Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB4E23285A9111F08C30AAE4DAE4EC9C.roa
File: FB4E23285A9111F08C30AAE4DAE4EC9C.roa (raw, json)
Hash identifier: 6G78mg2Gf4YKwc4hkH2sslFXq1r8Y93xBZV4Yv9SK04=
Subject key identifier: AD:18:5A:C8:22:0E:97:8B:97:E2:C8:19:AD:6D:65:AE:22:E6:E9:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01626D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB4E23285A9111F08C30AAE4DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 17:52:29 +0000
ROA not before: Sun 06 Jul 2025 17:52:24 +0000
ROA not after: Wed 13 Aug 2025 17:52:24 +0000
asID: 23470
IP address blocks: 45.199.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90733 (0x1626d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 17:52:24 2025 GMT
Not After : Aug 13 17:52:24 2025 GMT
Subject: CN=686ab7dc-c86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:63:16:97:13:58:28:ab:98:48:88:c4:8e:e4:
27:66:45:e5:6f:a6:de:a3:b6:8c:10:b0:e6:d1:bf:
40:9c:fb:01:d9:d5:a0:ba:4d:2e:1b:f6:5d:1d:4d:
44:b0:dc:e8:be:fc:1e:b9:1e:20:d0:1e:c3:ea:b1:
97:bd:c5:a3:9c:df:15:a0:a3:33:43:8c:86:3c:1a:
fa:f7:44:39:b7:54:d0:8d:e1:71:45:d1:e7:28:17:
de:1d:37:04:ba:a6:f3:92:96:3c:70:e8:14:e5:6f:
86:b6:3f:f6:b1:df:41:69:2b:b5:7a:e5:6b:dc:70:
96:ae:fd:fd:09:75:a1:0d:20:be:63:ae:f9:c8:e7:
20:e4:f1:49:2c:d2:5d:a8:04:3d:4c:f4:9b:8c:f2:
ec:07:8f:b9:37:96:28:95:34:34:dc:8d:bc:ab:8a:
ab:bb:1c:83:ef:67:c4:14:92:45:4f:c5:3c:68:a5:
28:09:a8:bc:ec:5d:27:28:85:ab:df:e0:f1:e7:94:
bb:5a:cd:f8:3d:f4:2e:51:fd:c5:12:0b:ba:c6:36:
fc:18:cf:04:30:8e:e0:f5:ee:af:04:7d:9d:54:82:
2f:a9:8f:37:f6:99:9b:40:fe:66:b0:5f:bb:2d:6b:
97:a3:6f:b8:ab:10:4d:9a:bc:31:e3:9e:a5:02:c8:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:18:5A:C8:22:0E:97:8B:97:E2:C8:19:AD:6D:65:AE:22:E6:E9:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB4E23285A9111F08C30AAE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5f:26:87:52:6f:99:92:b1:83:14:9f:0f:d2:ad:86:7f:10:
d9:f9:b7:7a:12:7a:5c:4d:16:8f:5f:da:f0:8e:6c:17:20:d9:
d4:1a:ac:43:31:e6:ad:6e:86:bf:61:91:71:91:e5:17:df:11:
34:8b:c4:0d:f5:d1:5f:40:43:ff:7d:f6:e4:0f:1a:de:9e:91:
fb:a5:3f:9e:76:fa:cc:6e:7a:40:10:05:03:90:fe:94:f7:79:
6b:80:80:34:af:40:ba:98:6b:f1:a3:a5:1c:67:34:cf:95:d6:
14:c6:a7:aa:65:ff:5b:26:59:f9:b7:df:6e:10:d1:48:bf:92:
79:58:a0:91:21:83:b1:48:15:42:96:88:fc:73:f6:27:7f:3b:
11:8f:39:0d:9b:3f:d8:02:42:a7:a2:bb:ac:2f:4a:03:8f:1f:
a7:01:42:7e:0d:eb:db:c1:2a:dc:ff:92:97:76:df:2c:cd:08:
4f:0e:d2:99:85:e0:f9:7b:6a:c2:f3:79:1f:82:ea:a9:32:7d:
c3:94:37:bc:9d:32:ed:de:d0:17:a5:55:cc:f7:2a:67:eb:34:
c1:d6:de:e5:25:91:5b:d6:2b:82:26:75:2b:e6:e5:df:8a:b2:
07:de:ca:b7:af:11:2d:2e:71:25:90:96:96:4b:6b:54:bb:95:
72:5a:78:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:20:21 2025 by rpki-client