Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/637694603F9111F0B56661B0DAE4EC9C.roa
File: 637694603F9111F0B56661B0DAE4EC9C.roa (raw, json)
Hash identifier: RNKQDEqAm+MmdMY9M0kudnZ6gSQi2buxXZtuKxBG2V0=
Subject key identifier: C9:B1:11:A7:C9:63:7B:A9:C3:51:FB:0A:2C:69:05:6C:AB:94:DC:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015967
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/637694603F9111F0B56661B0DAE4EC9C.roa
Signing time: Mon 02 Jun 2025 09:10:12 +0000
ROA not before: Mon 02 Jun 2025 09:10:08 +0000
ROA not after: Wed 11 Jun 2025 09:10:08 +0000
asID: 18190
IP address blocks: 45.195.32.0/24 maxlen: 24
45.195.33.0/24 maxlen: 24
45.195.34.0/24 maxlen: 24
45.195.35.0/24 maxlen: 24
45.195.36.0/24 maxlen: 24
45.195.37.0/24 maxlen: 24
45.195.38.0/24 maxlen: 24
45.195.39.0/24 maxlen: 24
45.195.40.0/24 maxlen: 24
45.195.41.0/24 maxlen: 24
45.195.42.0/24 maxlen: 24
45.195.43.0/24 maxlen: 24
45.195.44.0/24 maxlen: 24
45.195.45.0/24 maxlen: 24
45.195.46.0/24 maxlen: 24
45.195.47.0/24 maxlen: 24
45.195.48.0/24 maxlen: 24
45.195.49.0/24 maxlen: 24
45.195.50.0/24 maxlen: 24
45.195.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88423 (0x15967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 09:10:08 2025 GMT
Not After : Jun 11 09:10:08 2025 GMT
Subject: CN=683d6a74-f887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:3a:04:a2:16:dc:0f:7d:02:2d:0b:de:9f:
39:c0:c7:66:f1:7b:57:fc:15:aa:2f:92:b0:1b:9f:
12:14:76:21:2a:78:10:81:27:79:e4:e0:b1:10:89:
cd:4d:37:65:43:19:8d:2f:2c:39:43:fa:89:37:0c:
8e:d8:a6:91:6b:dd:4d:fd:db:aa:d9:b3:3c:ab:6e:
69:a3:4f:95:b5:f5:04:e8:42:77:19:57:8d:9a:b1:
47:c5:53:dc:6b:5f:5d:a3:f0:7e:62:23:73:d0:1f:
cb:dd:c7:58:cd:6e:e0:56:b0:69:e0:0e:f4:ce:36:
6c:d3:eb:2c:6b:59:05:fc:5e:9f:bc:9e:94:9b:5b:
b4:f3:a9:9e:8e:5b:06:9d:f5:65:b1:10:3a:1b:98:
0d:23:43:b2:df:eb:19:f4:e9:d0:84:b9:8e:26:fd:
16:e0:7b:56:43:fe:05:45:c1:39:19:33:dc:54:a2:
a5:97:54:73:0a:af:ee:94:a9:1e:98:48:8e:cb:9c:
c1:6c:35:76:bf:13:33:de:da:54:94:6f:fa:62:0c:
0b:de:5f:99:69:2b:c6:1d:75:6a:9a:54:da:3b:0c:
37:27:11:64:46:15:8e:46:d9:ae:db:37:bf:80:ee:
fd:1f:3f:9e:6a:90:20:36:88:82:7e:38:00:93:8b:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B1:11:A7:C9:63:7B:A9:C3:51:FB:0A:2C:69:05:6C:AB:94:DC:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/637694603F9111F0B56661B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.32.0-45.195.51.255
Signature Algorithm: sha256WithRSAEncryption
b5:14:a9:b2:b8:86:03:fc:1a:d3:c4:c0:ae:18:69:87:9d:7d:
96:f2:dd:3e:cc:76:56:9b:fb:60:ce:e8:76:d0:32:2e:8d:60:
8e:f4:78:87:19:a7:cc:50:75:a2:78:fb:fe:03:a2:71:cd:2f:
2c:de:1f:47:b2:c2:c0:03:62:03:33:f5:74:4e:00:18:b4:f8:
60:f7:81:e9:05:5b:a2:82:a8:66:31:20:30:58:91:76:e8:42:
a4:a7:f3:06:a7:10:ac:62:53:03:45:b0:3a:16:20:46:ad:11:
1f:a9:94:8a:e0:9a:8e:a5:91:4e:a8:f8:3a:6e:72:80:fc:05:
d0:b0:6a:fa:1b:35:ab:44:a2:99:fe:63:31:12:51:5d:73:ca:
ec:dc:62:80:0b:bb:57:08:e8:df:ee:0f:b7:37:96:bb:6d:61:
ca:a1:cf:27:d2:da:f8:88:11:69:49:18:80:c6:a1:dc:85:c3:
57:40:91:e1:f2:08:1b:de:dd:a9:64:41:0e:b3:49:af:4b:e0:
8e:6e:6d:da:c9:9a:fa:77:4d:e5:e2:85:43:32:e5:54:c8:05:
52:05:9d:83:e3:99:ef:d2:b4:c5:ac:45:dc:e9:b8:f9:ef:8a:
c7:4d:67:de:c8:3c:a0:46:60:2f:75:95:b2:e8:42:25:dd:06:
30:5d:7a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:08:42 2025 by rpki-client