Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7C0415A6D2D11F0BA738181DAE4EC9C.roa
File: B7C0415A6D2D11F0BA738181DAE4EC9C.roa (raw, json)
Hash identifier: 4XS2cqR4W47++4cwwbNNU2ICgMJL96qUTnNtBPcpO1A=
Subject key identifier: FF:8B:47:38:68:85:1C:13:78:69:1E:67:B7:94:05:00:3A:29:6D:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01684E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7C0415A6D2D11F0BA738181DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 10:12:38 +0000
ROA not before: Wed 30 Jul 2025 10:12:32 +0000
ROA not after: Sat 01 Aug 2026 10:12:32 +0000
asID: 141735
IP address blocks: 45.195.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92238 (0x1684e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 10:12:32 2025 GMT
Not After : Aug 1 10:12:32 2026 GMT
Subject: CN=6889f015-aea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:78:cd:6c:99:86:b9:98:e2:bd:f1:4c:7a:
73:cf:cd:4b:db:80:04:ad:b5:9b:bf:23:27:07:c3:
5c:bb:ce:a3:32:76:79:51:1b:3f:17:81:e0:c7:62:
bf:62:52:24:72:b5:4a:84:5c:28:2e:36:15:e3:7d:
aa:ce:b7:4d:88:e7:75:84:74:2e:a5:a9:79:98:e6:
84:2f:9d:be:4c:dd:be:a6:48:61:04:35:e2:43:db:
e5:53:50:ee:d4:77:4b:ff:a1:72:62:ef:bc:6d:66:
f4:8b:ea:62:a4:13:c3:f9:c8:c9:98:bf:46:b8:42:
8d:5e:33:ed:0c:7a:ab:12:bc:4d:ae:ee:bb:7e:3d:
04:51:b9:a5:7a:01:e8:07:c5:5d:14:fe:50:08:63:
da:4b:c4:8b:4d:38:c8:d5:01:a1:46:71:cd:f0:c5:
cf:34:06:bd:3c:e4:e6:39:db:e3:9d:87:50:40:ea:
54:23:f4:bc:ec:05:c3:d1:85:41:ce:f5:fe:d0:77:
ea:72:10:0f:1b:36:7e:5c:c2:16:29:7d:42:40:0e:
99:81:e4:5e:cc:60:ec:7d:9f:88:c3:ec:7c:b8:95:
de:5a:44:b6:57:cb:fa:3b:29:6b:bb:19:7e:0a:ad:
8f:aa:dd:b1:12:42:cf:ff:8e:51:07:43:c8:43:f1:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8B:47:38:68:85:1C:13:78:69:1E:67:B7:94:05:00:3A:29:6D:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7C0415A6D2D11F0BA738181DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.147.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ab:72:32:24:bd:23:7d:14:f5:12:0f:fe:2f:ca:82:f1:57:
1c:b3:e9:3b:90:3d:c6:02:82:a0:4b:d0:67:05:33:9f:45:2b:
5e:99:d3:9b:9e:d1:86:27:eb:bb:d9:c7:78:01:31:eb:e9:b5:
ab:14:15:20:17:ed:73:38:b0:b9:83:9e:e1:51:bd:d7:2d:0b:
d2:c5:bc:c4:a0:7a:7c:1a:d2:de:2c:d4:5d:64:a0:a1:a1:41:
a6:0d:6f:67:65:7a:7e:77:8b:e0:02:53:c5:28:74:44:24:69:
c9:64:91:32:8a:17:1d:91:96:70:35:45:c3:47:38:c1:1d:1a:
3a:41:fd:2f:5b:fd:7e:74:03:e7:56:6d:cb:d6:46:a7:d2:5d:
83:57:6f:6e:0f:94:a3:9a:03:0f:83:d2:8c:cc:f1:f3:ce:8f:
0b:de:b7:c9:5a:a8:09:34:58:68:4d:4e:b1:41:fc:4b:32:e1:
45:c7:c6:dc:fc:e8:14:44:45:23:23:7b:fd:a6:be:bf:6b:41:
a8:e4:79:99:d8:2f:20:98:cb:fc:7a:53:49:29:20:a6:b5:1b:
b9:2e:b7:f3:13:34:78:a9:3f:aa:3c:57:b0:e9:d9:52:8c:8d:
ad:a3:00:32:b3:fa:17:ac:ac:e4:5f:3d:86:c3:f3:06:26:ee:
84:13:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:49 2025 by rpki-client