Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA1B2FAE4C5A11F0B7AAD7F0DAE4EC9C.roa
File: FA1B2FAE4C5A11F0B7AAD7F0DAE4EC9C.roa (raw, json)
Hash identifier: cTyuM3qgYKsJdKt8pBmheTpYp8g0miBF6SkqtVwpKdo=
Subject key identifier: 5B:BB:71:0C:6D:1C:68:74:34:A4:99:45:54:E5:48:A4:1B:05:7E:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA1B2FAE4C5A11F0B7AAD7F0DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 15:43:28 +0000
ROA not before: Wed 18 Jun 2025 15:43:23 +0000
ROA not after: Wed 23 Jul 2025 15:43:23 +0000
asID: 395793
IP address blocks: 45.192.115.0/24 maxlen: 24
45.194.0.0/24 maxlen: 24
45.194.12.0/23 maxlen: 24
45.194.24.0/24 maxlen: 24
45.195.255.0/24 maxlen: 24
45.201.16.0/21 maxlen: 24
45.201.24.0/23 maxlen: 24
45.201.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89357 (0x15d0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 15:43:23 2025 GMT
Not After : Jul 23 15:43:23 2025 GMT
Subject: CN=6852dea0-1c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:1a:d4:b9:26:cf:4b:b3:7a:27:5b:8c:83:
55:50:0f:13:78:9f:83:cd:4e:87:f7:0c:c8:03:6f:
8c:fd:aa:3b:cb:95:fd:be:b2:ba:ae:51:97:4c:51:
51:64:37:c1:6a:42:96:02:64:10:67:99:be:e8:ca:
c9:3e:2b:45:99:8c:7c:7c:ef:3c:dd:3c:bc:8a:84:
25:42:e3:73:be:5c:da:ab:71:ed:ba:38:b0:5a:78:
88:89:aa:87:06:3b:9e:59:e0:52:48:9d:04:09:de:
76:56:a3:ce:7c:53:b6:f0:b7:03:f0:49:99:58:55:
74:c0:c4:a3:6d:14:0b:a4:5f:8e:c6:0e:95:47:9f:
f3:b8:a7:07:84:62:01:89:b2:0a:02:c8:ce:e1:b9:
db:82:56:be:27:ea:53:61:59:86:fa:40:a6:e1:17:
c9:f4:73:a2:cf:35:b6:d3:e5:b8:10:6d:cc:2e:76:
60:e1:58:bd:83:3c:65:c0:b8:cb:7e:ca:c8:2e:e0:
cf:57:31:52:1a:44:1a:e6:29:00:0d:28:c4:3a:7a:
67:68:d5:d0:64:a5:98:14:66:c0:9a:74:06:ac:ef:
88:ea:2f:d0:23:70:3a:a5:94:d4:dc:dd:ce:e4:65:
e9:f2:70:31:07:18:c3:0e:a7:32:21:f1:e9:f2:07:
da:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BB:71:0C:6D:1C:68:74:34:A4:99:45:54:E5:48:A4:1B:05:7E:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA1B2FAE4C5A11F0B7AAD7F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.115.0/24
45.194.0.0/24
45.194.12.0/23
45.194.24.0/24
45.195.255.0/24
45.201.16.0-45.201.26.255
Signature Algorithm: sha256WithRSAEncryption
40:2d:de:bd:80:54:a7:9c:f1:f4:97:e3:64:cb:b0:78:d8:96:
b2:8c:e5:f2:bf:bd:98:48:13:95:7b:bf:49:55:6e:2d:c4:a3:
02:3e:e8:62:2e:31:aa:d6:48:6d:12:60:60:c4:0a:ed:bf:0b:
ee:52:ba:f0:bc:42:db:d0:ab:83:bd:49:38:c3:b9:ea:7b:e2:
19:53:79:33:1a:13:06:29:8d:8e:71:fb:3f:4f:e1:5d:be:d2:
70:2c:4b:63:b0:2f:98:4a:bf:88:c7:4b:03:2e:ec:b4:a6:74:
f4:d8:98:09:1a:8d:02:91:89:46:5f:c9:86:10:c0:4d:74:f9:
37:b5:9b:f4:ba:b7:f8:06:3e:e7:17:3f:0a:b4:bc:98:d5:1b:
1e:83:fb:c0:e6:00:62:4d:2e:28:11:04:45:c4:76:e8:67:cf:
71:5c:64:cb:ec:f2:7d:20:ef:6c:02:8e:f5:98:3f:bc:3c:15:
eb:22:94:25:76:98:2d:46:f7:b7:f2:08:7c:58:8e:bd:c8:2c:
9d:a5:8f:0a:c6:60:52:48:b5:02:3a:c7:f7:f8:f9:00:67:7d:
f7:38:a5:cc:67:76:e9:07:d1:8b:15:5b:df:93:da:79:34:77:
f2:40:33:05:28:30:0a:13:66:70:f3:1f:c7:4e:2e:a6:3e:a6:
a5:29:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:15:16 2025 by rpki-client