Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2FB668C7CD711F0BF378A9EDAE4EC9C.roa
File: F2FB668C7CD711F0BF378A9EDAE4EC9C.roa (raw, json)
Hash identifier: y0tvc7w2qW7sGCntbkJLOObrc/JyAozwyUdOkjMHk9k=
Subject key identifier: 30:36:0B:3F:D6:3E:49:94:02:EB:80:B9:35:0C:B9:EF:87:44:F1:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2FB668C7CD711F0BF378A9EDAE4EC9C.roa
Signing time: Tue 19 Aug 2025 08:38:59 +0000
ROA not before: Tue 19 Aug 2025 08:38:52 +0000
ROA not after: Wed 26 Aug 2026 08:38:52 +0000
asID: 59134
IP address blocks: 45.195.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93175 (0x16bf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 08:38:52 2025 GMT
Not After : Aug 26 08:38:52 2026 GMT
Subject: CN=68a43823-f96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:55:f3:15:64:f9:e4:78:14:a5:12:54:75:
6a:12:97:54:20:a4:ec:7b:f5:ce:d5:15:ed:00:12:
4d:d2:cd:b8:f5:50:c0:ff:b3:2b:88:69:60:52:9a:
6f:41:f1:78:a1:b6:69:27:7a:8c:7b:ca:73:21:b2:
9e:56:4e:b9:9a:d6:12:89:0e:ea:75:9c:fa:af:8e:
8b:85:3f:60:31:18:d7:65:98:b0:4b:16:57:36:36:
7f:de:23:e6:ff:68:f6:8a:d0:d8:75:ab:d9:a2:b1:
24:ad:f4:80:13:b3:29:5c:9e:fb:3e:a8:7a:f3:e4:
b4:65:38:17:4e:27:65:2c:c5:6b:12:b6:26:f4:11:
e9:48:1a:96:29:cb:65:90:3c:33:e4:29:4a:ea:73:
19:16:9b:cd:e4:7d:c8:bb:5e:29:5f:b7:ff:d2:a3:
64:7a:69:c3:07:3f:f7:0e:ed:f9:00:24:eb:10:6b:
36:d5:06:d0:19:69:f2:fe:98:56:0b:f2:fe:98:b9:
41:94:a0:e5:3c:61:22:ca:ca:fa:9d:bf:cc:01:92:
f9:72:77:c4:b3:a7:b8:73:a9:d9:cb:5d:22:58:71:
fa:e4:9f:c4:e7:a7:89:7a:29:5e:ee:56:ad:de:2c:
ea:aa:6e:91:92:83:22:d9:1d:fd:e0:19:59:f9:cc:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:36:0B:3F:D6:3E:49:94:02:EB:80:B9:35:0C:B9:EF:87:44:F1:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2FB668C7CD711F0BF378A9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.248.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ee:43:a8:8d:4f:bb:21:0c:f5:da:0c:35:87:31:f8:38:37:
5a:36:a0:38:c2:d8:22:56:5d:b1:cd:7a:04:3e:a5:8b:1d:d7:
44:d0:eb:74:16:fd:0d:f9:54:5d:32:56:29:80:ac:e4:9e:04:
a4:9c:d1:d3:2a:20:09:8f:65:90:95:5c:52:12:5e:83:c9:b2:
1d:d5:ed:18:03:0d:6c:5a:88:03:94:0d:d2:97:71:76:87:71:
21:50:77:4a:55:37:ce:ea:1b:6b:4c:00:21:1d:39:2b:46:15:
50:e9:1e:c5:ae:7a:29:8b:7f:89:03:41:94:20:86:86:20:ed:
67:3f:99:2d:ae:53:37:d7:64:43:0a:80:3f:0a:56:35:8c:9a:
45:46:81:57:f2:5a:52:5e:bf:8d:1e:a8:55:03:88:ff:b4:73:
c3:72:05:9c:4d:00:81:a1:27:c3:cd:9c:e7:7f:df:90:69:76:
e4:50:81:ae:93:2a:86:b3:58:27:80:58:68:0d:0c:2f:9e:57:
c9:e4:3a:4d:cb:37:a5:8b:8b:65:99:bb:22:8d:0d:1d:21:d0:
72:3e:d5:17:4b:3f:80:12:f1:dc:05:71:6a:c8:64:16:7a:c8:
a9:7e:8e:85:88:91:cd:8d:1a:65:ce:f0:7f:45:70:8b:2a:6f:
cb:a0:f8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:05 2025 by rpki-client