Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A32E14E259511F0BE41F9EADAE4EC9C.roa
File: 0A32E14E259511F0BE41F9EADAE4EC9C.roa (raw, json)
Hash identifier: kbBIVGa1lRkaHl8c5Di09S/9eZjWFLvi/4urRP+JF/M=
Subject key identifier: D4:8D:61:A0:D5:D0:A7:34:2D:BA:C8:BF:71:C7:7D:61:8F:C7:88:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01506B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A32E14E259511F0BE41F9EADAE4EC9C.roa
Signing time: Wed 30 Apr 2025 07:30:50 +0000
ROA not before: Wed 30 Apr 2025 07:30:46 +0000
ROA not after: Mon 09 Jun 2025 07:30:46 +0000
asID: 395793
IP address blocks: 45.192.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 16:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86123 (0x1506b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 07:30:46 2025 GMT
Not After : Jun 9 07:30:46 2025 GMT
Subject: CN=6811d1aa-5804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:f1:2e:f4:7d:19:a8:90:b4:ff:ef:27:8c:
f5:2b:f8:29:cd:32:f4:da:45:32:cc:74:2a:20:3c:
34:d8:89:86:98:58:b9:ea:7b:a3:0b:f4:9d:21:5f:
b9:fc:3c:5d:6d:07:b1:80:de:ea:f2:6b:a7:45:a8:
2f:3c:6a:de:03:04:71:b9:47:b1:7b:f2:f5:a0:6a:
8f:64:05:50:cf:c4:49:02:b4:ec:b7:e3:a0:57:59:
55:f9:ad:de:d2:7b:b9:4c:fc:9d:e8:eb:77:64:1d:
02:fe:16:f9:1b:e2:27:30:78:a8:7e:3b:72:a4:df:
fe:b4:7d:58:eb:4a:bf:3e:a9:14:d2:e2:2b:4e:45:
82:77:54:61:6b:37:e8:08:cd:ff:a2:25:52:58:45:
a8:49:80:19:93:9e:33:e5:43:31:7c:dd:bb:e1:bd:
3f:93:9c:b5:a2:5a:2f:f0:fd:31:5f:1a:b0:af:3f:
42:87:8c:30:89:99:bc:c5:03:6a:fc:13:ab:ae:52:
87:2e:88:c5:81:29:71:f4:ad:90:9a:cd:8d:c4:3c:
2c:b5:a9:63:b1:6a:a3:f8:c4:e3:91:56:14:6a:d1:
6b:50:2b:fa:8e:a4:f4:0b:92:fb:6b:ee:da:4e:7c:
db:1d:2b:fe:2f:15:eb:7a:78:69:9a:61:ab:c1:c2:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8D:61:A0:D5:D0:A7:34:2D:BA:C8:BF:71:C7:7D:61:8F:C7:88:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A32E14E259511F0BE41F9EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.236.0/22
Signature Algorithm: sha256WithRSAEncryption
28:92:7b:1b:db:48:78:d9:89:a6:61:05:4c:75:46:be:df:43:
3c:2f:df:2f:27:82:69:7f:53:55:34:74:d5:ed:bb:6d:1c:17:
c6:c6:fa:f1:ca:86:03:a8:b3:fc:32:ce:db:fc:07:60:cc:73:
89:71:dd:3e:72:b7:50:6a:cd:7e:5c:4c:86:f8:29:6e:5c:22:
a6:47:d0:41:49:ca:e4:75:47:8a:78:63:30:0c:b4:66:4a:a1:
51:be:88:0e:b8:03:d1:fd:36:57:0d:b5:3d:23:76:c8:50:d4:
f3:8e:ee:bf:d6:ac:d5:73:8f:c8:76:23:b7:04:37:36:c4:19:
38:d1:c4:a9:0c:18:39:f1:51:7a:f3:e9:ee:19:1b:cb:7e:17:
26:c1:9b:b7:57:87:4c:93:52:3c:f9:f3:27:51:76:eb:30:2d:
6e:89:d2:38:34:20:8a:d1:70:df:0a:6c:9f:5a:a7:2d:d9:e2:
07:c2:3c:df:85:ac:19:25:4c:f9:f5:a8:da:be:15:a6:a3:eb:
57:03:e7:4a:7f:b1:65:1a:c1:66:e0:66:d6:ba:80:97:34:13:
99:a7:4e:d5:e8:67:a5:2a:e9:7c:0d:b2:6b:a7:86:47:77:11:
23:3f:ab:e3:a4:0a:a7:d6:f7:e4:d3:0c:46:f5:c6:c3:eb:9e:
5f:fa:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:30:45 2025 by rpki-client