Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E399865C299311F08B1193A6DAE4EC9C.roa
File: E399865C299311F08B1193A6DAE4EC9C.roa (raw, json)
Hash identifier: 0JxRpZxKS4IqO2/L+b/SH5TQ+NQDqb54JXjiT6oDSWk=
Subject key identifier: 36:7D:67:93:4F:52:40:F4:ED:E3:C3:41:5F:C8:83:E3:4A:8E:62:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015203
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E399865C299311F08B1193A6DAE4EC9C.roa
Signing time: Mon 05 May 2025 09:32:41 +0000
ROA not before: Mon 05 May 2025 09:32:36 +0000
ROA not after: Thu 10 Jul 2025 09:32:36 +0000
asID: 214049
IP address blocks: 45.194.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86531 (0x15203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 5 09:32:36 2025 GMT
Not After : Jul 10 09:32:36 2025 GMT
Subject: CN=681885b9-1716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:f0:77:54:61:49:f6:c9:11:be:4f:43:c2:
4b:58:4a:05:51:c5:1b:16:bd:39:02:12:a0:a0:5a:
7c:83:53:75:fc:d0:4c:b8:a1:d7:07:19:56:2f:86:
75:f0:04:b0:cb:3f:ff:11:7f:8c:2b:d8:0c:9e:09:
a8:26:c5:90:06:05:ee:51:3f:64:08:ca:9a:dd:26:
1d:47:bb:47:8b:c0:3b:36:ba:31:c0:9d:89:27:45:
9b:eb:c5:0f:a1:49:79:86:a3:10:24:a2:03:1a:2b:
a2:ea:53:70:a9:2c:ba:dc:48:4c:24:1a:6a:1d:cc:
b7:92:f6:9d:f4:87:f9:47:ea:65:9a:2d:33:38:a0:
d4:6c:1c:77:a6:f7:f0:bc:de:53:a5:a2:27:39:f0:
cb:5c:5a:3e:56:19:65:a9:3b:ca:e0:b2:ff:35:1c:
dd:d2:4a:0f:75:e5:a7:95:9c:12:26:5e:ed:b5:fb:
85:22:4c:98:3e:bf:6f:35:b1:35:57:64:82:30:4c:
99:11:17:3a:1a:18:ed:60:72:c4:86:df:a2:27:82:
63:a4:9c:3d:44:bc:26:4f:c3:0e:57:1c:be:4f:4b:
59:7f:ea:d6:a1:4f:6c:e5:93:29:48:be:2a:e3:60:
91:54:fe:1a:f3:76:a0:49:c4:57:1e:fa:59:af:27:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7D:67:93:4F:52:40:F4:ED:E3:C3:41:5F:C8:83:E3:4A:8E:62:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E399865C299311F08B1193A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.6.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a3:ce:d3:94:8d:4e:89:86:25:8d:3a:06:ac:03:4a:84:7f:
b0:35:97:7d:c8:5d:d3:b5:db:7c:f9:f7:b6:7c:59:de:4c:96:
63:ba:cb:4b:6b:c0:61:11:ee:62:58:9d:dd:db:62:13:b8:83:
26:e0:d4:03:36:f3:06:4a:32:41:4f:3b:0a:ff:e7:d3:7c:5d:
b4:fc:96:31:ca:f7:fe:e5:86:c5:01:6f:43:8a:76:50:16:f7:
a0:5a:79:10:30:83:83:a2:b8:a6:da:e4:2d:5b:74:8d:79:4e:
8b:0d:e5:a4:88:33:75:6b:6f:9c:46:21:99:b5:1c:b9:2e:60:
67:15:19:44:24:97:f0:8c:84:59:9e:d1:33:c5:4a:29:ec:b2:
9c:2e:06:a7:d6:87:ba:fc:14:0c:ab:9b:93:f1:94:e1:dc:05:
39:33:75:2c:47:7b:15:e7:91:74:b0:7f:9b:57:03:17:eb:fa:
24:9b:8e:07:c9:c5:06:45:ff:05:51:eb:31:e3:d4:aa:44:5b:
7d:8f:2e:7f:2a:47:04:3c:4a:f7:98:43:f3:56:4c:2b:5c:ae:
b6:50:b1:6f:f2:ea:9c:d6:21:c6:ef:df:55:80:5c:2b:1d:b8:
25:4a:a2:4a:91:22:ac:7e:ae:e9:cb:e6:be:51:4e:b5:ae:67:
5d:e9:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:19:16 2025 by rpki-client