Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E23EC4024E7811F0BEF638C0DAE4EC9C.roa
File: E23EC4024E7811F0BEF638C0DAE4EC9C.roa (raw, json)
Hash identifier: m4smbUQPmFxXDWXhBGdLZ8futOPpijbBFiHDF2bjU20=
Subject key identifier: 7F:9A:52:FB:CD:7D:B1:43:24:57:46:CF:86:D6:BB:91:2A:2F:65:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E23EC4024E7811F0BEF638C0DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 08:22:35 +0000
ROA not before: Sat 21 Jun 2025 08:22:29 +0000
ROA not after: Sun 27 Jul 2025 08:22:29 +0000
asID: 44559
IP address blocks: 45.199.209.0/24 maxlen: 24
45.199.210.0/24 maxlen: 24
45.199.211.0/24 maxlen: 24
45.199.213.0/24 maxlen: 24
45.199.214.0/24 maxlen: 24
45.199.215.0/24 maxlen: 24
45.199.239.0/24 maxlen: 24
45.199.240.0/24 maxlen: 24
45.200.179.0/24 maxlen: 24
45.200.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89486 (0x15d8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 08:22:29 2025 GMT
Not After : Jul 27 08:22:29 2025 GMT
Subject: CN=68566bcb-631d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:5e:6e:8f:66:46:3d:90:c5:0a:0e:75:c8:
04:88:aa:aa:a7:47:74:85:83:53:dc:87:4d:11:e4:
0a:ab:a7:a9:80:5a:47:04:92:99:8f:c6:f5:b4:70:
69:24:bc:cf:64:d4:94:d2:44:b3:42:60:d2:da:3e:
f8:60:96:94:ef:bd:b0:9e:b9:b4:4c:65:92:f5:83:
e2:74:72:a7:83:4d:08:3d:8a:92:c9:6c:bb:27:ae:
50:14:80:ab:c1:70:e3:f7:07:70:dc:af:99:d8:be:
f0:8a:7f:a4:cb:8f:e2:16:e1:5b:06:e7:a7:00:91:
37:08:98:38:ba:ba:93:f1:d0:dd:7f:27:ec:04:51:
61:87:6b:60:92:16:6c:20:e7:c8:c2:17:68:6a:a6:
b0:fd:e6:f0:3a:ac:0f:4b:8e:75:2d:36:40:35:56:
2c:0e:dd:21:e8:45:c1:b8:7e:93:e7:4a:53:e0:e2:
eb:1c:f3:d1:56:a0:af:fa:ae:90:17:69:97:54:65:
c4:a4:8e:11:b8:e9:c6:04:00:23:26:03:1f:5b:01:
4e:51:ca:db:64:61:43:5f:59:d1:ad:65:c5:26:43:
e4:e1:02:2c:71:14:ec:26:37:c5:8c:65:ea:ee:b4:
d5:15:1d:99:2d:a7:6d:ff:66:b0:e0:49:f8:55:9e:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9A:52:FB:CD:7D:B1:43:24:57:46:CF:86:D6:BB:91:2A:2F:65:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E23EC4024E7811F0BEF638C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.209.0-45.199.211.255
45.199.213.0-45.199.215.255
45.199.239.0-45.199.240.255
45.200.179.0-45.200.180.255
Signature Algorithm: sha256WithRSAEncryption
16:c7:ed:32:bb:68:33:d9:30:89:de:7f:53:88:d0:df:80:7d:
97:1f:39:eb:89:d5:1e:a5:31:56:6b:10:1d:87:ec:e3:3d:54:
5f:a5:18:78:92:3c:fb:d8:8d:28:4b:91:32:27:66:34:50:eb:
1a:06:ac:e5:48:f6:1b:96:f0:42:0b:de:03:6f:94:ec:fc:fe:
ed:97:d2:6d:e7:bc:01:34:a7:82:c5:84:4c:00:52:0e:f2:fa:
56:84:cf:04:a4:42:e6:38:ba:77:03:4c:d0:9c:df:96:38:04:
69:a5:d1:c0:d1:bd:22:b4:4d:8a:9e:c5:9f:ee:a3:ac:53:ae:
5f:8f:9a:73:db:ea:50:13:17:ac:b8:fb:58:97:02:64:8a:0f:
23:4b:19:89:3b:27:5d:9a:c5:12:5e:e3:7f:14:c6:09:d4:2d:
35:54:cf:b8:a5:a1:61:2a:ad:cd:30:95:24:13:8d:74:2f:74:
6e:5f:98:40:8e:4f:2c:78:ae:4d:9e:e9:b0:9e:a0:84:97:b2:
84:48:43:89:c7:5c:00:f9:d5:e4:49:7b:0a:ff:d2:1b:c2:29:
e0:82:bd:c8:94:8e:b3:39:34:47:77:3b:d3:6b:1a:e2:b9:5a:
ab:a8:84:06:25:b6:66:ae:4e:c8:62:ac:9f:1e:a8:1e:1f:5f:
77:3c:12:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:02:05 2025 by rpki-client