Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69F3AAA2542D11F088686ECEDAE4EC9C.roa
File: 69F3AAA2542D11F088686ECEDAE4EC9C.roa (raw, json)
Hash identifier: G4CrCnpG+eYrxhA5+raQyzRRPPRKGMmsrNyg3IeWx6w=
Subject key identifier: 6A:64:8F:4C:99:16:B7:68:8D:CC:31:69:66:B8:66:01:42:BC:8D:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69F3AAA2542D11F088686ECEDAE4EC9C.roa
Signing time: Sat 28 Jun 2025 14:37:28 +0000
ROA not before: Sat 28 Jun 2025 14:37:22 +0000
ROA not after: Sat 02 Aug 2025 14:37:22 +0000
asID: 401434
IP address blocks: 45.196.216.0/23 maxlen: 24
45.207.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89917 (0x15f3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 14:37:22 2025 GMT
Not After : Aug 2 14:37:22 2025 GMT
Subject: CN=685ffe28-ef6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:8f:62:57:40:56:07:1b:f9:0f:10:39:1a:
93:27:a7:3c:21:96:80:18:a0:b8:70:e3:ee:38:c1:
0e:78:69:7d:88:52:40:84:ce:43:3e:ce:44:a7:90:
b1:8c:b8:99:36:7d:b7:8a:a4:7c:7f:ef:95:26:a1:
a1:ac:ad:dd:d9:1d:db:e9:7f:b4:8a:49:96:4b:e2:
e0:de:00:4e:de:7b:25:0c:db:f6:df:c7:f4:a6:e2:
69:11:ef:4e:3b:55:69:61:7a:ca:6d:e3:a6:3e:76:
72:3c:2e:04:3e:5b:94:89:0e:b8:5b:a7:f7:55:21:
7a:8e:6e:e8:0e:69:e6:59:c6:74:f5:ef:0b:f4:90:
05:57:27:cc:c5:a3:69:33:63:04:6b:68:f9:fc:7f:
24:d2:1b:6d:68:96:37:c9:e1:6d:e6:30:2c:2f:ce:
9e:87:bf:06:f0:8f:b2:05:c2:da:f7:d1:9d:28:ba:
dd:4c:21:c8:fe:8a:1f:92:d1:94:33:10:56:bc:e3:
bf:68:4a:77:8f:e3:7f:ab:44:a7:03:4b:fa:3d:27:
41:17:cc:31:83:22:ef:01:4d:d4:61:b2:ce:2f:fe:
c7:6a:8b:79:7a:01:6e:30:8f:32:66:22:dd:59:91:
52:6a:5f:48:8c:32:cf:1e:fb:a7:29:10:7b:f0:56:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:64:8F:4C:99:16:B7:68:8D:CC:31:69:66:B8:66:01:42:BC:8D:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69F3AAA2542D11F088686ECEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.216.0/23
45.207.154.0/23
Signature Algorithm: sha256WithRSAEncryption
60:10:e4:63:7f:6b:72:de:4d:26:52:8e:01:8d:a8:20:c7:75:
33:25:86:67:90:27:4c:58:b1:5b:d6:6f:99:48:c4:16:bb:11:
1d:ec:52:9b:62:9f:c2:8d:fc:c1:99:20:57:55:76:33:b3:75:
eb:57:f3:60:0c:67:62:e2:db:54:1f:7f:a9:09:df:b1:92:98:
66:52:00:dc:98:c7:b0:17:00:05:9e:c9:98:b9:e1:e8:a1:29:
8d:41:89:77:d7:24:ec:69:19:e6:40:37:1f:47:f3:41:ce:60:
d4:47:77:c3:7c:d4:6f:60:15:34:92:6c:e7:8b:7f:b7:33:d6:
fd:91:6b:18:14:ef:df:4a:21:28:9f:5e:e3:df:32:8f:35:b0:
3a:43:9c:88:9f:99:ca:10:18:a5:fb:05:ee:3c:ae:27:e5:ac:
6c:2b:2a:e6:39:28:a4:af:b1:05:df:e9:bf:3e:28:41:49:7b:
c9:16:22:cc:b8:5c:35:93:44:56:37:3c:1b:32:90:cf:90:17:
5f:33:10:f3:67:1c:dc:bb:5f:30:7f:fa:d0:9c:8e:a4:b0:65:
c3:65:36:c0:80:9d:32:9c:18:17:c3:10:16:44:d3:0d:6c:a0:
99:bb:9e:5f:59:e7:f6:53:48:67:6d:d3:e3:bb:03:98:6a:f4:
69:d1:ca:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:16:40 2025 by rpki-client