Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAEEF3D246A411F09B83B0B0DAE4EC9C.roa
File: EAEEF3D246A411F09B83B0B0DAE4EC9C.roa (raw, json)
Hash identifier: jMwisoExdRSp80w+zHgzBFK2S6VRPMboxIQdix8sNI8=
Subject key identifier: A3:FD:E5:2F:A4:E8:AE:EF:0F:C7:0C:2E:83:EB:30:A4:E0:05:81:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B4C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAEEF3D246A411F09B83B0B0DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 09:17:38 +0000
ROA not before: Wed 11 Jun 2025 09:17:33 +0000
ROA not after: Tue 25 Aug 2026 09:17:33 +0000
asID: 138995
IP address blocks: 45.207.4.0/24 maxlen: 24
45.207.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 00:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88908 (0x15b4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 09:17:33 2025 GMT
Not After : Aug 25 09:17:33 2026 GMT
Subject: CN=684949b2-3223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:90:61:66:9e:00:af:2b:73:4c:6c:cb:47:
3e:81:ef:0c:61:fe:2b:b8:3e:3b:69:58:30:d7:34:
bb:c3:8d:5e:ab:26:88:1b:94:fa:7e:ca:ed:52:a0:
3d:ea:97:9e:85:bf:dd:17:ce:37:a0:62:b2:e5:b6:
5e:8e:cf:f0:44:9c:94:9f:b6:a4:bc:8a:ff:2c:89:
31:85:4f:3a:c3:75:3f:d5:d3:4e:6a:31:9b:70:d8:
a7:7c:2c:7b:bc:a6:22:da:38:6f:75:4b:97:f2:65:
f4:34:4f:77:ed:f9:01:6e:b9:bb:74:bd:2b:8d:5e:
57:e6:73:a3:20:2b:84:25:5e:02:26:bf:92:71:a4:
a0:6f:1f:25:bc:bd:ba:c7:fd:2a:22:77:57:3a:70:
4f:d8:dd:c3:ec:cf:00:81:cf:d7:1f:b9:7c:2f:68:
a8:a5:45:97:80:66:d5:e9:67:ed:18:ec:e0:a3:d6:
6c:9c:7a:c5:df:7b:52:9b:23:b1:74:e0:df:2a:d8:
f8:8f:e4:06:e4:ec:81:a2:c2:ae:c9:10:13:41:83:
dc:37:56:16:48:cc:5c:38:b5:bd:c0:f2:bd:23:91:
8a:60:68:43:cb:84:32:0a:0a:a1:29:71:a9:57:7b:
d4:d1:6e:38:23:cc:4d:74:b2:0b:48:19:8d:1f:75:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FD:E5:2F:A4:E8:AE:EF:0F:C7:0C:2E:83:EB:30:A4:E0:05:81:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAEEF3D246A411F09B83B0B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.4.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:a8:3d:3e:f1:b1:5c:39:1f:74:60:30:ae:97:d3:d0:2b:e6:
c5:bd:dc:fa:18:69:8d:e1:b9:82:a6:d7:75:b1:9d:ff:c3:1e:
b7:f4:ba:3c:83:1e:a7:5f:ef:f8:0d:40:7b:89:5c:83:1e:e9:
7f:58:4e:68:e0:1d:fe:a0:7a:a4:ba:77:f0:16:b5:2e:56:16:
5c:6f:f3:f5:b5:16:70:9a:e1:dc:98:62:50:5f:65:2f:80:01:
9d:ec:79:3c:58:1c:0c:c5:90:b7:66:20:d6:33:b1:73:ee:6f:
6b:fc:43:d3:48:fe:0c:d9:49:a8:cb:83:82:2b:1c:54:04:6b:
cf:82:dd:d9:fa:be:d7:73:24:78:d8:c6:a8:93:fc:d1:92:dd:
e5:91:a8:2c:a1:07:e7:88:ff:ce:9e:3b:00:c8:16:20:78:aa:
5e:c7:e7:cf:92:9b:23:ba:f8:c9:ec:8e:50:c1:71:d3:b2:5f:
a8:f7:ee:13:c8:41:ab:13:ea:eb:82:29:7a:4e:06:f5:45:5f:
e5:a8:7b:55:6a:12:47:a8:d7:f6:43:f8:2b:ef:9e:06:34:5c:
7d:02:f1:5b:ef:92:94:c5:87:c3:00:be:f4:2b:18:34:02:77:
ab:61:29:2a:38:2b:ec:c5:16:0a:73:41:27:92:b9:31:9a:65:
d2:29:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:15:43 2025 by rpki-client