Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/604299F66FB111F0AF29CFDBDAE4EC9C.roa
File: 604299F66FB111F0AF29CFDBDAE4EC9C.roa (raw, json)
Hash identifier: MuWErZgIHr94e8bqJygWDVmC+0MvVj2NKaMKe6o1jVY=
Subject key identifier: 60:F3:D3:FC:46:EC:69:7F:70:24:60:8A:55:1C:1A:39:81:D8:24:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01689E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/604299F66FB111F0AF29CFDBDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 15:00:07 +0000
ROA not before: Sat 02 Aug 2025 15:00:02 +0000
ROA not after: Tue 21 Oct 2025 15:00:02 +0000
asID: 135377
IP address blocks: 45.195.216.0/24 maxlen: 24
45.195.217.0/24 maxlen: 24
45.195.218.0/24 maxlen: 24
45.195.219.0/24 maxlen: 24
45.195.220.0/24 maxlen: 24
45.195.221.0/24 maxlen: 24
45.195.222.0/24 maxlen: 24
45.195.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92318 (0x1689e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 15:00:02 2025 GMT
Not After : Oct 21 15:00:02 2025 GMT
Subject: CN=688e27f7-6b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:9e:6a:f4:35:cd:fb:2e:82:54:93:16:61:
a6:5c:b2:64:a7:c2:2d:b2:b0:99:d6:c3:5c:c7:1d:
a1:90:13:44:95:e4:94:20:7a:63:21:b4:a1:52:7a:
42:4e:c4:42:4a:d0:d8:56:db:56:ae:aa:c6:f3:8c:
b9:e0:fb:05:83:07:99:5e:e3:1a:d5:73:5b:3a:44:
4b:9a:71:fb:49:85:7d:34:7d:a7:81:c9:8f:c1:47:
70:41:55:a7:c1:be:ce:e2:6c:10:02:6a:25:4b:d2:
f0:43:19:c7:1c:a1:82:76:57:97:e7:5c:02:87:72:
47:99:0c:3d:fa:f1:b3:43:b3:e8:00:3a:bc:46:ec:
a8:f7:d6:49:d5:cc:c8:c8:c5:94:db:9f:8a:57:54:
ce:cf:71:66:72:21:d5:75:15:c8:9e:ca:2e:3b:73:
03:74:3e:6e:22:b5:1c:d7:13:6d:ce:49:a1:d4:ff:
5f:aa:00:1e:17:3f:72:32:8b:1e:a5:4d:23:b3:dc:
2b:64:0d:50:72:2d:f4:eb:b2:09:3c:50:77:2f:65:
92:fb:64:42:b4:04:e0:1e:8d:d7:7a:70:cd:72:cd:
b5:c0:9e:95:58:64:0a:85:7b:0d:4c:e5:71:ba:4f:
e1:e8:3b:b8:c2:3b:19:26:88:a6:d6:d3:c0:79:51:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F3:D3:FC:46:EC:69:7F:70:24:60:8A:55:1C:1A:39:81:D8:24:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/604299F66FB111F0AF29CFDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.216.0/21
Signature Algorithm: sha256WithRSAEncryption
77:c7:b1:cd:b1:30:56:9c:1d:c0:92:1b:ce:6d:06:17:c9:04:
87:ad:64:81:a1:b5:f4:53:a8:e7:ba:92:79:e5:98:d9:ad:19:
41:6a:7d:c9:c1:0f:2b:7e:c0:87:2b:3a:d4:51:af:92:31:5f:
9c:25:ea:32:42:46:c0:58:a9:48:e0:97:5d:7a:a5:1a:cf:d9:
b8:e3:52:a0:85:bb:7f:ca:ac:5e:bf:d7:c5:45:80:34:69:26:
71:81:5f:c6:f7:dd:cf:bf:65:b5:08:af:3c:af:2a:37:95:14:
87:3f:95:2d:3d:21:1f:f5:07:cb:48:6d:57:94:0a:8b:f4:b1:
7e:24:c6:40:69:16:5b:42:c4:ac:17:15:b0:cb:22:96:6f:a7:
22:7d:4e:d7:06:55:4b:7b:fd:bb:d8:c3:47:20:d2:a9:18:30:
c0:34:9b:f8:90:bb:e7:15:4a:99:c3:e9:42:b2:15:f6:03:1a:
31:19:b2:e5:f8:28:55:ee:f9:46:c1:6d:a3:18:8e:fe:b1:95:
5a:29:63:9f:54:f2:de:64:b0:10:39:8e:cb:0b:a6:89:d8:0e:
6c:14:82:71:3d:ee:e4:3f:d1:8b:ef:df:6e:3e:41:42:9c:78:
c1:14:fb:93:d1:31:3e:be:35:5a:4a:0c:a3:67:91:d5:8c:92:
6c:e8:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:53:49 2025 by rpki-client