Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6D99ECA477A11F0A0A83C9CDAE4EC9C.roa
File: D6D99ECA477A11F0A0A83C9CDAE4EC9C.roa (raw, json)
Hash identifier: F8ePaxINmW3jUYPCBYg6YX9qPbWcWIjm6Iq5OylX6lI=
Subject key identifier: 4B:E1:3F:14:F5:29:C1:37:C5:62:85:FE:10:52:10:39:1B:7F:B8:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6D99ECA477A11F0A0A83C9CDAE4EC9C.roa
Signing time: Thu 12 Jun 2025 10:48:57 +0000
ROA not before: Thu 12 Jun 2025 10:48:52 +0000
ROA not after: Sat 19 Jul 2025 10:48:52 +0000
asID: 57043
IP address blocks: 45.198.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88929 (0x15b61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 10:48:52 2025 GMT
Not After : Jul 19 10:48:52 2025 GMT
Subject: CN=684ab099-409e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:ea:e4:5f:66:bd:c3:f1:15:a7:4d:66:5f:
e8:74:b2:e0:4f:28:15:57:e7:e7:eb:35:f1:7e:40:
92:2e:7a:9d:7a:b3:89:49:b4:e6:58:0d:4a:2b:c9:
02:c5:84:9e:0c:f3:9c:d7:df:29:0d:c2:81:04:92:
e5:d1:86:1a:95:1c:8a:4c:79:cb:89:47:5b:99:e4:
31:0c:7d:3c:07:8b:a0:0b:0a:75:ab:40:39:cb:40:
1e:88:78:60:53:b9:9e:b3:bf:64:80:8b:3f:b8:62:
46:e5:26:ac:76:02:c8:a4:ed:af:92:ff:60:01:40:
a0:cb:fa:62:35:ba:65:9d:b3:75:31:39:5d:20:62:
f8:64:bc:36:e8:12:11:33:e4:d1:c0:42:62:ee:c9:
3e:fe:5a:df:e1:b4:b8:be:d2:80:c0:43:6c:68:e7:
dc:5d:58:2f:91:42:5d:ee:78:dc:d9:d1:f4:07:2a:
5c:96:b0:16:96:a9:4c:e0:20:19:e5:1b:9a:e5:b5:
43:63:02:6a:ab:f8:a9:17:1e:62:27:d2:45:df:cd:
ee:90:c0:c3:61:52:eb:25:02:97:2e:c2:b6:3f:6e:
9f:1f:a8:35:79:55:f4:b9:03:cf:76:bb:92:ce:db:
94:6e:a0:28:4b:ea:25:14:5f:bc:b7:84:e7:3b:e7:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E1:3F:14:F5:29:C1:37:C5:62:85:FE:10:52:10:39:1B:7F:B8:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6D99ECA477A11F0A0A83C9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.70.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7e:2f:24:98:8d:37:bc:29:e3:1a:da:78:db:71:f2:f9:51:
53:61:2a:81:25:b0:b9:8e:e9:84:8e:c3:3b:36:6a:fd:0c:1c:
6b:65:ab:b7:75:ee:69:23:d0:0f:69:d4:ac:67:a4:68:8c:a2:
41:0d:8b:6e:96:47:90:6e:87:90:83:bd:5e:31:c0:53:24:43:
cb:87:45:29:72:7b:2a:a2:87:40:0f:79:cb:f8:1f:1c:d9:f7:
07:8b:93:b3:07:8a:68:ae:1f:74:28:82:83:fb:ab:e3:2f:fe:
91:fa:19:e9:1e:a6:de:41:72:24:3a:34:b8:34:a3:82:59:46:
45:7e:7e:e5:d4:db:2d:6d:dc:7e:a2:14:e5:43:b3:74:c6:6e:
7a:c2:35:06:f6:4b:ea:81:9c:8c:77:e4:fd:e3:b1:91:e0:ce:
79:3e:ba:db:97:77:84:b2:26:6f:84:26:5f:84:5b:98:38:96:
f7:ed:1f:39:2a:27:40:f5:af:11:e9:2c:99:67:92:f1:bd:e8:
be:a6:bd:3a:5a:3a:b4:61:81:9a:9a:fb:23:2f:58:5f:61:97:
9e:a7:f9:e1:76:b3:6d:bd:08:42:52:dc:18:aa:34:3a:c4:88:
bf:2e:77:89:d6:39:6c:5f:0d:94:4b:17:26:7f:c2:07:89:33:
a4:14:56:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:19:53 2025 by rpki-client