Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44AFD38E3A0011F0A032A77FDAE4EC9C.roa
File: 44AFD38E3A0011F0A032A77FDAE4EC9C.roa (raw, json)
Hash identifier: 2cf/hHgffQy5QzDXUfqyazq3FbX0LRru4IG+NA7RlFY=
Subject key identifier: C6:4F:9B:8C:5F:D4:7F:25:E1:4C:C2:BF:2A:FD:31:55:52:46:68:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015784
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44AFD38E3A0011F0A032A77FDAE4EC9C.roa
Signing time: Mon 26 May 2025 07:08:48 +0000
ROA not before: Mon 26 May 2025 07:08:43 +0000
ROA not after: Wed 03 Jun 2026 07:08:43 +0000
asID: 140224
IP address blocks: 45.194.16.0/24 maxlen: 24
45.194.17.0/24 maxlen: 24
45.194.18.0/24 maxlen: 24
45.194.19.0/24 maxlen: 24
45.194.20.0/24 maxlen: 24
45.194.21.0/24 maxlen: 24
45.194.22.0/24 maxlen: 24
45.194.23.0/24 maxlen: 24
45.207.8.0/24 maxlen: 24
45.207.9.0/24 maxlen: 24
45.207.10.0/24 maxlen: 24
45.207.11.0/24 maxlen: 24
45.207.12.0/24 maxlen: 24
45.207.13.0/24 maxlen: 24
45.207.14.0/24 maxlen: 24
45.207.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87940 (0x15784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 07:08:43 2025 GMT
Not After : Jun 3 07:08:43 2026 GMT
Subject: CN=68341380-9dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bf:d0:d2:33:01:34:17:31:1e:d6:9a:2f:c0:
91:b2:b5:47:06:dd:f2:b3:ec:e5:1c:f7:df:73:e4:
d2:50:7e:d7:db:61:72:46:b3:df:ba:66:b0:2d:3a:
44:ae:4a:8e:e3:c9:cd:31:3e:9d:10:8d:39:0d:fb:
1a:87:63:ae:71:d8:a2:38:ef:8c:38:e0:66:68:e3:
17:3e:84:ff:46:e2:68:e9:3d:44:f7:70:e8:8f:ab:
28:52:99:1e:a4:55:b9:38:55:58:d4:1d:41:0c:ab:
7c:4c:75:ef:ba:7a:a6:39:81:c9:8c:8c:3c:8b:53:
70:ec:b8:3b:0a:60:e3:a8:84:18:10:6e:b6:44:4b:
9c:ad:60:58:92:b3:e5:a6:f8:f3:b3:eb:5a:9a:66:
bd:6e:3a:fc:21:65:1b:ef:be:db:05:e2:05:2e:7c:
8c:cb:2a:a5:2e:c7:41:aa:73:c6:47:af:46:96:2b:
b9:0b:9f:67:79:fb:30:ef:70:6f:b4:ef:73:75:93:
0e:27:89:a9:d2:3f:31:a4:75:24:c0:49:a7:cd:78:
27:23:95:ff:8d:15:6c:c0:0d:c4:03:d1:f8:de:50:
ab:a3:0b:5a:00:95:9a:c5:e0:c4:08:e2:b8:41:8f:
39:31:f9:79:ef:6b:4d:62:4a:3b:a4:4a:74:e6:49:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4F:9B:8C:5F:D4:7F:25:E1:4C:C2:BF:2A:FD:31:55:52:46:68:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44AFD38E3A0011F0A032A77FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/21
45.207.8.0/21
Signature Algorithm: sha256WithRSAEncryption
36:ca:3f:a2:ff:6c:9c:b6:35:a0:d3:d4:c8:ee:28:f8:50:3a:
60:ea:8e:02:84:63:4f:21:cf:96:f9:00:7c:d2:30:3a:dd:99:
64:ee:34:2b:55:95:a8:41:d2:fe:5a:fa:ae:92:a2:af:19:5e:
55:96:b3:97:76:90:95:65:a2:e1:dd:16:80:65:22:33:30:bb:
f8:1b:24:92:3e:12:42:1f:56:ff:37:f7:85:dd:c8:43:4f:14:
75:d8:3b:13:57:20:10:44:1d:d4:20:0d:eb:fe:e7:94:99:e2:
a2:22:9c:fb:81:90:48:fc:97:aa:04:55:0d:54:0b:f5:68:ff:
b5:d0:03:6b:cf:1c:a3:49:4c:7b:bc:5b:7f:23:ec:46:db:dd:
b4:f0:e1:68:67:13:3c:ba:28:77:1d:b2:86:6b:10:be:73:5c:
57:bf:d2:0e:89:69:31:20:d6:40:7d:e9:f0:55:fb:c4:f9:af:
3a:54:e7:f9:dc:dd:23:43:d6:c7:49:e1:6c:9b:69:6b:4f:b2:
32:ff:66:0f:40:3b:91:57:ad:af:42:6b:64:46:c2:ad:70:7f:
34:7c:11:08:11:b1:fd:7c:88:9b:6a:33:33:3a:cf:1b:de:47:
42:66:1c:95:11:98:4e:f8:6e:49:7f:08:62:0b:81:3a:ad:bc:
2d:8f:25:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:25:45 2025 by rpki-client