Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88CCA1D0542411F0A5EE5899DAE4EC9C.roa
File: 88CCA1D0542411F0A5EE5899DAE4EC9C.roa (raw, json)
Hash identifier: 2yzL8aa2eWzQ5sEqNJWe+6DP7WJNI+yOhyAw5FFuQCQ=
Subject key identifier: CB:A0:70:8E:27:F2:FC:80:F4:16:83:65:F9:C9:A0:7B:89:BD:BF:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88CCA1D0542411F0A5EE5899DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 13:33:54 +0000
ROA not before: Sat 28 Jun 2025 13:33:49 +0000
ROA not after: Sun 03 Aug 2025 13:33:49 +0000
asID: 203020
IP address blocks: 45.198.34.0/23 maxlen: 24
45.198.36.0/23 maxlen: 24
45.198.38.0/23 maxlen: 24
45.198.40.0/23 maxlen: 24
45.198.42.0/23 maxlen: 24
45.198.44.0/23 maxlen: 24
45.198.46.0/23 maxlen: 24
45.198.50.0/23 maxlen: 24
45.198.52.0/23 maxlen: 24
45.201.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89897 (0x15f29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 13:33:49 2025 GMT
Not After : Aug 3 13:33:49 2025 GMT
Subject: CN=685fef42-2df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:dc:53:68:90:37:d8:a9:69:74:84:62:01:
95:ae:15:74:a5:ab:0e:a8:75:0a:9d:38:16:37:88:
82:ff:5d:f5:42:d0:7d:5d:f3:cf:e4:f2:a9:da:d3:
7b:2b:c9:65:06:d1:99:b0:52:8c:05:82:a8:ea:53:
c9:a1:d9:41:be:e2:e6:94:57:55:5e:c2:26:0b:48:
b0:1f:f8:ef:78:8e:ab:1b:e0:20:b0:fc:51:69:52:
22:98:fb:23:88:7c:7e:d4:b8:6f:df:69:00:98:a0:
01:01:c2:33:da:6b:55:55:1b:43:f4:e8:ef:5e:4b:
e7:14:4a:e6:e9:11:4a:4c:cb:b1:ab:ce:35:56:a2:
b8:c8:61:3b:63:6a:fb:f4:5a:57:ac:48:d5:1b:5b:
b5:e9:64:2c:09:50:16:da:39:09:48:ce:23:06:a1:
ff:1e:f1:c0:13:75:2c:d6:b5:31:75:fc:d7:d3:fa:
8a:36:35:2d:f2:03:27:03:21:50:ec:c1:49:24:a2:
dd:d7:b7:e2:71:2a:27:cc:dd:3c:de:8c:4a:e5:0f:
78:4a:21:7e:d3:ea:03:78:2c:0f:f7:c6:c5:88:b9:
73:2f:9d:0e:21:48:ba:d5:e1:9f:b4:f3:8d:99:b4:
b5:7d:7e:b2:7b:1f:67:a8:52:56:a3:d6:aa:93:88:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:70:8E:27:F2:FC:80:F4:16:83:65:F9:C9:A0:7B:89:BD:BF:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88CCA1D0542411F0A5EE5899DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.34.0-45.198.47.255
45.198.50.0-45.198.53.255
45.201.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:73:6f:a4:01:22:83:ad:5d:75:45:6e:3d:cf:63:fe:4d:07:
d5:d0:93:af:b1:95:b9:45:20:6a:41:26:f2:4b:a5:8c:c2:ff:
8b:d8:5d:aa:bb:e5:87:fb:ad:ec:4f:83:7b:af:bb:00:ca:58:
27:32:b8:cc:fa:e1:db:52:ee:a4:38:64:ca:75:5c:9f:b8:6b:
56:aa:b7:33:8d:a8:7f:83:0e:8a:4d:33:af:09:97:a1:ca:55:
45:90:72:27:ec:f7:39:ea:dd:60:a9:3e:78:0f:ae:cc:9b:d7:
cd:2c:52:20:8d:06:bc:97:63:6d:df:89:d4:83:f7:b9:e2:bb:
c8:c1:72:96:7a:58:ca:a5:3d:72:06:a5:e1:6f:6b:4a:56:c9:
a9:73:ea:ea:84:2a:f8:7d:48:62:b2:da:7f:b2:e2:fb:fe:d1:
38:3c:98:17:f6:1e:75:a2:96:b7:dd:fa:8c:6f:3a:8c:08:59:
d2:7f:63:82:d8:48:93:15:2e:bb:c6:01:18:a6:5f:3d:58:65:
96:e8:d6:38:f0:2b:46:98:15:1f:a4:d9:76:e8:54:75:f4:f6:
98:39:da:e0:49:52:3a:ca:34:32:0e:f5:db:ab:1c:c5:b7:16:
54:dd:ba:ad:a8:d2:17:91:37:60:45:93:df:fb:6c:7a:87:65:
2d:45:79:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:40:30 2025 by rpki-client