0c:f3:b2:4e:0e:33:17:
dc:e9:c0:49:11:5c:e7:dd:9a:7b:f4:60:b2:eb:97:ba:7e:32:
46:f9:b3:f3:bd:82:2d:82:06:8d:4f:bf:b5:c3:34:b3:8b:c6:
ad:22:74:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:27 2025 by rpki-client