Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2725B8104B7B11F086AC5CAFDAE4EC9C.roa
File: 2725B8104B7B11F086AC5CAFDAE4EC9C.roa (raw, json)
Hash identifier: C3JwS125q5jA3fw+Tbx+dHEx226TOj1z0NdDOAqWz4g=
Subject key identifier: FE:F1:36:E7:8A:7F:1C:A4:D7:19:12:1C:B2:9B:7F:F3:DD:6D:EE:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2725B8104B7B11F086AC5CAFDAE4EC9C.roa
Signing time: Tue 17 Jun 2025 13:01:16 +0000
ROA not before: Tue 17 Jun 2025 13:01:11 +0000
ROA not after: Thu 17 Jul 2025 13:01:11 +0000
asID: 398823
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89256 (0x15ca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 13:01:11 2025 GMT
Not After : Jul 17 13:01:11 2025 GMT
Subject: CN=6851671c-eec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:cc:be:a8:1c:21:e4:52:7a:c3:06:21:97:
42:bd:86:b8:c6:39:10:f6:7c:07:67:5b:7e:aa:4e:
a9:52:13:34:24:d3:3a:f8:7e:04:cb:2c:18:de:35:
24:b4:bc:e5:9d:5d:cc:f7:ad:58:dc:61:87:1d:15:
2c:5d:39:38:23:ad:6d:6f:99:89:76:ed:5e:34:e6:
88:2a:ce:59:d2:3c:bd:ae:74:44:ff:85:be:75:1d:
fe:c4:3c:56:de:87:13:7e:6b:50:ab:c3:63:f2:0b:
d9:e2:21:e1:42:93:0b:a7:92:ad:a0:5f:b9:47:98:
fd:b5:8d:ab:e5:fe:1d:72:b0:47:d1:62:19:aa:53:
28:5a:9c:eb:88:11:f3:da:da:e7:27:5f:30:df:95:
a1:13:0e:47:c9:f2:d7:70:34:d2:33:8f:d9:ac:02:
d6:1d:17:1d:ae:75:31:28:55:0b:4b:12:1f:85:c3:
39:cc:08:29:44:2e:9b:fd:b4:39:16:8b:ac:33:e4:
a2:60:9b:09:e4:54:23:a6:87:04:70:dd:a6:e3:35:
67:88:db:ef:0f:6d:9b:e2:66:49:e4:64:9d:68:86:
4b:09:b6:73:77:d1:8b:2c:81:bb:cb:f0:ed:81:f0:
04:4c:90:2a:a8:ca:9d:48:0e:40:73:35:36:0b:c2:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F1:36:E7:8A:7F:1C:A4:D7:19:12:1C:B2:9B:7F:F3:DD:6D:EE:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2725B8104B7B11F086AC5CAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:2c:26:40:22:49:b9:24:08:90:24:54:a0:10:c7:6c:25:53:
9f:b0:c8:c0:a7:9d:d4:13:44:38:59:95:b4:fc:77:bc:f8:5e:
00:9a:1d:ea:2c:86:69:62:15:db:31:99:2b:7a:a6:cc:eb:e7:
60:bf:25:de:02:6e:ab:e8:88:24:c5:25:d9:34:64:e3:2a:a1:
23:ba:7d:b8:8d:5c:b0:9b:34:d4:e9:90:99:81:33:6a:f3:b0:
ca:88:72:97:da:cc:27:81:87:15:36:66:78:9e:ee:ae:51:63:
26:c9:57:3d:15:6e:21:73:50:de:9f:c6:f2:67:25:a6:9a:bc:
23:1b:34:65:20:88:d5:a1:45:10:93:41:be:40:1d:2d:ed:93:
3d:29:6b:10:e1:34:92:ee:e0:89:86:e2:53:53:1e:4b:e7:06:
58:55:3f:3d:90:23:5a:f1:4d:a5:c2:f5:8f:68:14:2e:a9:e5:
d5:24:21:1b:01:9a:5f:33:38:0a:6c:5f:40:15:c3:3c:db:90:
99:d5:50:32:57:f5:30:65:ef:4b:61:d8:57:1b:bf:6a:0f:be:
be:b0:4c:d4:b8:03:fa:3d:ca:05:f8:43:df:ab:3b:79:94:e5:
9c:e1:65:66:3f:4f:ec:04:82:9f:1e:4b:1a:4c:41:c8:2c:d7:
58:78:97:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:21:32 2025 by rpki-client