Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B5902CA543711F0993FFE91DAE4EC9C.roa
File: 6B5902CA543711F0993FFE91DAE4EC9C.roa (raw, json)
Hash identifier: x4nfUoFV+/gEztF3HBDmFXb/Skwfoo1qZu23cz0bsLc=
Subject key identifier: 6F:C7:0E:C0:C8:F3:96:23:28:32:50:1D:44:AB:86:B3:7D:7C:74:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B5902CA543711F0993FFE91DAE4EC9C.roa
Signing time: Sat 28 Jun 2025 15:49:05 +0000
ROA not before: Sat 28 Jun 2025 15:49:00 +0000
ROA not after: Sun 03 Aug 2025 15:49:00 +0000
asID: 13335
IP address blocks: 45.192.222.0/24 maxlen: 24
45.192.223.0/24 maxlen: 24
45.192.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89933 (0x15f4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 15:49:00 2025 GMT
Not After : Aug 3 15:49:00 2025 GMT
Subject: CN=68600ef1-8410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:c1:cc:e8:da:0a:aa:54:3f:26:8e:16:54:
bc:6e:49:4f:9d:71:35:ce:1e:09:94:aa:f2:aa:cb:
80:d8:06:aa:39:b1:9f:da:a4:1c:6b:c6:9f:51:03:
23:0b:20:c8:4f:b0:fc:65:89:24:9a:c5:73:92:19:
3e:e3:95:1b:27:89:18:b5:64:92:2f:2c:c3:51:19:
8b:a1:f3:19:c0:4a:bd:0a:83:b8:b0:93:41:3d:5a:
f8:0c:7f:66:2b:c7:a2:71:d3:8c:92:42:c4:a0:31:
7d:f9:95:34:ff:a1:52:83:80:3e:c4:87:7a:66:dd:
eb:30:9f:fb:05:16:ed:f0:d3:ab:21:ef:01:6d:72:
94:ff:7a:f5:98:b7:7e:88:f4:48:34:94:cb:d9:f2:
56:9b:6c:96:4c:fe:cf:68:4d:2a:c0:cc:6e:a5:35:
76:c4:14:00:82:8e:01:dd:85:29:22:0b:48:11:0c:
d7:93:31:02:5f:0c:d6:b6:09:43:b5:d6:67:d4:9f:
09:3d:6f:e4:d6:22:e6:b9:09:ae:96:47:6f:64:13:
bb:36:d5:28:94:53:54:60:e3:2d:de:7e:50:75:98:
4d:af:b4:d6:9c:02:94:d3:2b:0f:52:99:da:c6:3f:
2a:91:2f:1c:63:36:f4:45:4a:84:b5:30:6e:ca:78:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C7:0E:C0:C8:F3:96:23:28:32:50:1D:44:AB:86:B3:7D:7C:74:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B5902CA543711F0993FFE91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.222.0-45.192.224.255
Signature Algorithm: sha256WithRSAEncryption
69:7a:26:ea:85:c6:ac:bc:5a:96:7b:8a:80:fe:6f:bd:f3:45:
79:e2:cb:96:52:7b:f8:ef:82:87:a8:7b:4a:8d:14:5d:d8:07:
1b:e9:f6:76:54:f5:3a:aa:ae:45:d8:24:70:74:94:12:64:a6:
7a:42:3e:16:06:3d:4c:db:5a:7b:35:c2:d9:48:80:d2:83:27:
77:ee:33:47:ad:39:73:e2:3f:5a:29:59:3e:89:e7:ce:c8:96:
be:01:9f:36:ce:4f:6b:29:c8:dd:80:4b:8e:62:01:f0:be:85:
70:59:f0:f9:26:f8:fb:5d:e3:be:50:cc:57:b7:69:7a:ae:11:
a9:ad:af:2f:8c:b0:9c:60:4d:d4:86:12:4c:d1:ed:5f:2e:1f:
b3:00:37:08:c1:2f:23:ef:d3:d3:04:87:9e:95:42:35:fb:ec:
33:d6:5d:67:d3:77:42:bf:37:f6:c0:75:da:b1:c8:dc:38:91:
69:4a:2d:fb:e7:67:b7:61:11:ce:50:24:ee:12:54:5f:7e:2b:
77:f7:09:ab:ad:73:8e:15:6b:84:87:c4:5a:47:2d:1d:40:87:
1b:01:77:92:9f:c4:a0:8d:47:33:be:16:6c:93:ef:42:67:ce:
78:2a:6d:c8:c0:62:5f:63:53:3b:d7:a8:6f:c0:d1:65:62:bd:
3b:37:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:31:37 2025 by rpki-client