Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E0ED004525D11F09926C790DAE4EC9C.roa
File: 4E0ED004525D11F09926C790DAE4EC9C.roa (raw, json)
Hash identifier: TUfGQWOKBBKeHdWEFsbtZr82+twNkDgZKRE9UDgRxGQ=
Subject key identifier: 12:E4:1F:8A:5F:CF:09:B2:1F:58:70:D6:32:A9:6B:89:FA:7C:EF:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015EDD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E0ED004525D11F09926C790DAE4EC9C.roa
Signing time: Thu 26 Jun 2025 07:15:15 +0000
ROA not before: Thu 26 Jun 2025 07:15:10 +0000
ROA not after: Thu 25 Sep 2025 07:15:10 +0000
asID: 142286
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89821 (0x15edd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 07:15:10 2025 GMT
Not After : Sep 25 07:15:10 2025 GMT
Subject: CN=685cf383-47cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e6:2f:a5:24:fb:e9:8c:42:fa:9f:f6:06:9e:
19:b1:d6:93:07:65:c7:29:fb:46:4c:c5:4c:86:f0:
87:2f:ab:7f:6c:2d:52:bc:1a:4b:ea:02:4e:01:0d:
f7:e9:34:c4:70:59:45:48:6e:9e:7a:ba:f0:d7:e3:
56:45:bd:4d:5f:fb:1e:c6:fc:92:ec:da:4f:40:7d:
5e:52:5e:41:96:8e:81:b7:96:e4:14:aa:72:bd:1e:
c7:42:c8:b1:89:fc:54:f9:90:45:1d:c7:25:bd:9a:
e2:05:0b:bf:65:2e:10:92:ed:17:6c:6b:a6:04:83:
67:18:bb:29:eb:46:df:25:50:9f:70:2f:f2:e7:f9:
a6:8d:ad:fe:9e:45:36:9b:1b:ac:c7:2c:59:2a:f3:
5b:b3:c4:7c:51:ff:2d:30:fb:f2:e6:aa:6f:33:e5:
7f:fa:4c:3c:15:b5:c1:bc:ac:d4:3b:ab:d0:40:2a:
8b:62:1b:9d:35:40:95:37:b1:e5:ce:2f:24:7d:0a:
94:9a:bf:8d:ff:65:1f:2a:e9:da:1e:33:16:f0:5b:
d5:fb:9c:a4:4e:81:57:79:33:00:bf:f0:40:41:f8:
02:d3:6f:9f:51:18:ce:54:70:0e:f3:96:1a:8c:65:
63:93:b7:cd:e6:09:89:85:3b:7c:ba:08:73:57:f0:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:1F:8A:5F:CF:09:B2:1F:58:70:D6:32:A9:6B:89:FA:7C:EF:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E0ED004525D11F09926C790DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:98:6d:9f:b7:f4:f8:53:eb:2c:7b:db:2c:d4:e0:db:65:0d:
fc:c2:c5:21:c7:66:0f:be:95:0a:61:fc:1c:8b:b9:c5:70:30:
35:43:51:a2:58:d5:be:28:ff:51:30:b4:82:5e:70:12:93:14:
92:f5:51:b2:b3:bc:75:95:62:77:b9:97:30:a1:7c:1a:af:89:
30:3d:87:86:0f:59:45:e3:2a:f6:13:2c:5f:b4:ff:df:42:c3:
18:bc:80:59:2a:8f:78:6f:36:57:82:27:78:9b:1b:6b:39:40:
cf:67:d7:18:18:8d:02:59:09:e1:8c:b1:75:28:b5:87:7d:6b:
f6:02:c4:1a:b1:c9:16:08:d9:2b:a6:3d:ef:66:c3:c3:be:6a:
6e:f7:27:d9:b3:83:ac:6c:a8:e8:ce:e3:fe:ad:fe:67:b1:56:
aa:05:6e:f7:24:a4:20:cf:ea:30:ce:2d:c8:b0:b1:32:eb:61:
b8:3d:a7:23:cf:d0:91:c2:c8:28:c5:22:83:93:ff:6a:39:33:
fb:4d:31:4a:0e:34:c1:29:29:4f:d5:e6:9f:d5:79:5d:38:fa:
dc:a2:8f:1f:aa:73:f2:1f:dd:e4:22:85:f4:3e:a5:10:74:e8:
5b:9f:6a:47:42:6b:18:79:86:d5:91:f1:de:fd:39:6b:31:18:
96:fb:c0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:48:16 2025 by rpki-client