Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E66AA2B67E6711F08D4375D9DAE4EC9C.roa
File: E66AA2B67E6711F08D4375D9DAE4EC9C.roa (raw, json)
Hash identifier: S2NUyddO7DgiOvAHR9QPITBsaGoiccXLyed9Cfnzh38=
Subject key identifier: CF:F0:CD:D1:F0:CB:BC:F1:C6:00:D4:A7:BD:43:C7:60:CC:B7:C5:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016DC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E66AA2B67E6711F08D4375D9DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 08:21:56 +0000
ROA not before: Thu 21 Aug 2025 08:21:52 +0000
ROA not after: Sun 21 Sep 2025 08:21:52 +0000
asID: 273020
IP address blocks: 45.195.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93633 (0x16dc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 08:21:52 2025 GMT
Not After : Sep 21 08:21:52 2025 GMT
Subject: CN=68a6d724-a5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:26:1e:a1:ee:39:74:0a:f1:fb:71:64:f7:
5f:42:e2:b0:5f:3c:1a:0f:4e:a2:af:bf:70:87:5d:
4c:06:60:4a:23:0e:fd:b1:ff:82:79:84:a3:23:eb:
a0:d3:d6:ab:7f:59:6b:eb:03:5e:9f:ab:8d:d5:99:
e2:37:98:39:7b:95:0b:44:97:33:54:1d:7d:ac:0c:
de:9d:1e:4f:36:1e:dc:73:fc:f9:5f:67:85:1e:53:
9a:0b:20:e5:9f:3d:96:dd:4b:98:47:ae:91:dc:be:
6c:bf:8f:12:b6:63:96:22:de:37:ac:ea:d0:e9:12:
cc:86:25:04:1f:0a:5b:9a:2a:a9:16:8c:4a:f7:26:
df:e5:ab:d0:c1:1d:c8:db:bc:54:f4:4b:b9:47:ac:
1a:e1:49:75:2c:06:04:32:2a:89:3b:2e:93:76:e7:
3f:4f:07:af:38:1d:0b:15:7e:55:8f:9c:50:10:00:
2e:1b:76:0b:ad:4a:4a:c2:02:5b:ba:2d:aa:a3:dd:
9a:81:e3:4e:a9:07:5a:64:e4:1c:9d:c8:45:cc:46:
e1:43:70:cf:2a:ae:58:51:8c:0e:82:7b:9c:5f:00:
da:75:15:98:5e:1e:e4:80:74:63:9f:46:74:72:b4:
44:f5:d4:c2:cc:bf:88:ac:36:7f:23:1d:00:78:bc:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F0:CD:D1:F0:CB:BC:F1:C6:00:D4:A7:BD:43:C7:60:CC:B7:C5:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E66AA2B67E6711F08D4375D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.104.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:76:52:a7:87:38:8b:da:06:34:ed:ef:5c:2c:c5:52:9e:cd:
5b:80:2a:ff:02:17:6a:29:ab:f9:2b:33:b6:4f:5d:e5:61:00:
fe:9b:8d:0d:7e:79:64:ff:d4:a3:e1:a5:c3:2e:8a:e9:d2:34:
6b:ce:1a:c6:04:1e:2d:bf:c3:41:5f:77:8c:63:fc:f4:36:ea:
a0:1c:74:45:52:f7:11:92:75:e7:ee:c3:a6:11:04:2a:29:62:
54:b6:8c:a0:33:25:ca:0e:1e:37:a5:2f:db:9b:97:bc:3a:cb:
94:be:f9:b5:51:2e:96:13:6d:60:f7:ae:97:56:b6:fa:13:36:
ae:41:eb:1e:15:b1:d9:c6:06:a6:dc:54:40:b8:75:b8:50:6f:
46:b1:1e:c6:63:98:18:17:7f:f7:23:c3:e4:72:e8:71:63:75:
cb:0e:72:24:cd:78:39:e8:06:55:f3:3b:c3:d5:c0:d8:cc:a1:
6c:80:13:94:0e:3d:98:a7:74:ef:02:71:73:9b:dd:9f:61:41:
ba:0f:86:61:ba:ac:ad:49:de:21:c0:80:88:88:2a:3b:84:5b:
5c:e8:59:35:2c:b9:02:d9:4d:bb:05:b0:a8:7d:27:77:6d:4a:
10:52:01:f9:b5:af:fb:bd:36:ef:89:a4:22:aa:b5:52:aa:3a:
29:cb:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:31 2025 by rpki-client