Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EB21956B3F511F0860B55F2DAE4EC9C.roa
File: 2EB21956B3F511F0860B55F2DAE4EC9C.roa (raw, json)
Hash identifier: kxfmFSe6wFESqgW/bLU75dbti3Q8FTPKh+XZtN+3sqE=
Subject key identifier: A1:BA:18:9B:76:70:D9:EB:DB:73:9B:89:9F:1C:BA:31:9E:95:83:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018370
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EB21956B3F511F0860B55F2DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 11:56:48 +0000
ROA not before: Tue 28 Oct 2025 11:56:41 +0000
ROA not after: Wed 10 Dec 2025 11:56:41 +0000
asID: 138915
IP address blocks: 45.197.64.0/24 maxlen: 24
45.197.74.0/24 maxlen: 24
45.197.75.0/24 maxlen: 24
45.197.96.0/24 maxlen: 24
45.197.97.0/24 maxlen: 24
45.197.106.0/24 maxlen: 24
45.197.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99184 (0x18370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 11:56:41 2025 GMT
Not After : Dec 10 11:56:41 2025 GMT
Subject: CN=6900af80-8d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1d:c5:e5:da:5a:0a:57:4f:62:3b:cb:61:73:
a9:ac:cf:32:fe:35:74:8a:af:ab:8f:9c:d7:6c:aa:
d5:30:c8:41:5b:d1:b3:7d:d3:6a:ac:81:06:48:7e:
8a:f9:b9:88:a3:26:38:6d:f5:92:6b:80:37:5b:e8:
e0:65:3c:27:cb:7c:f3:d6:90:f1:bf:7d:80:db:65:
80:e1:52:9d:94:d4:85:89:72:65:77:8b:91:a3:b5:
ec:39:98:05:58:d1:08:5b:5c:7b:48:a7:e9:49:40:
db:97:78:af:ba:41:c2:8c:41:51:49:c1:72:4c:3d:
04:a4:ce:12:83:31:5c:0e:65:62:ea:ec:88:47:4b:
ab:65:2f:f1:8b:79:a8:c9:2b:78:cb:36:24:f0:c6:
4a:7a:35:88:2e:20:f3:5f:24:d5:23:2e:13:04:c7:
b8:14:13:19:03:ca:44:16:d9:b5:37:71:fd:16:7a:
dd:71:bf:0d:66:ad:4d:d0:d5:51:6a:71:51:55:b4:
df:04:97:c4:e7:c9:ef:82:85:42:ab:80:8b:3b:f2:
30:ac:ed:8c:ba:36:8b:db:b8:6d:a4:44:43:eb:47:
9f:cf:4d:a7:4c:84:15:f3:c5:1b:99:21:35:28:30:
de:9c:64:96:73:71:10:ce:d5:0e:25:e6:5e:90:44:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BA:18:9B:76:70:D9:EB:DB:73:9B:89:9F:1C:BA:31:9E:95:83:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EB21956B3F511F0860B55F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.64.0/24
45.197.74.0/23
45.197.96.0/23
45.197.106.0/23
Signature Algorithm: sha256WithRSAEncryption
01:bb:49:cb:7a:48:b1:6b:62:36:bf:17:a2:45:42:de:10:e8:
34:64:dd:cc:6d:44:b3:e1:e2:8b:2c:2e:06:79:07:42:94:19:
e8:f6:9e:de:02:15:d5:8c:e6:d8:2f:6b:05:cc:c7:90:76:7f:
e4:19:12:6b:57:04:20:87:8a:0d:e0:d9:c1:9c:81:a5:81:48:
96:37:90:0a:ae:2d:59:50:8d:d7:6a:3d:87:cc:76:b5:a3:9b:
d4:93:26:f3:d8:ed:74:94:1d:68:d5:b3:2b:9a:02:02:ce:0e:
45:5a:4c:3b:6c:87:58:23:5d:cb:ed:77:27:62:ad:35:52:9b:
a6:32:d2:e0:24:46:65:e3:c9:f0:11:7a:15:fd:0c:0e:9a:49:
c6:dd:fc:92:d7:ce:8d:c6:09:59:67:5e:ac:70:a8:93:0d:f6:
12:aa:ab:9a:97:82:df:e1:87:6c:1b:a4:9c:93:53:10:7d:ec:
e1:f3:e2:55:18:35:46:5f:8e:c4:c6:ad:59:3e:25:aa:b7:b5:
0b:5e:bf:b4:3e:3c:36:48:8b:90:39:87:a8:34:50:54:22:75:
58:c9:4b:a7:87:ef:8c:8f:c3:8b:60:93:ce:a3:1c:41:b6:b7:
70:f1:0f:e7:4f:4a:6a:b5:75:c5:b5:82:19:1c:59:49:88:00:
22:38:a2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:34:51 2025 by rpki-client