Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5688F1346CE211F087547986DAE4EC9C.roa
File: 5688F1346CE211F087547986DAE4EC9C.roa (raw, json)
Hash identifier: IV4nTjHZ9n1FVidHCJzv+K0aDNIt5wIvu3QyZ4ui5Z8=
Subject key identifier: BE:B1:24:98:A9:3C:DE:83:A2:96:25:DF:6B:9C:E3:4A:E4:36:92:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016810
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5688F1346CE211F087547986DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 01:13:02 +0000
ROA not before: Wed 30 Jul 2025 01:12:57 +0000
ROA not after: Wed 20 Aug 2025 01:12:57 +0000
asID: 27951
IP address blocks: 45.192.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92176 (0x16810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 01:12:57 2025 GMT
Not After : Aug 20 01:12:57 2025 GMT
Subject: CN=6889719e-2ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:06:aa:71:e0:f0:21:c0:c9:99:9e:1b:55:
79:21:43:20:ed:a2:8b:1b:ca:95:e3:18:1a:66:02:
31:c1:f2:69:c1:e2:2f:72:20:ac:5c:d6:7f:8a:62:
c0:c5:ef:4e:ed:d9:c6:7a:e3:1f:00:0e:fc:d4:d5:
a0:72:4a:70:d9:dd:0d:b5:20:d0:41:57:be:16:ae:
9a:d8:a1:70:28:6c:75:4b:7d:c9:cf:17:a0:80:b3:
ab:a5:1f:0d:de:2f:2e:a9:4c:a6:dc:ce:7b:c1:32:
80:01:c0:ef:03:56:5c:e2:3e:1a:93:f3:f9:e6:18:
07:41:0d:1a:fb:e8:a6:ef:99:f1:5d:c2:98:cc:6d:
ba:3e:ac:b5:da:21:b8:8a:5b:1c:e1:72:eb:38:1b:
59:72:25:71:01:7d:20:7c:3c:22:e2:a8:5d:80:8b:
ee:f6:b9:52:e8:97:fe:c0:1c:f9:a7:3e:1b:bd:fe:
34:0a:dc:66:6d:4b:ea:dc:78:ce:0d:e8:9b:10:e6:
67:a5:2d:59:e6:b8:bd:9a:29:c7:23:32:8e:a7:20:
15:93:81:cd:bc:7a:fe:37:41:e5:30:d4:df:7a:6c:
04:e6:65:6e:87:50:53:f1:72:dc:b0:54:3c:6e:35:
25:32:b9:77:75:d6:8a:ae:72:71:68:6f:7d:d7:19:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:24:98:A9:3C:DE:83:A2:96:25:DF:6B:9C:E3:4A:E4:36:92:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5688F1346CE211F087547986DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:bd:83:be:07:66:d5:81:e3:cd:09:cd:a7:e7:95:46:fa:ea:
fc:28:23:21:61:86:bb:e1:d9:82:8b:dc:7e:b6:d4:8d:6f:b6:
b7:0a:d4:77:04:e6:a0:08:ed:41:3f:5d:a3:e8:5b:73:70:f3:
68:69:47:29:55:90:5a:2d:a6:5e:15:4a:fb:ec:a0:fa:a6:99:
00:d9:8f:7a:3f:06:3d:01:91:27:66:68:15:05:a4:a1:e5:ee:
9f:d5:8a:47:5b:bc:26:86:43:bd:e2:03:2b:80:9f:41:ea:9c:
58:fb:27:cd:06:50:c9:14:13:a5:27:5b:75:9e:d0:a0:2a:9f:
f7:ec:5f:9b:04:0c:84:3f:9d:29:03:41:bf:82:93:d1:58:8a:
8e:38:fe:ac:0b:a5:f0:59:e6:9f:8a:c9:1c:9f:d1:8b:2d:83:
4f:3f:82:8e:4e:d4:b1:1d:8f:3b:8b:6e:38:33:1d:b5:dc:b0:
e3:17:77:7e:37:75:f7:d1:e3:b0:8a:5f:9f:01:5e:76:63:e6:
e6:5f:7b:64:0e:ca:60:ee:46:03:07:7a:47:0d:92:ca:a8:e0:
44:c1:cc:7e:0b:f0:0a:41:26:54:b0:4e:9f:0e:da:ef:cd:23:
ab:82:55:0b:be:82:2e:87:ff:8c:a4:e3:3d:d3:ce:27:21:dd:
8a:29:ce:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:11 2025 by rpki-client