Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/125E82F8259811F0B9DFA280DAE4EC9C.roa
File: 125E82F8259811F0B9DFA280DAE4EC9C.roa (raw, json)
Hash identifier: fJIoIZVFjDodA1IN5OeH0oLbNPq+moAC2Mo+eebFuyQ=
Subject key identifier: EE:FA:09:81:88:43:18:0D:E0:E1:CF:50:7D:E3:E5:86:6F:CA:3C:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015071
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/125E82F8259811F0B9DFA280DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 07:52:32 +0000
ROA not before: Wed 30 Apr 2025 07:52:28 +0000
ROA not after: Thu 05 Jun 2025 07:52:28 +0000
asID: 395839
IP address blocks: 45.202.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86129 (0x15071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 07:52:28 2025 GMT
Not After : Jun 5 07:52:28 2025 GMT
Subject: CN=6811d6c0-6e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:0a:9f:1e:e9:c1:86:f9:b6:a8:75:f2:22:
98:ae:02:a5:51:66:dd:12:22:35:61:a2:89:66:9a:
c2:67:8d:87:e5:f1:b1:fa:1d:f1:5c:f4:0d:a2:54:
9b:1c:03:fa:f5:ba:e6:94:66:97:2e:53:a3:b5:74:
7a:fd:a6:f5:81:bc:36:10:90:14:06:dc:83:00:63:
90:1e:5b:c4:23:22:d9:a2:b0:dd:e9:f6:c6:3b:0b:
93:d9:a8:8e:4b:3d:f6:48:d5:81:2a:24:a0:8a:f9:
f6:af:df:a9:f5:42:32:d9:ee:9f:15:1c:97:ab:e1:
1a:00:e5:98:3d:05:d4:ab:c6:32:49:58:6a:55:2e:
46:69:f9:0f:5e:b3:6e:07:82:c8:fe:55:a7:c8:24:
b6:a5:b0:cf:7b:cd:27:3f:92:9c:f2:5e:6c:0c:d4:
bc:aa:33:b0:00:02:2d:c9:c7:5e:b8:64:f6:59:07:
0b:8a:70:cb:dc:05:b2:92:8d:42:79:b4:7f:46:f4:
42:10:ca:c0:32:bf:f2:98:2a:4a:20:5b:68:64:d2:
79:c0:d3:93:c4:2e:aa:d1:a3:4a:7a:47:cb:48:98:
ee:0b:93:54:2b:c9:c7:96:d4:a9:86:f3:43:bb:d5:
3f:a5:16:7e:6a:a1:58:81:b9:c7:55:30:e0:90:62:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:09:81:88:43:18:0D:E0:E1:CF:50:7D:E3:E5:86:6F:CA:3C:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/125E82F8259811F0B9DFA280DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.116.0/23
Signature Algorithm: sha256WithRSAEncryption
82:51:70:38:59:6b:e5:58:c6:1f:b0:2b:ab:c0:10:f6:7d:fb:
5c:ac:fc:82:17:ec:5f:82:88:7a:cc:0b:15:a2:34:b3:c9:f1:
16:ea:72:fc:c4:8d:15:f4:05:3c:91:ce:c2:53:82:58:4f:c8:
1c:d1:c0:ad:6c:5d:f9:7c:b3:cf:6e:cf:d4:9d:f9:d2:10:f7:
e1:98:0d:0f:01:90:0a:7d:66:36:9a:2f:ff:60:d9:e1:d0:70:
8a:5d:26:d2:8c:2f:9d:33:2e:3f:0d:77:41:40:24:f2:66:71:
a3:cf:6d:2d:52:82:d8:62:75:0e:a5:39:ff:b6:f1:2f:44:a2:
ae:ba:6d:76:86:51:6f:39:e0:97:44:20:0d:61:3a:67:48:8c:
e2:30:15:42:71:03:5e:69:97:54:65:b9:2a:2d:0c:8e:4b:e0:
a8:e4:9f:45:5c:c3:76:31:be:dc:03:78:cc:26:cc:cf:50:a3:
30:91:62:be:8d:ba:74:a3:04:0c:af:45:21:b0:0a:68:79:86:
1e:30:a2:ff:73:cd:be:4d:69:20:2d:f2:b0:c7:84:96:af:97:
c7:1d:ef:a8:1c:96:c5:07:49:af:e9:08:0a:84:7a:3c:cc:dc:
a9:77:1a:88:1c:d4:d2:b2:43:5f:b1:a1:3e:f4:f2:89:25:e0:
1e:99:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:42:05 2025 by rpki-client