Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6C5E03424D311F0893665DDDAE4EC9C.roa
File: D6C5E03424D311F0893665DDDAE4EC9C.roa (raw, json)
Hash identifier: 9mt20KrEONJKkKPt/Zp9X2V55vf9MQ66qTb8aviQ9ts=
Subject key identifier: 31:A0:06:67:1F:11:C6:66:C9:01:5B:1B:CA:EB:07:B8:49:5E:2D:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015031
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6C5E03424D311F0893665DDDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 08:27:51 +0000
ROA not before: Tue 29 Apr 2025 08:27:46 +0000
ROA not after: Thu 05 Jun 2025 08:27:46 +0000
asID: 14315
IP address blocks: 45.202.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86065 (0x15031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 08:27:46 2025 GMT
Not After : Jun 5 08:27:46 2025 GMT
Subject: CN=68108d87-5eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:23:a9:8e:e0:aa:c9:75:eb:df:2b:69:d4:
0b:b2:68:91:e8:b0:b7:d2:bc:0a:38:28:e6:c8:92:
72:47:9a:15:a1:d2:b4:f4:cd:8a:bd:a4:82:e4:ec:
3d:30:69:70:99:10:f0:7a:39:eb:9d:b3:4e:66:f8:
6e:da:e4:e2:1c:ac:3e:07:d1:d9:92:9a:24:43:60:
bf:e1:b1:ff:d9:43:a5:20:80:82:8c:8c:60:f8:44:
83:f2:7b:f6:dd:c4:3f:da:d3:a8:1c:b4:ce:cc:04:
07:9f:11:b0:4c:48:e5:af:99:8d:4c:d8:ca:81:a2:
54:f3:f7:be:d5:d1:19:c4:5b:5a:cf:c7:41:9c:eb:
04:9a:93:07:c6:46:77:60:1c:52:33:0e:36:d7:f9:
d9:e1:87:69:4d:e2:ba:31:5b:3e:af:0d:72:e8:3f:
e8:b8:8e:c2:c0:07:ca:56:d8:84:6c:f7:97:1a:48:
de:09:81:4a:36:1b:84:ce:cc:ad:dd:e9:b2:ab:54:
b3:37:b4:8a:81:29:1c:22:75:e6:62:ec:30:8c:14:
59:e8:a1:dd:ba:65:44:77:e4:e9:f0:1e:02:b2:86:
37:56:14:64:eb:f2:e0:47:aa:91:93:24:61:b4:d0:
54:d8:2e:36:3f:da:b3:f3:aa:a9:23:88:cf:11:f6:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A0:06:67:1F:11:C6:66:C9:01:5B:1B:CA:EB:07:B8:49:5E:2D:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6C5E03424D311F0893665DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.197.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:4c:dd:bd:54:bf:09:32:7e:e0:a6:48:cb:f4:f3:b0:79:63:
f9:16:d7:8c:bf:89:e8:ed:f2:55:98:7e:16:11:35:b8:06:d8:
65:a4:2e:35:bd:9d:0b:0f:69:29:4b:0e:7c:c1:09:09:ec:de:
91:7a:e2:28:97:10:d6:62:62:ec:76:27:46:0b:79:a1:13:b4:
23:66:40:95:45:94:e9:e7:32:c8:16:b9:4c:8d:0c:a9:67:fb:
d3:1c:51:09:97:59:6f:7f:2d:6c:72:b0:4f:29:3c:72:28:36:
5a:b8:ee:bc:95:37:a4:ed:6e:c9:ce:f7:11:79:08:4f:45:f8:
35:8e:13:d0:7c:3b:31:b8:0e:6e:f8:cb:5d:46:d5:3c:82:3c:
10:b1:45:7f:56:d4:5f:b8:7c:8d:5e:06:3b:f9:a2:64:d4:cd:
06:01:24:3c:05:cc:d9:60:d9:92:b5:4c:d1:11:33:aa:be:87:
7a:45:75:6e:9c:84:ba:0d:15:6d:b1:16:9a:d4:61:5f:13:30:
43:53:6b:4f:d1:2d:0a:40:4c:a3:02:84:83:da:a4:a9:b4:63:
6e:de:25:f0:b0:82:7c:02:ef:a2:9e:c0:5f:3f:9c:72:cf:60:
d2:3d:3c:c3:a0:ac:58:87:c9:7d:01:a9:5f:5a:d3:5e:71:5e:
2d:43:2c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:35:50 2025 by rpki-client