Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52F50B7E543D11F0BB5559B5DAE4EC9C.roa
File: 52F50B7E543D11F0BB5559B5DAE4EC9C.roa (raw, json)
Hash identifier: Qn5ZIz9h9kQF5zPA7gNiSUcyOWDWu1BfwcfE8A3Diho=
Subject key identifier: 79:F9:F3:D9:BD:75:05:D4:3E:DD:DD:B0:8A:88:C0:B3:32:D1:79:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52F50B7E543D11F0BB5559B5DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 16:31:21 +0000
ROA not before: Sat 28 Jun 2025 16:31:16 +0000
ROA not after: Tue 05 Aug 2025 16:31:16 +0000
asID: 14315
IP address blocks: 45.202.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89943 (0x15f57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 16:31:16 2025 GMT
Not After : Aug 5 16:31:16 2025 GMT
Subject: CN=686018d9-786d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:86:57:98:cc:d5:2f:6d:40:f1:6a:9c:97:
f1:84:37:bf:62:8b:13:2b:12:e5:4b:4d:e1:4d:c4:
c1:f2:cc:76:d4:3c:7c:59:40:78:14:1d:97:82:3a:
24:b6:d1:5c:01:fb:60:92:20:6b:6d:72:01:2e:1f:
99:75:2a:b6:ac:ba:1f:fa:5f:be:b0:f3:2c:e3:b2:
7f:fc:07:63:37:13:4e:c3:6d:02:79:30:da:a2:b7:
b7:f7:20:d5:49:ed:38:35:c4:c9:5e:64:6d:21:26:
d9:72:a3:62:b5:97:63:dd:19:64:5b:8b:7d:ed:1e:
3b:c8:57:32:53:45:09:46:75:0e:1f:cb:14:75:35:
e0:78:66:0a:2f:16:a2:73:3b:cc:d9:7f:53:fc:77:
e8:12:2a:36:f4:85:ce:2f:c8:0b:7d:31:c1:77:da:
db:fc:a5:cc:bb:1c:89:75:13:01:c3:32:19:88:0a:
e9:53:dc:39:1b:e1:1e:5e:50:45:4f:12:b2:99:ac:
b6:dc:2e:68:e0:58:4b:96:15:16:fb:bb:3f:9a:f6:
7b:c0:24:ff:b7:2e:0d:d2:d1:4c:5c:d2:16:ca:22:
fa:ad:99:e0:0f:12:0f:8c:ca:2b:d9:02:f1:3c:78:
14:21:d3:3f:4c:17:a3:c9:0b:c7:82:6e:21:b2:c4:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F9:F3:D9:BD:75:05:D4:3E:DD:DD:B0:8A:88:C0:B3:32:D1:79:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52F50B7E543D11F0BB5559B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.197.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e9:4c:60:21:03:ce:fa:fe:12:b8:fe:08:1b:ac:e7:4c:5d:
6f:19:7b:67:72:e5:b4:da:27:40:6c:af:d3:55:ca:c0:72:b3:
8f:30:33:89:05:7c:ac:d0:7d:72:25:f4:aa:75:bb:0a:4b:2c:
0a:7e:ad:1c:fc:85:a8:97:a5:de:43:d1:0a:37:65:13:9e:e0:
d9:9f:b6:bc:28:0d:ff:aa:f4:ef:5b:92:6c:58:da:8e:6c:50:
6a:65:79:90:aa:40:f4:ed:a8:3c:9b:3e:2f:9d:25:c2:dd:9f:
88:05:39:ba:54:17:3b:f8:71:26:ba:1e:43:74:9f:d3:24:e0:
87:ae:bb:b2:25:5f:28:28:f2:0a:6d:24:df:d5:3e:76:6d:13:
70:2e:bc:d4:10:55:e1:ae:ec:61:26:34:54:98:89:4d:4a:24:
6b:65:3b:4f:94:49:8f:65:f7:f4:e0:96:c3:35:ad:57:3d:22:
7d:87:11:e7:d4:c6:b3:1a:0a:d0:03:52:d5:d6:8d:63:31:de:
cc:8d:f2:f6:a6:6c:3a:aa:9e:88:dd:d2:c7:01:1b:db:a4:e8:
db:da:07:08:52:b9:cd:72:7c:2f:e5:0e:4d:ca:5c:4f:d7:2f:
31:b8:5a:2d:82:80:19:5b:c0:27:1c:54:0d:89:03:e3:a9:7c:
41:04:ce:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:52:06 2025 by rpki-client