Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F167EF436EF11F09E756987DAE4EC9C.roa
File: 9F167EF436EF11F09E756987DAE4EC9C.roa (raw, json)
Hash identifier: yZ1l28+YU1dyc1Do79jVqQ5P6A49xTkHEqEI93uugIA=
Subject key identifier: E5:77:35:42:38:AB:AF:85:0F:18:18:6E:2B:23:9B:73:55:08:72:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015674
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F167EF436EF11F09E756987DAE4EC9C.roa
Signing time: Thu 22 May 2025 09:32:05 +0000
ROA not before: Thu 22 May 2025 09:32:00 +0000
ROA not after: Wed 09 Jul 2025 09:32:00 +0000
asID: 63139
IP address blocks: 45.197.108.0/24 maxlen: 24
45.197.109.0/24 maxlen: 24
45.197.110.0/24 maxlen: 24
45.197.111.0/24 maxlen: 24
45.197.112.0/24 maxlen: 24
45.197.113.0/24 maxlen: 24
45.197.114.0/24 maxlen: 24
45.197.115.0/24 maxlen: 24
45.197.116.0/24 maxlen: 24
45.197.117.0/24 maxlen: 24
45.197.118.0/24 maxlen: 24
45.197.119.0/24 maxlen: 24
45.197.120.0/24 maxlen: 24
45.197.121.0/24 maxlen: 24
45.197.122.0/24 maxlen: 24
45.197.123.0/24 maxlen: 24
45.197.124.0/24 maxlen: 24
45.197.125.0/24 maxlen: 24
45.197.126.0/24 maxlen: 24
45.197.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87668 (0x15674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 09:32:00 2025 GMT
Not After : Jul 9 09:32:00 2025 GMT
Subject: CN=682eef15-6cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:b0:a0:02:5b:57:b4:7e:4b:75:0b:7d:5a:
2c:1e:dd:3a:0e:94:3d:98:f8:46:92:a5:9a:d4:7d:
77:84:20:6e:ef:8b:3c:63:c4:7a:36:dd:ae:84:7f:
39:f5:3f:8d:e7:aa:19:e9:f9:46:c3:c5:69:20:43:
27:63:62:e0:41:39:4a:c6:87:39:26:c9:77:2f:b8:
c7:0e:84:6f:88:56:95:aa:a4:7f:f1:4d:99:ab:d0:
28:a8:e7:3a:4e:b7:76:d6:bb:e8:4e:06:39:39:f1:
22:1c:e2:26:02:ae:e8:a7:69:b5:f5:57:c0:14:09:
e8:1b:ef:fb:0e:9b:d8:0c:97:40:bb:35:17:bb:0e:
83:63:48:62:d7:77:17:75:f0:0d:8c:7a:90:6a:bd:
6b:85:1d:05:e0:1d:eb:9c:ce:86:80:ab:af:96:d4:
f8:fa:d2:27:e7:55:7c:2e:e1:96:79:fa:ea:6c:2a:
bd:72:c5:70:4e:a2:b7:6a:a5:28:ae:9a:5b:10:e7:
0b:39:8a:09:b6:79:3d:88:b3:4c:27:5c:b0:c4:16:
ff:06:d2:52:4f:7f:c4:90:84:2d:17:dd:7c:fe:04:
d4:83:94:23:96:0b:b4:26:61:41:21:89:89:30:4a:
5e:8b:f6:67:21:1b:70:a8:77:52:2e:e0:83:22:57:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:77:35:42:38:AB:AF:85:0F:18:18:6E:2B:23:9B:73:55:08:72:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F167EF436EF11F09E756987DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.108.0-45.197.127.255
Signature Algorithm: sha256WithRSAEncryption
8b:e4:b6:94:f0:8b:92:1b:ce:c2:50:4b:c8:5b:98:34:e5:93:
3a:7f:e5:db:2b:81:f1:5e:2c:b6:1f:a3:d7:34:08:ae:23:8f:
ac:fb:16:c3:06:a2:90:d3:1a:0d:50:c4:23:0b:3c:0f:1d:22:
76:d0:93:da:be:34:98:e6:bc:6e:d4:da:83:0c:8b:6b:b9:90:
62:f8:6d:bb:4b:7f:a3:52:da:64:58:43:a6:4c:c2:35:91:4d:
f1:d9:e2:c9:b2:71:8f:82:8a:b4:db:3a:a0:8a:6b:3b:29:97:
c1:68:7f:98:df:48:db:d0:39:ea:36:8d:af:6a:05:04:32:f2:
93:53:c5:ce:00:b9:59:54:a3:1a:f4:ff:e0:ad:41:c7:fc:c2:
cc:6f:3f:7e:df:10:c6:c3:d4:68:ed:80:cd:43:b7:6d:73:0f:
4a:91:6b:56:a6:bf:73:9a:29:a8:44:22:ba:96:e4:5b:40:91:
e2:94:14:20:25:2f:6b:11:5c:ac:26:fa:63:9e:45:98:4f:33:
11:14:10:f4:73:b1:7a:17:f0:f3:4e:2b:6d:15:bf:da:33:f1:
01:f7:95:4e:1d:36:68:58:aa:44:53:41:d2:68:a0:d9:06:f7:
d2:48:08:a6:5f:72:e4:31:a2:f5:f1:2e:00:5a:05:17:a3:cf:
4c:05:37:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:26:09 2025 by rpki-client