Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA00496A50EF11F09ABD50BCDAE4EC9C.roa
File: BA00496A50EF11F09ABD50BCDAE4EC9C.roa (raw, json)
Hash identifier: oYZvhLK56gnXSqkqpCTfeJ+l6naoip87J6OF8lPDSoM=
Subject key identifier: 72:ED:2E:68:97:DD:DF:73:B2:4C:2E:75:F6:77:14:07:0B:69:0B:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E64
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA00496A50EF11F09ABD50BCDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 11:38:20 +0000
ROA not before: Tue 24 Jun 2025 11:38:15 +0000
ROA not after: Thu 31 Jul 2025 11:38:15 +0000
asID: 395793
IP address blocks: 45.192.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89700 (0x15e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 11:38:15 2025 GMT
Not After : Jul 31 11:38:15 2025 GMT
Subject: CN=685a8e2c-7df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:a4:16:d0:9d:4c:c5:f7:9c:85:bb:f5:b4:
0a:e4:cf:b1:7e:01:0e:fa:78:63:94:58:b3:15:9e:
af:a8:58:21:46:f4:a2:72:da:31:d1:6f:5a:3d:4c:
c3:b7:c4:99:1b:e2:34:f4:d8:10:f7:e5:20:6a:19:
d0:9b:23:9a:0a:6d:27:a2:8b:de:c2:43:e4:33:49:
d5:a3:7a:c3:45:86:ff:87:7f:de:4c:fc:a2:91:96:
cd:07:ed:42:b4:b2:d4:71:95:71:41:89:ee:3b:bc:
b4:68:20:d3:ca:58:4c:49:32:88:2c:e4:09:10:03:
4b:61:6e:bf:97:8b:8c:ce:58:02:83:fb:4c:7d:e1:
e6:a1:3b:ff:6d:79:ac:45:17:18:1b:63:d4:8f:53:
56:d3:51:21:d0:b5:a0:5e:b2:28:4d:4f:c0:aa:86:
1c:09:56:29:c6:65:c5:fc:df:68:64:8f:36:fd:c2:
fd:af:8a:e5:e0:0f:68:f9:8d:66:21:3f:a8:a8:2d:
cb:5e:20:1a:b0:91:64:ec:53:d3:34:9e:6d:d8:98:
3d:06:79:3b:a1:b5:08:47:2b:ee:00:b9:2f:a8:53:
58:00:90:8f:34:3f:87:9f:48:0d:31:69:0e:45:6d:
0f:b3:92:1d:77:a7:8a:17:07:98:ec:5a:e4:de:39:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:ED:2E:68:97:DD:DF:73:B2:4C:2E:75:F6:77:14:07:0B:69:0B:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA00496A50EF11F09ABD50BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.112.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ea:ca:b2:24:1a:2e:97:48:d8:f2:79:bc:0b:94:1e:6b:eb:
b9:2a:41:36:8a:21:0a:28:0e:89:ab:eb:3c:a1:f6:c1:49:d1:
39:43:cc:8c:07:c3:51:12:4e:95:6b:94:54:df:89:b6:83:88:
30:37:15:f3:c3:22:14:89:a2:7a:0a:50:33:a9:c3:85:25:da:
90:11:8b:d3:df:9d:c0:12:b3:e1:63:6c:09:bb:9d:6c:5c:8b:
8c:6e:c3:4b:90:50:1c:1b:5f:6e:8e:28:18:10:5b:18:35:ff:
65:ba:ec:65:ac:c2:d5:cc:2a:25:c2:58:ea:db:eb:d5:c3:d8:
8b:20:77:b5:74:cb:b0:54:b2:7d:fa:cb:25:c7:67:69:2f:c8:
7f:37:6b:c4:8b:a0:a0:17:95:5e:80:70:a2:b3:0b:45:0f:e6:
80:20:3b:41:97:0f:ed:d1:db:a5:b9:f2:4a:76:73:b9:9f:66:
8c:e2:c1:6e:c0:20:b2:cd:ac:d2:e6:7b:cf:cd:b4:8f:6a:55:
56:dd:cd:0f:ac:99:de:6b:f8:d6:bf:ed:de:76:c3:60:78:ba:
21:e8:33:94:dc:88:a7:63:bd:7e:d1:f5:e5:20:7f:53:4f:de:
2b:10:b8:37:3d:af:5a:c7:b1:f6:b6:db:80:74:52:bc:d8:65:
ea:35:29:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:25:31 2025 by rpki-client