Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/011DD8544E8811F08435FBA0DAE4EC9C.roa
File: 011DD8544E8811F08435FBA0DAE4EC9C.roa (raw, json)
Hash identifier: FKsMoqD21x91KdG/caW90qh5xRMylVblCfC0pyAKT6c=
Subject key identifier: 72:2E:1F:BB:5B:08:20:A6:AC:C5:83:5B:23:DB:B7:3B:DB:35:10:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015DA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/011DD8544E8811F08435FBA0DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 10:10:49 +0000
ROA not before: Sat 21 Jun 2025 10:10:45 +0000
ROA not after: Sun 27 Jul 2025 10:10:45 +0000
asID: 202656
IP address blocks: 45.195.178.0/24 maxlen: 24
45.195.180.0/24 maxlen: 24
45.195.182.0/24 maxlen: 24
45.195.183.0/24 maxlen: 24
45.195.184.0/24 maxlen: 24
45.199.205.0/24 maxlen: 24
45.199.206.0/24 maxlen: 24
45.199.221.0/24 maxlen: 24
45.199.222.0/24 maxlen: 24
45.199.223.0/24 maxlen: 24
45.199.224.0/24 maxlen: 24
45.199.252.0/24 maxlen: 24
45.199.255.0/24 maxlen: 24
45.200.160.0/24 maxlen: 24
45.200.161.0/24 maxlen: 24
45.200.162.0/24 maxlen: 24
45.200.163.0/24 maxlen: 24
45.200.164.0/24 maxlen: 24
45.200.165.0/24 maxlen: 24
45.200.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89512 (0x15da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 10:10:45 2025 GMT
Not After : Jul 27 10:10:45 2025 GMT
Subject: CN=68568529-d9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:58:78:b4:24:19:92:91:94:48:57:e9:fa:
59:c3:73:b0:9f:bf:a9:61:f0:aa:66:51:ad:7a:68:
54:b1:4c:55:1a:dc:90:5a:74:3d:c0:43:3a:bc:5e:
cc:4f:2c:e6:39:72:e5:ab:28:55:42:07:74:4f:77:
92:15:ba:ad:8e:88:c2:3b:27:4e:83:88:24:dc:c3:
55:a8:0c:69:28:f2:4b:ac:3b:4d:55:b1:a6:c8:a5:
5c:69:af:7b:f9:9e:0f:44:b7:c7:89:8b:79:4c:74:
67:0d:c8:13:e0:51:04:69:9e:d4:9c:20:9a:92:06:
48:75:de:e0:5c:33:a8:19:de:db:7a:9e:82:7c:48:
d5:00:6f:a3:91:68:77:22:99:f7:39:16:80:76:68:
d0:89:4c:f5:c4:94:4c:ca:c8:42:3e:fc:aa:c8:ef:
57:a4:be:9a:fb:c9:6d:ac:27:9b:06:a5:8f:78:48:
6f:29:79:fd:be:0c:93:08:be:b9:11:4b:f2:9f:0b:
fb:59:3e:e8:3c:b3:a8:51:ae:5a:00:8a:a4:52:4b:
ac:21:8a:c1:c9:9d:ce:37:21:04:06:3f:e3:ec:9e:
e3:d5:b0:c9:74:b7:c8:ac:17:16:d2:44:8a:66:1f:
fc:00:19:c4:94:e8:0c:79:1b:6a:3f:f6:0e:7d:bc:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2E:1F:BB:5B:08:20:A6:AC:C5:83:5B:23:DB:B7:3B:DB:35:10:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/011DD8544E8811F08435FBA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.178.0/24
45.195.180.0/24
45.195.182.0-45.195.184.255
45.199.205.0-45.199.206.255
45.199.221.0-45.199.224.255
45.199.252.0/24
45.199.255.0/24
45.200.160.0-45.200.165.255
45.200.178.0/24
Signature Algorithm: sha256WithRSAEncryption
39:14:e7:f1:70:c4:15:3d:47:20:dd:a6:24:22:a6:0c:65:8a:
71:13:43:f9:68:13:e1:80:68:b5:e4:a1:75:78:a8:f3:f2:8f:
ef:7a:2b:ab:40:6b:e5:2f:ed:d5:70:a1:c2:c4:a7:3e:3d:4d:
d2:67:8d:a5:11:40:ae:31:96:54:07:25:79:19:96:f2:24:88:
6e:05:7e:88:7f:88:23:5e:ad:1a:dc:44:62:b9:2f:74:80:ee:
bb:2e:7c:8b:8a:a4:62:f1:31:8a:17:09:00:25:49:33:0e:c4:
f2:d1:93:c8:4b:57:0a:32:1b:6b:c6:8a:30:60:18:2b:1f:bf:
fe:09:47:1a:3e:e8:89:f0:2a:d2:6d:94:42:04:02:65:9e:e1:
00:23:f5:9d:a5:be:49:5e:84:f7:f4:fd:53:36:f3:60:a3:82:
ac:7b:02:10:6b:e5:41:a4:c9:14:50:cf:94:16:3b:79:db:a6:
7c:f8:89:a1:80:da:15:7b:b0:86:fb:37:ed:de:a2:1c:da:3e:
03:c6:dc:81:20:f5:a7:97:e5:87:e3:bd:15:b0:29:40:bb:4b:
93:29:9e:7a:61:b2:f8:78:db:1a:0c:5b:66:c7:02:9f:d1:5f:
6f:ee:3f:dc:18:0b:8a:e0:0f:71:54:04:1f:22:65:83:1b:fa:
41:f4:da:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:18:16 2025 by rpki-client