Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CE74BC47E6C11F0A48A3979DAE4EC9C.roa
File: 6CE74BC47E6C11F0A48A3979DAE4EC9C.roa (raw, json)
Hash identifier: BgCYPSBqANcmMhPzGpYaeOZ8ybWdLmeJ80eAbgTEp9k=
Subject key identifier: DA:6F:1D:DC:58:57:1A:B1:4F:16:9D:C0:36:D0:A9:38:8D:0F:1F:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016DD1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CE74BC47E6C11F0A48A3979DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 08:54:20 +0000
ROA not before: Thu 21 Aug 2025 08:54:15 +0000
ROA not after: Sat 08 Nov 2025 08:54:15 +0000
asID: 137443
IP address blocks: 45.192.160.0/22 maxlen: 24
45.192.172.0/22 maxlen: 24
45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93649 (0x16dd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 08:54:15 2025 GMT
Not After : Nov 8 08:54:15 2025 GMT
Subject: CN=68a6debc-1bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:27:1d:ee:16:48:bf:ed:c3:b5:f8:d7:b1:a0:
c1:49:f7:ca:7e:bc:1d:b3:a0:a2:39:00:67:1b:d1:
4a:e3:a7:97:07:95:4c:7f:fc:f6:da:17:a7:60:0b:
d9:af:f8:f4:83:d8:2f:0a:30:02:b4:1a:a6:fc:35:
f0:5e:e8:1a:ee:8f:9e:cf:16:3a:e3:bd:ab:84:2c:
73:57:2f:a6:9f:44:b1:00:50:60:77:5a:e3:22:0e:
ce:6a:97:2c:ad:66:b0:11:2d:3b:f2:f6:78:60:30:
ff:37:77:d2:31:04:78:f4:69:6b:5d:24:ab:73:e2:
d9:93:c0:f0:21:1a:c0:fc:a5:9c:0d:f7:c4:a5:5c:
80:9f:70:bf:72:46:74:9b:6b:85:fe:6e:c5:a9:a5:
4b:c3:f2:ca:bc:a8:a3:f6:f1:9f:7e:22:f5:5b:20:
d7:75:f1:f1:bb:3a:63:46:f1:d3:5e:d7:dd:75:6a:
12:20:9f:cc:f3:fa:39:be:2a:2d:01:5e:88:df:bd:
60:ed:ca:0e:54:c3:23:ce:43:a2:07:63:1c:36:9f:
80:eb:b1:1e:d6:d6:a9:2f:c3:fc:c7:6c:6f:90:b7:
71:d9:73:c9:f9:79:aa:2e:bd:62:f8:9d:8f:db:c4:
02:d5:55:63:37:85:2e:5c:02:cd:51:82:24:04:16:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6F:1D:DC:58:57:1A:B1:4F:16:9D:C0:36:D0:A9:38:8D:0F:1F:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CE74BC47E6C11F0A48A3979DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
6e:a7:8d:93:ae:8c:8b:f8:6f:6e:4d:50:be:0e:d8:44:93:93:
13:7e:48:9c:b6:8e:14:80:21:a6:20:95:45:4b:88:54:de:b3:
b4:9f:7b:91:d4:a3:d0:f4:55:45:5e:8b:48:97:09:dc:b0:ac:
fc:25:1c:bb:3a:3a:f4:40:20:02:2a:ba:4f:a1:dc:da:7b:8d:
29:16:8b:3d:50:06:9a:4b:a4:11:dd:ea:af:44:b2:63:c4:82:
47:66:4e:42:b7:e2:81:14:6f:ca:b5:e9:ee:29:8b:6f:56:04:
2a:99:fc:32:eb:3c:57:7f:06:b3:bb:21:e2:41:e0:1d:e3:de:
a2:fb:59:e9:1e:1c:57:3e:af:88:62:63:bb:d7:70:66:f2:55:
b0:a4:9f:06:08:f6:6b:66:52:b4:83:5b:91:41:aa:11:c7:c2:
93:6e:a6:d6:82:93:9a:7e:2c:34:cd:44:72:1c:70:9b:ba:fd:
72:ba:0c:09:cc:f4:97:2b:6d:bd:c0:2b:f4:1c:c6:3d:5d:5c:
d1:2f:a6:a2:d6:98:f0:1a:12:1f:ad:89:f9:4e:3e:23:7f:bf:
14:66:5b:d1:0a:25:75:2f:a6:55:90:73:ec:a8:ac:93:db:0f:
81:da:a2:82:d5:56:bd:f4:12:85:a6:9f:73:47:4b:cc:1c:0b:
53:97:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 23:24:43 2025 by rpki-client