Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FF181384E8411F087DD3A8ADAE4EC9C.roa
File: 8FF181384E8411F087DD3A8ADAE4EC9C.roa (raw, json)
Hash identifier: oxn9GfvWsKHu8wwLwJ0GB4xSg9ObqVJOw2Suz/tKgjk=
Subject key identifier: 20:6E:E7:7F:6E:D8:5C:C5:B0:4F:9E:EB:C4:37:D6:A8:41:1F:C8:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015DA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FF181384E8411F087DD3A8ADAE4EC9C.roa
Signing time: Sat 21 Jun 2025 09:46:11 +0000
ROA not before: Sat 21 Jun 2025 09:46:06 +0000
ROA not after: Sun 27 Jul 2025 09:46:06 +0000
asID: 202656
IP address blocks: 45.192.48.0/24 maxlen: 24
45.192.49.0/24 maxlen: 24
45.192.56.0/24 maxlen: 24
45.192.57.0/24 maxlen: 24
45.195.166.0/24 maxlen: 24
45.195.169.0/24 maxlen: 24
45.199.225.0/24 maxlen: 24
45.199.226.0/24 maxlen: 24
45.199.227.0/24 maxlen: 24
45.199.228.0/24 maxlen: 24
45.199.229.0/24 maxlen: 24
45.199.230.0/24 maxlen: 24
45.199.241.0/24 maxlen: 24
45.199.242.0/24 maxlen: 24
45.199.243.0/24 maxlen: 24
45.199.244.0/24 maxlen: 24
45.199.245.0/24 maxlen: 24
45.199.249.0/24 maxlen: 24
45.199.250.0/24 maxlen: 24
45.200.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89506 (0x15da2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 09:46:06 2025 GMT
Not After : Jul 27 09:46:06 2025 GMT
Subject: CN=68567f62-8c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:03:ae:30:c8:84:0a:8b:ad:30:2b:3b:a6:
37:c2:e0:76:1c:65:e5:42:34:54:25:93:dc:6d:10:
bc:86:8c:6b:26:74:c1:0a:d1:4b:42:f4:89:44:e1:
cc:00:76:b7:e4:4f:65:e6:3c:f9:f5:c0:b8:53:a8:
59:d7:b8:d5:55:ff:63:c3:e3:54:fb:90:d4:8b:03:
5a:aa:c3:92:33:61:1c:3d:47:c9:d8:c7:55:7f:b7:
22:77:f2:8a:a4:fc:c1:ce:67:71:34:b1:d6:fe:d8:
7b:65:83:17:e4:d0:a1:b9:71:e9:e0:f1:7e:6f:c1:
3e:7b:60:0b:52:36:ad:37:47:13:99:42:06:42:9e:
11:06:aa:11:f2:4a:92:8d:76:ff:c2:f1:d8:e1:9d:
fe:7c:aa:3d:0b:2d:ba:d7:31:cf:f8:88:47:fc:2b:
94:97:63:ed:7d:b6:a3:50:61:9b:bb:03:7c:4b:6d:
4d:37:25:86:73:7e:9b:1f:d6:f8:fe:94:62:43:23:
e6:a0:7c:32:c6:55:b3:db:d6:5c:64:d5:0f:6e:f6:
19:e4:b9:88:a5:94:cc:5b:0c:23:4a:fb:bc:11:b0:
a7:75:3f:9d:3b:15:dc:38:ec:09:a2:a4:d5:d0:55:
3d:cd:ca:61:f6:e8:48:d9:66:7f:8d:00:e7:8d:71:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6E:E7:7F:6E:D8:5C:C5:B0:4F:9E:EB:C4:37:D6:A8:41:1F:C8:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FF181384E8411F087DD3A8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.48.0/23
45.192.56.0/23
45.195.166.0/24
45.195.169.0/24
45.199.225.0-45.199.230.255
45.199.241.0-45.199.245.255
45.199.249.0-45.199.250.255
45.200.175.0/24
Signature Algorithm: sha256WithRSAEncryption
12:31:4e:78:96:08:de:52:c2:74:32:54:67:9a:6d:48:87:8c:
f5:4a:45:4e:d6:64:ad:f6:c7:ae:ee:98:18:fa:bb:26:94:a0:
9f:4c:74:21:14:42:fb:a3:0c:42:91:f8:e7:ff:2c:a0:19:e7:
5e:1c:f1:f7:3b:8e:c2:0b:64:37:6d:a7:a7:02:bb:80:2d:1f:
b0:cb:b3:84:71:99:25:5d:70:70:a9:41:87:04:7b:c9:d4:b1:
73:cb:14:9b:0a:b8:fa:08:1f:a9:a3:fe:24:80:c3:ce:99:85:
c4:13:ce:f3:3d:a5:06:9d:04:9d:cd:01:a8:0b:53:11:b8:82:
65:40:23:f7:4a:1e:ba:91:ca:7c:84:9a:e4:44:ec:f5:f9:14:
7e:7f:b4:cf:c2:ae:e6:f3:03:c9:1f:58:19:4a:9d:3d:6a:43:
29:07:1d:dd:df:cf:67:ef:80:1a:83:60:71:3d:7d:0b:12:32:
3c:5b:dd:0b:b8:ac:ed:fe:b5:6d:dc:87:99:a5:3e:28:53:e9:
e2:90:e1:57:f1:c6:d7:db:ab:b9:d8:a3:a1:b5:f3:7b:7b:7b:
9f:2e:ba:c0:cb:1a:3d:a6:75:a4:15:66:0d:57:13:7c:0b:e8:
c6:98:68:a2:34:18:2f:68:39:35:03:b8:a0:d5:e1:3e:5f:13:
7e:cc:44:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:31:00 2025 by rpki-client