Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF95A9605B0C11F09647ED91DAE4EC9C.roa
File: CF95A9605B0C11F09647ED91DAE4EC9C.roa (raw, json)
Hash identifier: hcAnyqwnCRwUAfgrUR4Eg5FhOk4sraJoRh4Y5BRN3iU=
Subject key identifier: 7C:76:89:27:0B:F0:B4:E7:1D:D3:DB:8E:A4:18:86:74:ED:5F:1F:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0162D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF95A9605B0C11F09647ED91DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 08:31:43 +0000
ROA not before: Mon 07 Jul 2025 08:31:38 +0000
ROA not after: Thu 07 Aug 2025 08:31:38 +0000
asID: 271907
IP address blocks: 45.195.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 19 Jul 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90832 (0x162d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 08:31:38 2025 GMT
Not After : Aug 7 08:31:38 2025 GMT
Subject: CN=686b85ef-99db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:6f:59:3e:8b:e8:e2:2a:53:e4:cb:87:b1:
1f:2b:00:b2:88:53:6c:c0:5c:ae:0c:5a:8d:e7:d5:
f8:15:9b:79:68:14:23:aa:c2:fb:0b:b1:6d:18:3f:
43:29:48:bd:ac:fe:9a:79:85:d5:c9:ba:f7:d7:62:
dc:97:6d:e1:9b:8f:05:1f:61:57:b2:2c:b4:d4:41:
b1:c7:00:fc:98:16:d4:9d:7e:50:87:73:93:7e:2e:
18:65:62:2a:3b:e0:e6:4a:0d:7b:7e:ef:6a:b5:0e:
f2:9c:90:ed:e8:d9:f9:2f:bd:de:30:5a:67:01:4f:
a9:f5:c5:37:d2:6f:9e:d8:69:46:3e:79:97:62:80:
c6:1c:ab:10:26:20:dc:96:24:f4:10:c9:fc:9a:62:
d8:69:b8:bb:2d:76:ea:51:3c:92:cb:29:c1:32:45:
c1:1e:10:55:f9:79:42:7c:26:a0:ff:ea:2e:bf:b6:
74:c1:9b:b4:13:6e:e6:f1:a8:d2:23:17:83:50:5d:
2b:8f:51:e1:fb:a2:f1:d6:4f:aa:59:e7:21:11:c6:
c2:fb:bd:58:81:e3:50:8b:ea:c8:36:91:f8:55:c9:
e9:90:46:fd:36:3f:9a:15:0a:ca:0e:db:3c:2b:6a:
05:35:f2:3b:8e:9f:70:07:7c:75:f8:a1:60:e7:d1:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:89:27:0B:F0:B4:E7:1D:D3:DB:8E:A4:18:86:74:ED:5F:1F:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF95A9605B0C11F09647ED91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.228.0/22
Signature Algorithm: sha256WithRSAEncryption
83:45:44:23:5f:c9:d6:90:e2:49:10:fc:78:8b:47:11:ec:2e:
66:fc:9c:71:ab:11:af:c7:b1:95:c8:d5:c5:7d:cf:0b:5a:ab:
0e:83:0e:ed:59:b7:d2:ad:0f:70:e0:11:68:f5:65:3c:8b:c5:
13:58:3a:b9:e6:d9:e3:f8:af:2f:ae:74:31:74:56:92:7e:13:
52:09:a7:fe:62:b4:38:3f:b7:e9:11:81:b4:29:80:b2:d3:bb:
1f:8b:c0:37:10:86:d3:13:25:b4:91:59:05:30:d1:91:93:d2:
b0:2b:cc:62:91:7a:7d:1b:20:2a:a0:c9:e4:6b:4e:ae:08:26:
57:ce:9f:97:21:e4:13:9e:a6:5a:1f:aa:0a:9b:c6:9f:b3:f0:
65:78:62:dd:bf:12:85:21:97:f9:b6:59:a6:c7:d4:b8:94:69:
a4:ec:03:73:5c:f3:8c:20:d0:74:b4:5e:5c:e0:7a:d2:3e:8c:
90:02:c3:26:d5:fb:89:9d:b2:17:0d:43:02:12:18:06:4a:6f:
7e:14:99:d4:65:dd:c2:cc:28:31:dc:8a:ea:2f:5f:36:de:d3:
e2:db:9b:5f:68:0e:81:6f:6f:1f:0a:25:41:e8:6d:ea:5f:81:
65:e9:cf:54:16:96:76:26:78:78:46:4f:2f:ff:49:f8:27:9d:
5a:37:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 17 11:12:59 2025 by rpki-client