Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D79BF1CC518F11F09422EED7DAE4EC9C.roa
File: D79BF1CC518F11F09422EED7DAE4EC9C.roa (raw, json)
Hash identifier: h71nLulYtbE1HjAMq1AW/MeMbq7wzs5EGRFX0krx6oI=
Subject key identifier: CF:6D:3C:23:32:79:01:3C:F9:2D:89:C3:03:29:3D:F4:74:7B:B9:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015EAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D79BF1CC518F11F09422EED7DAE4EC9C.roa
Signing time: Wed 25 Jun 2025 06:44:29 +0000
ROA not before: Wed 25 Jun 2025 06:44:24 +0000
ROA not after: Thu 31 Jul 2025 06:44:24 +0000
asID: 54852
IP address blocks: 45.196.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89771 (0x15eab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 06:44:24 2025 GMT
Not After : Jul 31 06:44:24 2025 GMT
Subject: CN=685b9acd-465c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:eb:22:2f:c0:e5:b7:4d:47:1a:b8:ac:a0:
54:b7:47:c2:10:33:38:31:c3:86:b9:1d:ba:19:4f:
9e:88:86:51:35:b3:12:08:5c:95:15:01:28:ae:59:
ea:75:d5:56:29:eb:43:b4:89:00:2e:6d:06:be:5a:
b0:e6:e6:c6:18:03:76:d5:04:8c:9f:28:13:e6:3d:
38:a7:b3:3c:7b:5b:78:1f:82:35:5b:1e:38:9e:a9:
4f:98:ec:4c:b9:4f:53:26:19:97:df:f5:9e:1e:dc:
cc:dd:40:89:d4:33:7d:2f:8f:5c:b9:6a:06:1f:f0:
ab:15:4c:3d:2a:8a:ac:04:31:34:5a:31:50:0b:9f:
32:62:8b:32:b7:c3:86:92:b8:77:3e:68:9f:87:ae:
c2:9b:6f:54:e2:5d:db:fd:02:55:b7:ea:92:59:4e:
e2:46:fc:0a:ed:2c:cb:00:bd:76:e1:0e:58:44:98:
3d:d0:56:a1:b4:04:ee:60:47:01:f1:bf:6c:11:12:
8d:87:f9:a8:8f:10:13:45:b9:06:66:42:1f:10:1e:
df:72:be:37:89:da:1a:21:99:8c:de:12:57:8e:73:
d3:9c:ff:63:ee:1e:3c:64:13:99:ea:2d:6c:e9:ec:
72:56:c1:b1:57:13:e9:b0:2a:87:a9:f2:e3:53:a3:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6D:3C:23:32:79:01:3C:F9:2D:89:C3:03:29:3D:F4:74:7B:B9:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D79BF1CC518F11F09422EED7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.201.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c9:a6:af:88:c8:30:14:e3:ba:30:22:45:19:a9:43:af:54:
12:02:49:4d:50:d4:da:27:05:88:ad:43:10:a9:4f:08:33:fb:
87:70:27:c0:34:cf:c2:32:ab:b1:d1:5d:e5:62:2b:64:08:8a:
75:43:3b:52:2e:2b:7d:b7:5a:a0:d1:05:62:33:84:35:11:d3:
dc:24:9a:80:6c:f4:15:f0:6a:37:8b:6d:f0:6d:9e:9b:d4:53:
54:93:e7:11:a6:4c:02:57:de:a6:d8:ee:34:f9:60:8b:ba:f3:
82:2b:00:4f:39:ab:72:62:16:36:c0:16:5c:c4:74:8b:ec:ea:
82:61:e9:0e:82:04:f2:fa:16:48:c4:b9:80:fe:e8:e8:1f:a2:
0e:f1:df:c9:84:6b:8d:ce:8d:37:78:86:e0:a0:e0:4c:5f:74:
26:1b:d0:7f:4b:f6:a1:db:f5:a0:b6:98:64:2a:9d:48:cd:57:
a4:4a:7f:48:08:c2:7f:6a:64:72:3f:68:dd:86:b4:68:c2:95:
c8:f6:11:57:49:b4:6a:f9:8b:88:a6:d5:a4:7e:39:81:04:d1:
59:08:e2:42:00:35:5f:c7:71:b9:02:0d:c6:62:09:40:16:c2:
7b:a3:d5:71:65:96:85:77:46:0c:0e:09:42:08:4a:30:19:83:
e1:ec:f4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:09:15 2025 by rpki-client