Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDF9DBC47A2011F0BDCDBAD4DAE4EC9C.roa
File: DDF9DBC47A2011F0BDCDBAD4DAE4EC9C.roa (raw, json)
Hash identifier: dKlDOV4VcEyXQ2Fvz3h9mkGwxBH50Ohr70Atpyp82XA=
Subject key identifier: 35:26:3F:F8:87:25:F2:6F:9D:C2:33:66:F7:A3:C2:DC:08:6E:E6:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDF9DBC47A2011F0BDCDBAD4DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 21:43:23 +0000
ROA not before: Fri 15 Aug 2025 21:43:16 +0000
ROA not after: Tue 16 Sep 2025 21:43:16 +0000
asID: 27951
IP address blocks: 45.195.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Aug 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93010 (0x16b52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 21:43:16 2025 GMT
Not After : Sep 16 21:43:16 2025 GMT
Subject: CN=689fa9fb-c2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:aa:d0:3a:26:21:5a:48:de:7b:ef:74:6d:6c:
d9:46:94:7a:d7:ad:a5:0c:5d:2c:03:ba:f5:ca:6e:
1b:83:4c:b6:93:1f:df:f9:10:fc:f2:0b:ee:ee:c3:
64:79:5f:24:d8:58:6a:fb:72:96:48:10:ad:8b:c5:
24:9a:de:8b:f4:b6:af:99:cb:96:66:5c:a5:d3:11:
5b:a4:d9:24:dd:87:77:cd:9e:99:cb:08:37:26:c0:
ad:db:93:89:16:2b:a4:83:ce:dd:ed:fd:70:91:53:
05:6d:f6:87:dc:8a:be:d9:2f:85:9f:d6:f1:91:a3:
c6:76:8a:07:4b:3d:bc:07:46:ae:63:37:a5:97:5e:
cb:b7:0b:2c:52:54:56:fe:c4:45:31:ad:eb:47:b9:
81:88:97:f3:54:e2:c9:a8:f3:fd:3a:e5:bf:42:f3:
48:65:b2:cf:17:b2:9e:93:14:4a:73:92:d5:76:ad:
9a:ad:69:23:fa:3b:91:de:96:e6:d0:e1:c3:e9:e5:
dd:73:7a:00:79:50:0c:08:3c:0d:49:07:5e:55:33:
7b:57:70:32:37:ef:39:c4:d9:f2:f3:aa:fe:5c:08:
a1:07:3d:e0:e0:5d:b2:87:77:e6:08:48:dc:27:72:
4d:00:6e:f9:9c:66:a1:c9:d4:55:eb:ef:d7:c5:17:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:26:3F:F8:87:25:F2:6F:9D:C2:33:66:F7:A3:C2:DC:08:6E:E6:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDF9DBC47A2011F0BDCDBAD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3a:a3:32:2a:39:68:18:df:7c:e2:48:c4:2f:5c:bf:7f:60:
15:b9:50:f5:1d:8f:b4:ac:83:08:a2:40:24:c3:eb:d7:74:18:
94:70:33:17:29:72:23:b2:4b:a1:17:63:29:68:f4:b3:c3:fb:
d8:81:b9:85:b9:2a:1c:55:d9:dd:76:36:fd:6b:66:89:b9:9f:
c9:26:18:59:ea:84:b2:e8:3b:7e:97:75:54:95:9d:0b:7b:7e:
d0:92:00:48:97:bd:1e:f5:86:4e:af:28:07:bf:79:7b:9e:7f:
ed:bf:f3:39:11:76:7a:2a:b7:45:a5:3d:71:4a:9b:3d:ab:1d:
c4:75:ab:67:54:39:29:24:10:a5:2f:10:3b:5a:a3:ea:98:c1:
4c:f9:8a:bf:3a:c7:b2:7c:fc:07:c1:1d:ff:fe:bc:62:55:53:
7b:c1:98:5c:79:c3:36:2a:08:9d:9e:2e:57:db:0e:94:0d:ff:
d7:28:b5:0a:7a:7b:bf:bd:c8:dd:9f:ea:5d:7f:f0:f5:a1:e3:
1f:c6:aa:a3:bb:fe:b7:4c:46:66:84:2d:c3:d1:42:24:3c:1e:
03:fe:ad:c7:c0:a6:94:ba:6e:69:ae:35:ec:f0:76:8a:ee:8f:
7c:c9:71:03:f5:2f:e2:4e:ff:a9:2d:b3:55:11:59:ab:9f:62:
ff:87:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:19:03 2025 by rpki-client