Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F8B1F20298811F0A2BA0CD7DAE4EC9C.roa
File: 0F8B1F20298811F0A2BA0CD7DAE4EC9C.roa (raw, json)
Hash identifier: 0bQRUpDBbFxtdlDvxIEApcCBdiVUkPHvYszrHY8A3Dk=
Subject key identifier: A5:94:C5:E6:5D:5D:5D:DA:C8:58:52:EC:98:E8:D8:B3:CA:1E:8E:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0151FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F8B1F20298811F0A2BA0CD7DAE4EC9C.roa
Signing time: Mon 05 May 2025 08:08:01 +0000
ROA not before: Mon 05 May 2025 08:07:55 +0000
ROA not after: Wed 11 Jun 2025 08:07:55 +0000
asID: 203020
IP address blocks: 45.202.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86525 (0x151fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 5 08:07:55 2025 GMT
Not After : Jun 11 08:07:55 2025 GMT
Subject: CN=681871e0-059a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:64:44:9e:5f:d3:c8:93:5c:b2:49:09:29:
47:2a:3f:9a:5d:54:ac:95:31:5e:4c:7d:95:ba:3d:
8c:97:a8:c0:86:47:2c:85:ab:06:f6:e1:bc:4a:8f:
65:c2:3e:56:bb:da:3a:8b:4d:0d:3c:9e:2b:bc:89:
85:03:6a:e0:cb:30:96:10:94:c1:7b:8b:24:ac:85:
3f:17:69:8f:59:7b:e6:ef:5f:3c:cd:e2:89:08:42:
77:d0:ff:ac:69:a8:f0:8a:a8:45:79:3c:81:02:1c:
45:25:dd:f7:b7:90:fb:73:8f:39:02:83:00:13:52:
5a:9f:6a:d0:76:3f:e4:45:ff:c1:56:32:f2:cd:f5:
83:12:9c:98:6c:42:b0:65:91:da:9b:11:ef:64:52:
70:d2:2a:a7:23:39:15:77:1c:ff:6d:24:bf:7c:38:
b3:b9:d8:d9:fe:38:51:88:8f:9f:d6:f4:6f:ae:6d:
e1:5b:25:44:9b:49:33:07:5e:a9:ee:df:2f:31:7e:
99:be:9d:d1:62:ee:d5:54:51:bc:a0:99:1a:4b:29:
79:4f:d2:93:e3:de:14:8b:d7:e5:ff:2c:da:44:7f:
60:c9:6b:5f:64:11:15:f3:dc:64:18:34:45:0b:12:
41:80:f5:23:d3:25:bb:83:0c:41:5c:49:70:95:ee:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:94:C5:E6:5D:5D:5D:DA:C8:58:52:EC:98:E8:D8:B3:CA:1E:8E:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F8B1F20298811F0A2BA0CD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.46.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ae:8d:05:c2:63:fb:2d:7c:84:fd:4b:96:ca:d0:3c:6d:df:
2c:0a:2d:ad:a8:8b:31:70:07:84:7c:2a:48:31:3b:05:74:34:
fd:0a:8c:75:f6:eb:03:58:71:81:28:97:8e:88:81:d3:d0:bb:
0f:2d:b3:f8:54:e0:0f:36:d9:28:f9:97:cc:92:8e:98:6f:e1:
3a:08:21:fb:9c:46:c8:06:fc:0c:ce:31:e3:58:80:89:5c:b5:
c8:3a:63:fa:e1:7d:3e:cd:4d:fe:ef:d0:2b:41:a2:6b:31:46:
99:2c:8b:a4:c8:42:b5:26:cb:0e:59:fb:9e:8b:38:9f:cc:96:
16:8b:cf:96:67:a0:f0:95:4a:3c:47:f3:29:73:fd:52:d4:20:
1f:72:35:8a:8c:61:9f:a0:8e:7d:bd:29:61:ca:1b:55:9c:f7:
88:7c:3f:40:f5:be:28:4b:e8:e9:4d:ac:e6:fd:6e:39:e9:a5:
ed:e2:c4:d5:f5:a4:aa:2b:a5:cf:0a:6b:ad:4f:56:37:fc:88:
f6:6a:6e:c5:60:6b:65:4f:ba:d8:b0:2c:83:c1:74:11:5b:3f:
ba:32:f3:cf:b8:56:03:12:2f:6f:09:c6:87:5e:94:b0:f5:bb:
cd:47:1c:40:33:39:73:3a:4f:9d:af:7d:5b:03:d3:4a:f7:d5:
c4:0f:7c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:46:44 2025 by rpki-client