Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0982C466D2911F0BD6319E9DAE4EC9C.roa
File: D0982C466D2911F0BD6319E9DAE4EC9C.roa (raw, json)
Hash identifier: u/4AKp7TH1LSRRoRDO1z+5so5YI+/6cBlhsHJ2FqfWQ=
Subject key identifier: 42:DB:37:AE:69:C4:16:CF:81:0D:4F:C3:4F:DE:9A:7E:70:5B:E5:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01684A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0982C466D2911F0BD6319E9DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 09:44:41 +0000
ROA not before: Wed 30 Jul 2025 09:44:36 +0000
ROA not after: Wed 03 Sep 2025 09:44:36 +0000
asID: 13335
IP address blocks: 45.192.222.0/24 maxlen: 24
45.192.223.0/24 maxlen: 24
45.192.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 05 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92234 (0x1684a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 09:44:36 2025 GMT
Not After : Sep 3 09:44:36 2025 GMT
Subject: CN=6889e989-a931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7d:bd:ed:e7:31:c9:e8:11:ff:89:48:ac:4c:
2f:3c:62:da:e9:8e:3a:a1:5e:bf:0d:d2:08:19:b7:
ff:47:36:0f:d2:e1:8a:56:36:9e:e2:39:d9:c6:9e:
5d:b4:b7:6c:2e:ae:2e:1e:dd:21:25:78:37:c8:ce:
82:3e:b7:33:0a:4a:14:35:dc:fc:2a:9f:c1:63:fb:
62:66:de:c3:79:b0:6d:ae:78:c5:84:9d:ce:fb:62:
37:f8:06:36:64:5e:af:87:20:f1:56:a3:b7:a5:85:
36:19:e6:a2:be:69:f2:ac:2b:4f:a6:b4:25:fe:c0:
ba:c7:6c:65:7b:92:15:e0:ca:2b:03:d5:b1:28:b7:
c5:76:ff:f2:34:4c:be:27:e5:f9:3c:62:08:f0:f6:
36:a8:6d:01:fa:1f:b1:7e:cb:cc:05:1e:65:f5:24:
5b:e8:d1:dd:67:6f:c3:ca:43:4e:8f:4b:9f:8d:6e:
1f:50:d8:3b:17:25:1e:a3:95:c1:e3:69:86:43:1e:
5d:be:5e:b0:42:18:1d:92:50:a6:d9:45:b1:1b:03:
91:5f:41:5f:20:28:f7:27:d7:11:34:a2:c1:f7:f7:
31:2d:de:bc:a4:1f:52:8d:5c:79:91:36:eb:e6:e0:
96:06:dd:62:31:68:a1:b8:95:58:14:a9:8a:dd:87:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DB:37:AE:69:C4:16:CF:81:0D:4F:C3:4F:DE:9A:7E:70:5B:E5:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0982C466D2911F0BD6319E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.222.0-45.192.224.255
Signature Algorithm: sha256WithRSAEncryption
67:20:13:18:ca:fe:05:d6:84:ef:57:10:28:3a:b0:bd:15:a3:
0c:42:a9:94:5c:97:d0:e8:b2:9b:39:52:28:54:9a:da:05:46:
9a:02:0d:e9:ed:8f:b0:90:c9:34:25:48:3d:f8:4b:9e:27:18:
e9:90:15:5d:0d:14:9e:82:b4:e7:76:8c:28:d1:aa:6a:3f:3b:
55:03:cd:ef:e6:b3:04:11:0c:89:ad:e6:69:ba:91:84:99:41:
f6:04:cb:a8:66:4c:31:d7:3c:7e:21:db:95:4d:87:58:32:76:
aa:d6:34:d2:ac:85:73:94:af:22:4d:cb:7d:c6:92:52:48:57:
ab:02:73:b7:52:7f:4a:67:62:97:f1:66:df:fb:7a:01:23:05:
5a:12:a8:c2:b7:36:11:65:e4:4d:58:30:23:5d:82:4a:46:f4:
bc:62:31:18:f0:2f:4a:81:95:34:a7:ce:11:0f:81:e1:cd:84:
66:47:d8:54:38:30:4b:d9:20:fd:25:62:f9:06:cf:32:85:05:
28:42:0e:6d:be:1d:34:17:14:9b:aa:4c:1c:3c:9f:69:6b:21:
31:79:2e:2f:48:41:55:48:ce:af:59:cb:7f:98:4d:95:0c:96:
05:5c:3b:fc:42:46:ae:b8:c5:a9:a4:ca:67:4d:95:b8:6f:f9:
02:3a:39:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:47:18 2025 by rpki-client