Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC6E7DF028C011F083BB7CA4DAE4EC9C.roa
File: FC6E7DF028C011F083BB7CA4DAE4EC9C.roa (raw, json)
Hash identifier: VEnCI9lAEdBri7Sink0Rc79rTaf1BV6qGnMzt/iKIAE=
Subject key identifier: FD:9F:37:D2:DE:73:00:2E:7D:55:2C:81:1C:FF:28:78:8D:39:98:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0151D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC6E7DF028C011F083BB7CA4DAE4EC9C.roa
Signing time: Sun 04 May 2025 08:22:59 +0000
ROA not before: Sun 04 May 2025 08:22:54 +0000
ROA not after: Tue 10 Jun 2025 08:22:54 +0000
asID: 214808
IP address blocks: 45.192.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86480 (0x151d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 4 08:22:54 2025 GMT
Not After : Jun 10 08:22:54 2025 GMT
Subject: CN=681723e2-4d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:2b:5d:85:83:01:45:16:38:65:78:98:d1:
e9:57:6b:f0:f5:31:bb:93:13:94:10:7a:34:ca:66:
20:3c:b1:20:bb:53:71:43:66:66:b5:06:55:b0:4c:
54:66:98:c8:68:2c:a0:56:7e:c4:9b:b7:c8:54:59:
ef:3f:d9:a9:4e:b9:aa:f2:40:a6:db:f8:e1:b7:58:
58:af:03:f6:06:0c:dc:f4:ea:6f:f4:85:78:4b:48:
34:23:d3:a6:f2:a4:ef:5e:9a:2e:8b:3a:8f:13:a7:
cf:b5:23:b7:58:db:75:3f:70:c6:3a:b1:03:76:ac:
2c:57:70:8a:68:7a:e4:00:43:86:b3:f6:d4:32:e8:
0f:25:52:12:4b:a3:0d:93:cf:f2:08:58:9c:de:7a:
3b:ef:c4:6c:ed:bc:9b:ef:03:c8:ef:81:b3:8b:57:
e4:3d:8a:1e:05:03:5d:c3:b0:d8:2c:dd:77:47:02:
bf:7b:00:f5:10:e2:7e:24:5e:40:20:8e:e8:7f:4a:
19:ab:7b:ed:83:30:5c:3d:8f:44:38:ac:73:bb:de:
d4:f5:a3:e1:b6:37:ba:2d:1b:3a:50:69:df:35:6c:
b3:af:8f:20:ea:27:95:77:e0:0d:15:fe:8e:6e:b4:
ee:de:df:ca:3c:e5:79:51:d4:09:1c:65:6f:45:c3:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9F:37:D2:DE:73:00:2E:7D:55:2C:81:1C:FF:28:78:8D:39:98:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC6E7DF028C011F083BB7CA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.242.0/23
Signature Algorithm: sha256WithRSAEncryption
73:6d:58:db:a6:21:53:58:f1:3e:d3:ad:eb:34:b3:16:2e:73:
7c:6c:98:3d:c9:1e:52:ae:f9:fd:bb:a4:20:f8:55:5e:8f:56:
a0:67:82:a8:c1:85:67:c8:6c:cf:5b:8e:23:3c:5e:9b:9d:a9:
8a:14:9d:93:cf:84:93:7d:7f:74:11:5d:7e:7e:3e:a2:3a:7d:
96:fd:87:b2:36:82:3c:94:03:94:5b:35:56:ee:17:a4:2f:09:
70:93:bf:8c:ae:47:65:02:6d:14:4c:60:7c:a4:75:00:15:4b:
79:87:d1:f1:9b:4a:16:3d:ea:40:16:23:6d:6d:ee:2e:ff:51:
21:a7:ba:00:a5:ac:5a:c1:a8:a5:4c:5e:b7:40:4b:14:32:83:
79:51:0e:82:b2:9a:3b:bb:71:d8:04:c0:56:4e:b8:03:c4:45:
5e:d6:3b:01:45:4e:c6:45:8c:12:ae:1a:57:b5:b5:3d:cc:3d:
08:2f:2b:fd:28:d6:2f:4d:10:9b:7d:a4:25:c3:5b:0f:ed:b5:
7b:1a:8f:f7:06:a9:77:2b:41:36:66:da:15:a7:b0:25:73:ad:
55:c6:e9:47:16:88:43:49:48:dd:e4:e7:6d:87:d2:61:0c:42:
8c:75:26:cc:dd:0e:f1:79:83:bd:fa:65:68:2e:52:e7:31:e0:
5b:fc:71:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:36:58 2025 by rpki-client