Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17111DA64B7C11F08E4CA4B5DAE4EC9C.roa
File: 17111DA64B7C11F08E4CA4B5DAE4EC9C.roa (raw, json)
Hash identifier: X3u7/Sms+7A0e5w5WOuXt1lrBl3u8YvA95yV3PEhCzI=
Subject key identifier: 2C:95:DA:94:68:82:8B:40:2D:BB:E0:EC:2B:08:9E:BA:66:47:80:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17111DA64B7C11F08E4CA4B5DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 13:08:02 +0000
ROA not before: Tue 17 Jun 2025 13:07:54 +0000
ROA not after: Thu 17 Jul 2025 13:07:54 +0000
asID: 398478
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89258 (0x15caa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 13:07:54 2025 GMT
Not After : Jul 17 13:07:54 2025 GMT
Subject: CN=685168b2-bf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:2a:43:b2:39:88:bb:fb:e7:e9:0a:50:3c:
e0:b5:5f:9a:60:68:2c:cf:b1:27:18:55:eb:51:86:
80:10:c4:75:bf:93:b1:44:47:9e:ef:9d:41:68:1d:
f2:5a:93:ee:cd:98:87:d8:02:e2:a7:22:e8:85:ab:
34:dd:49:fd:be:6c:9a:a0:62:35:ae:e6:55:d8:18:
ab:5b:2d:62:8b:bd:07:7b:77:f6:e9:e7:c5:6d:07:
2f:e7:5d:0c:9c:9b:eb:67:83:73:2f:9c:4d:4b:e2:
ac:9b:51:31:22:30:96:60:b9:20:54:95:51:d3:c5:
8a:79:16:a8:15:f8:41:1c:5a:76:49:2b:af:c1:f2:
3a:dd:57:08:25:57:83:09:16:8f:31:ea:4a:67:22:
8d:fa:43:08:6c:63:a2:6c:aa:af:9e:42:6b:bd:9b:
29:78:8c:82:70:52:2f:e8:a4:b5:68:90:9f:01:2c:
fa:6e:70:71:21:8d:d3:ef:cb:13:df:ec:af:7d:0c:
71:dc:19:49:d0:16:c4:6d:3f:5d:f5:60:22:d3:0b:
44:cc:b2:d4:b3:84:5a:64:5f:31:3d:29:19:4d:f3:
3a:cc:68:a0:37:55:7b:a4:d0:ca:7f:58:49:4b:10:
51:95:b8:cb:1d:68:67:ee:ea:9c:19:e5:db:5d:50:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:DA:94:68:82:8B:40:2D:BB:E0:EC:2B:08:9E:BA:66:47:80:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17111DA64B7C11F08E4CA4B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:eb:b8:47:7d:74:38:4a:50:a9:ca:b1:d2:dc:0c:2a:3e:86:
89:2f:96:84:f3:b2:4c:4d:c1:af:f1:be:91:5e:93:1c:a9:06:
e8:a7:1b:7a:57:20:be:f6:c3:7c:86:19:c9:f5:38:75:b1:fc:
30:1b:51:15:cc:33:06:1c:31:f6:33:3b:dc:87:30:cc:e7:25:
ad:4d:2b:ea:13:68:d9:d0:a5:bb:80:30:ef:c5:05:5a:ba:df:
dd:5b:eb:34:f3:7b:b4:d3:8e:e3:5d:e3:e9:57:14:8e:9d:b3:
a4:0a:50:de:96:0a:a9:ad:a7:91:e1:c9:4d:fe:76:d2:99:16:
85:c2:fa:fc:07:20:86:69:ef:06:50:29:eb:fa:75:47:60:f6:
39:c6:39:96:5e:08:cf:82:5d:7f:52:6c:1f:a1:07:bd:db:80:
9e:67:b3:a0:be:d9:36:92:14:17:c6:d7:7e:f3:23:a1:44:f8:
c3:51:90:59:ee:d0:59:a7:c6:01:fc:4f:63:ea:58:45:cc:6d:
39:18:5f:6f:4e:42:5d:f5:87:c5:4c:e2:a3:45:81:43:68:81:
0f:e6:4b:6a:4d:02:34:c5:b9:1e:5a:e5:fc:5e:13:0c:5d:de:
bd:f0:f8:09:32:b2:c6:75:89:3e:34:7b:ba:b7:2e:89:d6:fe:
da:23:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:04:00 2025 by rpki-client