Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ECECF96688B11F0844B78D1DAE4EC9C.roa
File: 4ECECF96688B11F0844B78D1DAE4EC9C.roa (raw, json)
Hash identifier: Xu+9U0lo/N54IbV+6HO23toEtFwU4TU8RCFQWCPVrWY=
Subject key identifier: AF:FB:7F:FE:AC:BD:9E:43:E7:0A:1B:1B:CF:BB:C2:C4:B4:8D:04:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01676D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ECECF96688B11F0844B78D1DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 12:39:59 +0000
ROA not before: Thu 24 Jul 2025 12:39:53 +0000
ROA not after: Thu 28 Aug 2025 12:39:53 +0000
asID: 44559
IP address blocks: 45.192.52.0/24 maxlen: 24
45.192.53.0/24 maxlen: 24
45.195.162.0/24 maxlen: 24
45.195.163.0/24 maxlen: 24
45.195.164.0/24 maxlen: 24
45.195.165.0/24 maxlen: 24
45.195.167.0/24 maxlen: 24
45.195.168.0/24 maxlen: 24
45.195.189.0/24 maxlen: 24
45.195.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92013 (0x1676d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 12:39:53 2025 GMT
Not After : Aug 28 12:39:53 2025 GMT
Subject: CN=6882299e-131c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:9d:32:95:ab:c0:9d:5c:fe:a9:b8:66:49:
11:c1:bd:29:90:0f:82:08:ef:3e:1d:84:47:08:8d:
b0:4b:69:68:47:81:76:59:be:39:5b:fc:0c:83:c3:
af:bc:1d:4a:1e:72:e6:17:a4:6a:00:05:65:99:37:
aa:3f:54:88:cf:ea:48:7c:63:19:c9:6b:18:b2:b9:
fa:aa:7e:aa:a2:de:74:57:53:ee:14:45:db:0e:c9:
eb:65:2e:93:79:f4:44:8c:f2:9a:9c:a4:bd:7a:00:
01:c2:c9:ec:e2:54:38:e7:ba:c6:b1:40:33:04:9a:
bd:c8:a9:08:8b:50:92:29:4d:52:b4:24:65:8c:1c:
d4:c0:c5:c7:f2:cf:7b:38:64:43:99:d6:42:3f:d0:
23:c5:38:5f:66:9c:8d:df:53:4a:66:69:ff:8b:69:
3e:e1:7e:ef:f2:8d:02:23:3f:08:4b:f8:b7:cf:8b:
6d:4d:bc:b4:03:4b:13:73:2d:b7:0b:76:c4:f2:49:
72:ba:79:eb:ae:c9:84:18:e7:c4:61:f9:d9:b5:95:
88:01:d4:d5:58:b8:55:d3:6d:90:89:85:f9:f9:b1:
39:ae:5c:4e:9b:87:23:9e:61:73:e2:90:83:1a:b2:
3b:d9:1c:6e:73:23:75:1d:a8:3a:ed:bd:0b:fb:fe:
24:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FB:7F:FE:AC:BD:9E:43:E7:0A:1B:1B:CF:BB:C2:C4:B4:8D:04:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ECECF96688B11F0844B78D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.52.0/23
45.195.162.0-45.195.165.255
45.195.167.0-45.195.168.255
45.195.189.0-45.195.190.255
Signature Algorithm: sha256WithRSAEncryption
6a:12:f4:7b:1b:7e:bc:72:08:7e:b7:0e:66:80:8a:2f:ea:43:
bf:90:6b:ee:81:cf:73:6c:aa:d0:dc:f7:09:2b:97:96:5e:1a:
f0:eb:61:1f:e1:8e:d3:01:34:21:00:86:c1:9c:3a:f7:5c:fc:
69:c2:84:74:ce:dd:a6:5f:2f:82:b9:28:a8:68:84:73:e1:bb:
a7:31:1f:ab:05:32:01:55:aa:7c:5a:3e:63:d5:63:fd:9c:09:
8f:c2:4a:7b:f5:18:44:d1:31:35:7a:83:2b:78:c2:f8:2d:f2:
1d:86:c9:77:01:e0:a7:70:a3:cc:8c:6d:3e:8c:bd:a9:b1:cc:
c2:83:3b:aa:58:18:7c:aa:a4:01:6d:72:c5:ed:82:f0:a4:1b:
39:25:ed:e3:bb:37:6e:ce:8a:2c:fb:45:00:88:9a:46:34:b8:
42:ff:dd:7e:dd:c2:1a:40:0c:aa:71:4c:73:8d:9a:65:50:51:
c5:0b:42:bd:46:39:d9:d7:a7:c4:c7:cf:69:f4:2e:f0:b9:7c:
3a:c3:45:c8:a3:b8:ad:96:1e:6f:ef:81:94:30:b5:7f:d9:bc:
1a:53:38:84:66:6b:87:14:bc:2e:7e:40:84:38:21:dc:44:ce:
58:4a:41:49:2a:20:2e:01:c3:aa:06:b9:cf:40:f5:d9:2d:4c:
d8:92:7d:99
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIDAWdtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzI0MTIzOTUzWhcNMjUwODI4MTIzOTUzWjAYMRYw
FAYDVQQDEw02ODgyMjk5ZS0xMzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt92dMpWrwJ1c/qm4ZkkRwb0pkA+CCO8+HYRHCI2wS2loR4F2Wb45W/wM
g8OvvB1KHnLmF6RqAAVlmTeqP1SIz+pIfGMZyWsYsrn6qn6qot50V1PuFEXbDsnr
ZS6TefREjPKanKS9egABwsns4lQ457rGsUAzBJq9yKkIi1CSKU1StCRljBzUwMXH
8s97OGRDmdZCP9AjxThfZpyN31NKZmn/i2k+4X7v8o0CIz8IS/i3z4ttTby0A0sT
cy23C3bE8klyunnrrsmEGOfEYfnZtZWIAdTVWLhV022QiYX5+bE5rlxOm4cjnmFz
4pCDGrI72RxucyN1Hag67b0L+/4kIQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFK/7
f/6svZ5D5wobG8+7wsS0jQQXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RUNFQ0Y5NjY4OEIxMUYwODQ0Qjc4RDFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBLcA0MAwDBAEtw6IDBAEtw6Qw
DAMEAC3DpwMEAC3DqDAMAwQALcO9AwQALcO+MA0GCSqGSIb3DQEBCwUAA4IBAQBq
EvR7G368cgh+tw5mgIov6kO/kGvugc9zbKrQ3PcJK5eWXhrw62Ef4Y7TATQhAIbB
nDr3XPxpwoR0zt2mXy+CuSioaIRz4bunMR+rBTIBVap8Wj5j1WP9nAmPwkp79RhE
0TE1eoMreML4LfIdhsl3AeCncKPMjG0+jL2psczCgzuqWBh8qqQBbXLF7YLwpBs5
Je3juzduzoos+0UAiJpGNLhC/91+3cIaQAyqcUxzjZplUFHFC0K9RjnZ16fEx89p
9C7wuXw6w0XIo7itlh5v74GUMLV/2bwaUziEZmuHFLwufkCEOCHcRM5YSkFJKiAu
AcOqBrnPQPXZLUzYkn2Z
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:04 2025 by rpki-client