Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B6EAE78243B11F08B5836D7DAE4EC9C.roa
File: 4B6EAE78243B11F08B5836D7DAE4EC9C.roa (raw, json)
Hash identifier: ESMEWzaZ7/6FHGbuPOO0/hPErKiVOEKHAYcFgbbBC8U=
Subject key identifier: 4E:81:2C:67:81:86:62:00:B3:53:53:F9:52:E4:13:6B:B1:61:DA:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F62
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B6EAE78243B11F08B5836D7DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:15:54 +0000
ROA not before: Mon 28 Apr 2025 14:15:49 +0000
ROA not after: Fri 27 Mar 2026 14:15:49 +0000
asID: 984
IP address blocks: 45.194.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85858 (0x14f62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 14:15:49 2025 GMT
Not After : Mar 27 14:15:49 2026 GMT
Subject: CN=680f8d9a-7e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:2d:f3:18:fd:30:ee:eb:c9:19:fc:43:18:
6c:39:bb:42:46:fe:9f:34:0a:a6:26:37:b9:ca:34:
21:16:c4:96:51:41:00:c0:4c:32:0e:80:4f:bd:14:
24:2a:08:3e:82:8c:59:30:27:fc:2a:06:69:0b:c8:
77:54:c7:c7:af:e4:45:1a:60:3e:d1:56:60:3f:a6:
b6:94:eb:bc:03:c1:1c:37:1c:98:e7:4e:90:19:56:
e8:88:2e:2f:cc:49:e7:3b:b1:8a:27:50:59:00:a5:
f2:0f:98:c9:b7:c3:6e:e1:a7:61:e9:71:7f:ed:b9:
17:fc:82:11:44:9c:ef:ae:37:cc:c2:f5:6d:15:8f:
e1:3a:66:6e:cf:22:4b:c0:2a:55:b3:25:43:f0:21:
df:64:56:e2:c1:ea:fd:1a:64:16:2a:cd:22:ce:6d:
a4:75:96:61:07:ca:c5:c9:96:de:36:38:d4:f2:3f:
69:5d:09:08:12:ae:05:f9:bc:70:79:e1:9e:ce:99:
52:8e:2e:0f:a8:81:f8:37:bb:81:d4:db:b9:a5:1a:
ba:c2:1f:e9:1a:01:1b:c7:c7:fd:c6:b2:3c:ba:93:
cc:c1:ad:6d:69:c7:84:e3:e2:6c:5d:a1:db:09:fc:
29:7b:f1:d3:90:ab:39:31:e3:9e:60:c5:2b:81:5e:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:81:2C:67:81:86:62:00:B3:53:53:F9:52:E4:13:6B:B1:61:DA:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B6EAE78243B11F08B5836D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.45.0/24
Signature Algorithm: sha256WithRSAEncryption
03:43:ca:d3:69:c1:5a:ba:a6:77:2a:e7:b7:f5:56:c5:9f:ea:
01:f8:26:55:9e:ad:3a:c1:25:ee:cb:84:a5:e3:6e:ad:90:94:
19:ed:bc:01:67:1d:f3:24:07:72:f3:51:06:b0:88:0e:33:ac:
96:04:99:c8:31:5a:c9:07:ee:7b:13:a9:0b:7f:40:b5:ba:74:
d6:2a:9d:40:2f:30:7a:04:fa:82:96:ec:2c:bf:31:a0:15:79:
85:2c:45:b2:5f:58:9f:8a:8f:56:81:85:df:05:78:29:28:50:
3f:66:22:53:29:02:14:a3:b2:a2:60:f7:8d:26:a8:6a:bd:cf:
19:ac:89:34:7b:fa:34:8d:ea:6c:b3:2a:ea:44:e9:8d:2c:d4:
dd:17:21:60:b5:77:98:94:bb:5e:0c:6b:ca:b8:70:19:37:91:
3e:0f:8b:a4:53:36:c3:6e:52:2a:6a:aa:dc:5d:df:84:53:0e:
dc:31:88:15:64:25:cc:fa:24:ac:dc:0f:5e:38:c6:96:be:a2:
63:ac:37:1a:70:a5:d1:3c:65:65:6d:dc:9d:0e:bc:cc:04:a8:
eb:47:08:d6:91:d3:69:ba:05:f3:d8:5d:15:2d:c4:1d:c7:3f:
b6:85:14:4a:11:b7:37:bd:11:d4:19:d2:c9:fd:9b:fd:6c:4f:
ab:45:44:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:30:07 2025 by rpki-client