Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD07DD904B6111F0B0D55290DAE4EC9C.roa
File: CD07DD904B6111F0B0D55290DAE4EC9C.roa (raw, json)
Hash identifier: cJSlz+WyZ4j9Olvkl6CqGf8kEHfUdBBO7EptuwBSTlQ=
Subject key identifier: E8:C8:0B:0D:C8:38:41:4D:9A:0D:12:90:FE:16:06:93:4D:C5:2C:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD07DD904B6111F0B0D55290DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 09:59:49 +0000
ROA not before: Tue 17 Jun 2025 09:59:39 +0000
ROA not after: Wed 23 Jul 2025 09:59:39 +0000
asID: 21859
IP address blocks: 45.196.31.0/24 maxlen: 24
45.202.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89236 (0x15c94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 09:59:39 2025 GMT
Not After : Jul 23 09:59:39 2025 GMT
Subject: CN=68513c95-ea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:97:51:98:90:00:bb:72:a5:86:49:1a:e9:
c3:9d:82:81:c5:2e:87:b5:5d:a1:3a:f5:37:3d:4e:
f3:f2:3d:8e:ac:ce:b0:35:af:5f:c8:3a:eb:42:95:
67:43:ce:e5:bc:5e:80:11:b1:c6:c9:8c:12:fb:36:
d9:b6:4d:47:fd:e6:74:42:74:57:46:97:b7:11:05:
1a:1a:ca:73:7e:34:2c:0b:29:e4:6f:00:29:d2:27:
e6:d7:33:3f:5e:45:b5:6a:7a:b3:ec:93:b0:9d:ed:
ef:9d:5d:e3:15:5c:4e:92:01:17:b3:9a:ee:b6:14:
41:c2:51:ab:d6:1a:14:46:c5:c3:3f:b8:5d:0d:4a:
63:14:36:69:7c:41:7e:62:e0:46:4d:5d:75:2a:a0:
e8:f0:a8:12:3b:f7:da:db:e9:5a:05:42:af:a6:32:
6f:83:6d:34:86:82:1d:a7:74:5f:4e:79:79:00:ff:
5b:dc:7d:53:7f:19:b8:27:80:b1:33:16:77:80:b4:
c3:9f:2b:0f:c3:ae:c6:51:bb:eb:30:9e:97:98:2d:
44:a9:8f:e8:98:f8:59:21:88:0f:86:31:c0:73:de:
9b:41:dd:1a:b5:aa:09:54:fd:fa:c4:10:7a:52:55:
b8:b0:0c:37:73:f2:e7:f7:77:c2:57:5e:92:96:2a:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C8:0B:0D:C8:38:41:4D:9A:0D:12:90:FE:16:06:93:4D:C5:2C:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD07DD904B6111F0B0D55290DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.31.0/24
45.202.108.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d5:44:4e:57:d3:b3:b1:4b:58:88:d7:a1:8d:1e:de:1f:fd:
82:48:a6:49:61:28:e9:6b:6a:ea:46:81:3d:59:93:09:cc:67:
7b:2c:10:cb:91:6b:10:f6:3d:9e:8b:98:5c:50:7f:19:90:44:
e5:03:ef:db:cf:61:bc:47:7b:d0:b1:9a:99:35:99:c4:29:01:
09:26:f6:8f:b9:3a:78:ea:1f:24:8c:f7:a8:e5:e7:cb:72:20:
46:63:98:7c:d6:4a:a8:c2:fc:a1:4e:da:d5:d3:4b:0e:3b:d3:
c5:8e:fe:67:3f:8c:92:58:5e:8f:fe:6a:4e:1b:c5:6b:91:5c:
97:76:75:5b:20:18:74:85:fa:91:79:9c:73:1a:b1:7c:80:68:
ff:94:aa:5a:e1:2b:87:3e:91:b6:a1:6a:95:d7:86:33:ea:a7:
ca:0d:5f:97:43:b5:8b:4e:ac:db:e8:0f:4c:3c:19:11:d7:0f:
36:2e:e7:b9:a8:a3:fd:90:db:c3:c1:33:df:79:d0:38:74:36:
9e:e7:a2:af:82:af:53:dd:25:6a:2f:2e:7f:df:fc:f7:e5:12:
1d:3a:93:f1:e9:b5:00:67:01:f3:26:cc:97:3b:cd:de:cb:78:
b7:d7:e0:be:2e:de:d5:03:52:0a:7d:3c:37:5d:a2:98:9d:2f:
03:92:7e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:33:29 2025 by rpki-client