Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C333C8A06FED11F0A917A9DCDAE4EC9C.roa
File: C333C8A06FED11F0A917A9DCDAE4EC9C.roa (raw, json)
Hash identifier: 1l8KsfX7V1/KSDxlEQ8ISNsZ+fRWvoPxLwn/6zEOeoA=
Subject key identifier: E1:70:3E:EA:19:3F:BB:03:92:7C:B4:D1:67:8C:E6:82:7C:6E:27:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C333C8A06FED11F0A917A9DCDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 22:12:22 +0000
ROA not before: Sat 02 Aug 2025 22:12:17 +0000
ROA not after: Tue 30 Sep 2025 22:12:17 +0000
asID: 398443
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92406 (0x168f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 22:12:17 2025 GMT
Not After : Sep 30 22:12:17 2025 GMT
Subject: CN=688e8d46-5f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:00:5a:ab:a5:a4:1a:03:40:89:b3:33:d2:
bb:cd:40:8a:cd:6c:1a:b7:47:ca:86:ef:57:1e:94:
f0:3b:ef:bf:52:3b:48:df:e9:3c:0d:00:5c:0e:6e:
dc:a6:ff:31:43:e5:19:cc:80:4c:cd:ad:d4:2c:a1:
2d:00:e0:1f:d5:ad:29:02:82:6b:6a:1e:20:ee:4c:
70:4d:c4:4c:e6:09:57:47:df:ee:1d:e9:e3:d1:7d:
db:ba:d5:8a:00:f4:e3:fb:a8:24:88:cb:34:82:61:
0e:66:5c:3d:49:4c:63:c6:71:0a:76:33:d9:f1:b4:
85:10:40:e6:43:78:ea:d1:26:d5:67:13:9e:31:64:
e4:db:46:f7:4a:3d:9c:fa:f6:01:7e:e6:ca:4a:50:
d8:2b:a2:95:61:af:d2:e2:63:a2:1c:86:19:3e:f8:
50:cc:82:b4:2f:b6:51:2a:0e:e5:28:98:4e:a6:c0:
26:c2:a2:a7:90:56:66:95:f6:83:13:0b:10:e1:dd:
b0:51:cf:b4:6e:e4:eb:3b:fa:a2:52:6c:46:bb:81:
8f:6e:f9:1a:cf:35:aa:3a:b7:c7:a3:25:06:3e:53:
ef:2b:a4:c3:73:fe:60:2a:45:43:a1:9f:47:bf:7c:
20:41:af:23:6e:53:4f:12:27:70:21:f9:e2:cd:39:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:70:3E:EA:19:3F:BB:03:92:7C:B4:D1:67:8C:E6:82:7C:6E:27:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C333C8A06FED11F0A917A9DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
97:e3:5c:fa:65:00:03:65:12:f7:3f:5d:a2:f8:12:ba:3f:dc:
5d:bd:b3:ba:d2:a7:ba:d5:0a:9e:c7:c3:f5:5a:13:73:63:fe:
d6:de:77:f8:d3:e4:fc:72:0e:26:eb:94:3b:27:93:94:07:b8:
2c:7e:0b:3b:a9:11:f8:3a:c4:bc:0d:df:7e:a7:69:b7:43:d4:
c6:d1:60:8d:11:dd:f2:a2:c8:bc:04:59:f6:44:fc:b5:b8:98:
fc:b4:08:f1:f1:09:25:80:9c:47:1e:2a:0c:55:3a:7a:f9:50:
57:70:17:f8:36:a6:c1:ef:ab:5c:78:89:61:11:83:99:4e:e4:
7b:eb:0f:fe:8b:42:0f:bd:e3:6e:79:bc:d0:76:4d:ca:cb:88:
93:fe:9c:e6:04:47:57:c6:64:b6:67:ec:ac:69:bf:b7:b7:ba:
40:dc:90:34:b9:e2:85:29:2c:8c:8d:1b:02:cf:00:4b:11:1c:
9e:cf:35:71:40:e9:de:12:90:de:3b:2a:29:c5:fd:d7:a7:86:
5f:a4:44:f1:bb:4e:78:3a:7b:20:d5:92:45:b3:43:7e:fa:d2:
f0:47:88:f3:ab:2f:cb:7c:84:e5:5a:10:44:b9:5f:7c:e2:29:
8a:b7:d3:8e:06:c3:6f:14:72:35:93:f2:3e:21:1a:96:39:19:
cb:cc:5d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:38 2025 by rpki-client