Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/923ECA3228C211F0BD3D79ADDAE4EC9C.roa
File: 923ECA3228C211F0BD3D79ADDAE4EC9C.roa (raw, json)
Hash identifier: qSVJi7Pmpyc0HlUmk8b0K22HV+1D9bQIVXY3c8dzaNM=
Subject key identifier: E0:A2:C1:2C:46:A2:44:56:37:A4:E0:8E:BE:A8:C7:56:F8:E6:A7:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0151D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/923ECA3228C211F0BD3D79ADDAE4EC9C.roa
Signing time: Sun 04 May 2025 08:34:19 +0000
ROA not before: Sun 04 May 2025 08:34:14 +0000
ROA not after: Fri 08 May 2026 08:34:14 +0000
asID: 137510
IP address blocks: 45.204.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86484 (0x151d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 4 08:34:14 2025 GMT
Not After : May 8 08:34:14 2026 GMT
Subject: CN=6817268b-8f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:50:8a:fc:5c:8d:0d:b8:99:f6:b1:ad:69:a9:
4e:89:6c:aa:3d:ec:21:ff:8f:95:a7:6c:a1:e0:dd:
e8:c3:f0:a7:31:4c:73:da:a1:54:1a:10:30:e4:e9:
53:50:f8:4b:37:fc:f5:78:ec:fa:af:19:72:c0:da:
c0:b6:32:f1:32:e0:87:4d:45:75:a0:ae:0c:dd:d2:
73:d6:89:ab:57:70:20:92:34:8e:51:4a:5b:ec:75:
f3:b8:66:16:29:98:25:6c:78:21:b5:34:b6:b8:b8:
a7:f6:58:c8:13:91:fb:1a:c1:18:00:11:73:f7:1f:
14:1e:f3:be:b3:04:45:7b:1b:1f:6f:62:92:56:93:
aa:fa:6a:77:bb:13:b9:fc:fd:28:e8:f6:94:cb:b1:
dc:2f:af:3e:ad:27:5c:f5:9a:84:a0:7f:6e:a1:66:
4c:97:c1:f2:c5:94:46:db:50:b0:fb:93:a1:eb:06:
19:f2:12:d8:8d:05:57:ba:b2:e4:4d:52:f2:3b:74:
c9:3d:84:42:20:58:c0:c7:06:4c:aa:c3:ee:40:d8:
7b:d6:c9:c8:c5:86:ea:37:8f:20:a0:09:73:03:10:
66:c4:7d:d9:86:9c:b1:9e:68:f0:84:9c:c2:3e:da:
7f:b6:4a:db:70:8e:fd:81:ca:43:d1:d4:a0:55:ef:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A2:C1:2C:46:A2:44:56:37:A4:E0:8E:BE:A8:C7:56:F8:E6:A7:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/923ECA3228C211F0BD3D79ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.68.0/24
Signature Algorithm: sha256WithRSAEncryption
af:07:bb:9b:85:50:48:b8:86:e7:fc:7c:e6:a5:51:9a:c7:00:
7a:e1:8e:59:18:46:86:13:cd:fd:e1:95:ee:7c:0f:1d:92:7d:
ad:79:7f:e3:24:bb:04:db:63:ce:2c:e8:0c:93:60:14:29:68:
a1:44:d4:81:77:3e:21:2c:63:43:e0:d8:d7:36:30:15:bd:fa:
29:ee:a6:bc:fe:1b:3a:f5:f8:46:7a:39:4b:a0:23:d4:52:58:
5d:a9:95:ec:9b:03:0a:e3:92:93:b5:95:c7:bf:ee:db:81:17:
84:73:99:49:82:57:9c:9e:e9:c9:4c:f4:cf:23:7e:63:ac:b2:
62:41:a2:65:25:02:77:7a:bd:2c:d5:da:95:d5:a9:25:d9:0e:
23:d1:b2:37:43:fd:5f:4c:99:df:d2:45:39:ba:3c:ee:b2:c2:
14:97:9a:44:be:50:f2:eb:f6:a1:3a:c8:57:c0:00:4b:4d:ba:
d8:5c:1a:64:3a:8a:dc:71:25:cf:a6:92:df:84:c2:ff:47:7a:
6e:7a:3d:12:28:3f:00:1b:d6:63:e5:08:8b:d7:a5:0a:16:7e:
7a:7c:e1:b4:1e:b5:48:99:a8:83:ab:62:33:6b:da:a1:ff:c3:
84:e2:b9:1a:98:38:3c:9a:66:cf:ae:81:69:ed:af:fd:85:b9:
90:51:aa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:22:22 2025 by rpki-client