Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41CBCEE4566F11F0A421DE83DAE4EC9C.roa
File: 41CBCEE4566F11F0A421DE83DAE4EC9C.roa (raw, json)
Hash identifier: 7KzwCl+Tmj/lGNVmmU04gM0TmqW8dOkffXxyiRAqRJI=
Subject key identifier: 7A:9C:3F:C5:42:B0:7A:DD:DB:8D:AA:9D:62:83:F1:70:19:7B:4C:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41CBCEE4566F11F0A421DE83DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 11:33:50 +0000
ROA not before: Tue 01 Jul 2025 11:33:42 +0000
ROA not after: Fri 12 Sep 2025 11:33:42 +0000
asID: 132513
IP address blocks: 45.196.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90072 (0x15fd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 11:33:42 2025 GMT
Not After : Sep 12 11:33:42 2025 GMT
Subject: CN=6863c79e-1fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:1e:9b:02:7e:66:94:67:ae:e4:9d:5c:2e:
af:92:f6:ae:50:66:e8:5e:83:9c:aa:a6:c8:e3:98:
4f:9c:04:1e:f8:53:07:c6:27:3d:41:4e:e4:bc:42:
88:09:7d:48:6f:93:9c:95:52:2d:04:41:1a:b3:e6:
36:8b:bc:a7:bd:2b:90:1b:79:5c:79:34:54:2b:e8:
18:2d:55:e8:64:f2:99:da:3f:fe:94:53:1e:5c:ec:
99:c3:2e:90:aa:af:fd:90:6c:b8:ef:09:4f:fb:1c:
e0:b6:d3:fe:82:12:e8:02:30:b8:d1:8d:05:29:1b:
8e:c9:74:00:c1:c1:5e:61:0e:3e:51:24:0e:e5:06:
8e:c9:99:e3:56:49:7c:eb:06:0e:7a:c1:64:1c:fd:
d5:e6:d4:92:71:05:36:0c:b3:20:1d:e5:5d:2f:b4:
25:f2:f6:f4:b7:a0:eb:8d:98:30:c7:c1:55:c7:a5:
50:6a:af:5c:7a:24:cd:87:3f:d1:0d:cf:ca:90:b3:
57:c6:7f:25:e8:22:cf:10:8e:40:14:4c:89:08:44:
f2:d2:98:68:cc:65:e8:71:90:af:2b:cc:9f:03:13:
42:43:3f:00:87:35:8a:6f:bb:51:28:f0:00:8b:38:
24:5b:22:81:fe:48:4f:7e:85:6e:0a:20:c0:99:bb:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9C:3F:C5:42:B0:7A:DD:DB:8D:AA:9D:62:83:F1:70:19:7B:4C:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41CBCEE4566F11F0A421DE83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.208.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ae:10:11:d0:55:c0:56:03:fd:92:ee:34:5d:09:06:c8:5f:
b0:48:f8:2d:8e:c8:c6:67:6c:15:df:ea:c8:a0:3e:5b:c5:67:
1d:87:4a:b0:2e:e8:71:e7:e8:eb:dd:61:ee:67:1a:af:e4:2c:
7e:83:67:62:97:b7:ca:43:f9:6c:2a:13:08:ca:88:c0:be:d3:
5f:33:49:3c:66:99:6e:f1:56:7e:69:06:6c:cb:95:04:63:63:
6c:a3:d9:88:9b:42:b1:de:0b:4b:19:41:9e:d4:63:93:cf:ed:
45:18:cc:e5:2a:61:06:74:e9:9b:2e:f3:58:46:22:01:57:70:
cf:dc:cc:30:5c:c6:16:bd:35:4e:c4:99:e5:55:61:9f:f6:38:
b7:55:52:2d:d6:c4:71:67:34:c9:53:85:3d:39:a5:8d:36:59:
4b:33:ae:16:b8:c3:04:2e:0b:f2:17:f2:61:a6:16:34:40:08:
72:87:a8:d2:c6:f4:95:32:af:9d:df:54:d2:7c:c9:0e:29:c1:
71:17:30:09:7e:da:bf:0e:02:56:26:ee:89:a6:35:7c:51:b5:
3b:76:7a:da:6e:96:5a:20:cc:55:b9:ea:d6:8d:44:51:a7:88:
99:0b:04:de:8e:ad:7b:4d:92:bb:3a:5c:87:70:35:0c:3e:ad:
22:13:69:c9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAV/YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzAxMTEzMzQyWhcNMjUwOTEyMTEzMzQyWjAYMRYw
FAYDVQQDEw02ODYzYzc5ZS0xZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArEMemwJ+ZpRnruSdXC6vkvauUGboXoOcqqbI45hPnAQe+FMHxic9QU7k
vEKICX1Ib5OclVItBEEas+Y2i7ynvSuQG3lceTRUK+gYLVXoZPKZ2j/+lFMeXOyZ
wy6Qqq/9kGy47wlP+xzgttP+ghLoAjC40Y0FKRuOyXQAwcFeYQ4+USQO5QaOyZnj
Vkl86wYOesFkHP3V5tSScQU2DLMgHeVdL7Ql8vb0t6DrjZgwx8FVx6VQaq9ceiTN
hz/RDc/KkLNXxn8l6CLPEI5AFEyJCETy0phozGXocZCvK8yfAxNCQz8AhzWKb7tR
KPAAizgkWyKB/khPfoVuCiDAmbstWQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHqc
P8VCsHrd242qnWKD8XAZe0yMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MUNCQ0VFNDU2NkYxMUYwQTQyMURFODNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTQMA0GCSqGSIb3DQEBCwUA
A4IBAQAnrhAR0FXAVgP9ku40XQkGyF+wSPgtjsjGZ2wV3+rIoD5bxWcdh0qwLuhx
5+jr3WHuZxqv5Cx+g2dil7fKQ/lsKhMIyojAvtNfM0k8Zplu8VZ+aQZsy5UEY2Ns
o9mIm0Kx3gtLGUGe1GOTz+1FGMzlKmEGdOmbLvNYRiIBV3DP3MwwXMYWvTVOxJnl
VWGf9ji3VVIt1sRxZzTJU4U9OaWNNllLM64WuMMELgvyF/JhphY0QAhyh6jSxvSV
Mq+d31TSfMkOKcFxFzAJftq/DgJWJu6JpjV8UbU7dnrabpZaIMxVuerWjURRp4iZ
CwTejq17TZK7OlyHcDUMPq0iE2nJ
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:44:00 2025 by rpki-client