Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EC08A8A688611F0B1D6C1B1DAE4EC9C.roa
File: 4EC08A8A688611F0B1D6C1B1DAE4EC9C.roa (raw, json)
Hash identifier: BlDx3RO0x0eLouILES55tsrXPT/DFm6W3282/wNkF90=
Subject key identifier: 96:73:1B:08:A6:D9:3C:AE:6C:AC:C3:A5:F5:2F:0C:19:47:A9:6F:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01675D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EC08A8A688611F0B1D6C1B1DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 12:04:11 +0000
ROA not before: Thu 24 Jul 2025 12:04:06 +0000
ROA not after: Thu 28 Aug 2025 12:04:06 +0000
asID: 48031
IP address blocks: 45.200.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91997 (0x1675d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 12:04:06 2025 GMT
Not After : Aug 28 12:04:06 2025 GMT
Subject: CN=6882213b-b83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:91:a9:c0:be:82:4b:a2:6b:57:9b:28:6d:f0:
8e:0a:b3:1b:77:2d:24:bb:67:69:41:e7:7e:20:a5:
bd:8f:2b:83:00:88:28:f7:b6:e6:e5:9e:db:bf:5d:
ff:f1:60:09:bf:57:1b:3f:1d:0c:8e:e3:d4:3d:68:
38:71:69:5c:26:ee:ed:3c:a5:d7:ba:dc:fc:11:c4:
be:c2:97:dc:70:ed:3d:95:68:c7:32:c0:73:c1:70:
71:f4:6e:c0:2c:e2:67:af:d3:32:fa:be:78:34:27:
f4:31:34:e5:dd:a9:4b:43:24:64:ce:49:1c:d4:13:
a1:a4:2c:2f:ff:ff:f2:bd:3a:9c:2d:1a:d3:40:d8:
53:42:97:2a:48:73:d8:26:1b:9a:d5:e2:b4:59:c5:
67:bd:18:b8:f9:64:66:83:6e:c3:a5:7c:b1:0f:ae:
cd:96:1c:2f:e0:8d:bc:f2:3e:d0:1e:15:2c:1a:ae:
d3:19:6d:12:58:d0:4d:ea:e2:ae:4d:8d:41:48:08:
30:be:93:c0:2e:a5:27:d3:2e:88:d8:24:95:98:a1:
58:18:7d:ea:b1:34:26:34:6a:b0:10:cf:0f:e2:e5:
c0:6b:38:3d:c9:fc:35:47:96:2f:05:97:dc:7d:27:
11:39:40:b6:66:20:14:ed:7d:27:46:9c:ba:f8:c0:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:73:1B:08:A6:D9:3C:AE:6C:AC:C3:A5:F5:2F:0C:19:47:A9:6F:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EC08A8A688611F0B1D6C1B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.181.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f6:66:14:aa:77:a4:8a:f4:01:a3:b1:12:9c:d1:78:b2:c3:
bd:c0:9d:6e:b0:3c:8f:15:e1:f0:90:e7:19:c1:8d:8e:54:96:
59:eb:e9:85:24:91:45:6c:75:18:75:a5:e5:37:4f:9b:2f:d1:
48:ea:06:4b:e8:7b:46:e2:4e:1e:99:9c:a3:d7:52:1b:dc:84:
41:20:91:e3:fc:1d:60:7e:38:a9:d6:9b:68:02:60:c1:11:55:
6a:cd:54:ce:17:ea:ad:85:fd:22:7f:d0:c4:32:ed:c6:fa:92:
de:e7:d9:09:ca:fb:7c:6c:5c:82:3e:d3:7b:10:a0:e0:04:d9:
8e:07:55:43:36:a4:a8:05:eb:56:a7:e5:13:11:2f:8b:f0:b3:
91:7f:e8:d5:86:0f:dc:d5:38:fa:a0:84:3c:75:35:e3:f1:6c:
6e:35:fb:0d:a3:62:44:8d:29:df:b9:e7:c5:db:f1:42:c9:3d:
79:5f:d4:13:c8:75:42:b9:3b:3b:de:14:da:a8:95:fe:7c:52:
b0:16:77:70:da:2d:17:91:9f:cb:f9:8b:15:ea:18:c0:b1:42:
71:63:b5:f0:5f:16:ab:03:e4:32:82:c0:8e:f3:7e:7b:1c:93:
13:7d:57:fe:f5:11:bf:3e:63:33:99:6e:28:c7:5b:4c:26:21:
a0:bb:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:54:03 2025 by rpki-client