Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8ED677C58C211F0892DC6A5DAE4EC9C.roa
File: A8ED677C58C211F0892DC6A5DAE4EC9C.roa (raw, json)
Hash identifier: km9YalvxTJV8RgcSIpJOQeTS+YwoS2lTy1F2VJVXkSw=
Subject key identifier: BD:84:EC:ED:E5:66:BA:20:81:26:82:C4:0F:EF:05:9D:57:A3:61:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0160D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8ED677C58C211F0892DC6A5DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 10:35:53 +0000
ROA not before: Fri 04 Jul 2025 10:35:48 +0000
ROA not after: Thu 07 Aug 2025 10:35:48 +0000
asID: 271907
IP address blocks: 45.195.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 19 Jul 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90328 (0x160d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 10:35:48 2025 GMT
Not After : Aug 7 10:35:48 2025 GMT
Subject: CN=6867ae89-ea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2a:08:fa:bb:55:76:49:b9:73:e5:c3:d6:03:
a7:ab:66:42:9a:f0:f7:1e:0b:da:18:01:5c:9b:26:
e6:d4:41:b5:20:08:03:83:b7:3c:52:f7:5b:52:7f:
e4:0e:99:d6:78:c0:f4:b6:e7:18:07:81:6d:8d:42:
6a:7a:a3:15:ce:74:48:e1:ec:8b:5c:f2:40:c5:d5:
56:99:1d:ba:41:f3:5f:94:a3:01:e5:be:8e:ee:66:
24:3b:8d:92:34:d8:22:2d:74:4f:e8:b0:6e:ed:6d:
4f:4f:7b:c6:62:c8:7d:58:41:37:29:8b:00:f6:57:
b7:40:ad:aa:f3:e0:00:9c:ef:2d:0b:43:68:e4:68:
17:7b:34:fb:ab:7c:f3:96:09:7b:12:c6:07:f1:8e:
6c:6f:f4:9b:13:62:6e:50:3b:ac:0b:6d:70:fc:26:
3d:90:3b:a5:01:ef:e9:81:01:3b:0f:5e:94:8e:97:
bf:d6:90:2a:94:f8:93:54:9c:9a:e2:a7:8b:c8:ef:
b8:a6:5b:f4:f5:10:a0:c9:8d:bc:7b:a3:58:fa:84:
38:64:eb:89:7e:fe:37:74:b9:62:53:5a:6c:0b:db:
56:89:3c:d3:96:16:18:0c:ad:0b:9e:a5:be:4e:a9:
95:ca:27:7a:64:9b:8a:56:a4:a5:19:07:45:34:85:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:84:EC:ED:E5:66:BA:20:81:26:82:C4:0F:EF:05:9D:57:A3:61:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8ED677C58C211F0892DC6A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.228.0/22
Signature Algorithm: sha256WithRSAEncryption
06:46:b2:5d:a4:ad:8d:8a:67:4c:e5:07:a5:17:44:5e:32:d5:
2a:7f:a3:4e:2b:db:93:ee:6a:c7:5b:a0:6b:df:9d:ac:10:15:
c5:5f:e1:77:3e:55:9c:18:c1:49:93:04:36:5f:b5:81:e4:90:
1a:dd:aa:57:7a:c9:2f:aa:35:0c:d5:37:36:a3:94:75:e8:9c:
59:29:2f:45:ae:6e:81:f7:11:ab:f5:b0:38:d1:26:81:42:8c:
5e:7f:d4:79:8e:3c:a0:b0:64:f2:8e:4c:60:66:eb:1b:5e:d3:
a2:19:a6:be:b8:ad:20:0a:37:e3:9b:4b:b0:a6:59:95:7d:db:
51:6f:a9:0d:51:d1:82:b9:a8:54:e4:8f:2f:da:16:0a:b6:82:
20:ec:43:f3:10:e4:d9:72:77:67:18:3f:0d:9c:b5:87:fa:50:
1d:ee:19:04:e7:5b:dc:c5:c8:95:65:82:01:1e:0f:69:65:74:
b8:c7:6f:06:0e:de:86:68:4f:f1:dc:8d:40:1e:b4:5e:e3:e1:
cb:1a:65:c1:46:f8:7b:66:a1:cf:f1:dc:43:20:8e:07:e0:f4:
2a:4f:bb:37:10:9e:e6:58:0b:1a:a3:33:ac:f5:45:39:b0:ba:
d6:ce:b4:9b:80:c8:ee:16:96:5e:8b:ba:1a:de:ee:d6:5d:40:
fe:a3:0f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 17 11:09:09 2025 by rpki-client