Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/1AD0D08C4D5F11F08E482186DAE4EC9C.roa
File: 1AD0D08C4D5F11F08E482186DAE4EC9C.roa (raw, json)
Hash identifier: OhoSn83syBewwYcLzVXxyO/+vTXDKKmwuhAAzmLRplo=
Subject key identifier: AC:E2:FD:86:A9:83:58:6B:2E:CF:7B:80:61:99:D2:B0:95:FF:96:2A
Certificate issuer: /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Certificate serial: 08DB
Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
Authority info access: rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/1AD0D08C4D5F11F08E482186DAE4EC9C.roa
Signing time: Thu 19 Jun 2025 22:45:32 +0000
ROA not before: Fri 20 Jun 2025 22:45:27 +0000
ROA not after: Wed 20 Jun 2035 22:45:27 +0000
asID: 37049
IP address blocks: 165.16.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267 (0x8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AR, serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Validity
Not Before: Jun 20 22:45:27 2025 GMT
Not After : Jun 20 22:45:27 2035 GMT
Subject: CN=6854930c-04b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:58:13:15:90:50:df:c5:10:21:27:46:eb:
57:70:82:9d:3f:19:a4:4a:95:16:ae:63:52:a8:b9:
56:2a:5b:fd:c4:67:ad:c0:32:b1:70:75:fc:93:25:
76:db:1b:cb:55:6a:23:2c:0a:db:4d:e7:72:08:d5:
dd:9f:48:33:37:ac:e6:8d:f6:f3:96:7c:8f:92:a8:
cb:47:61:8e:42:dc:88:f9:b2:ed:53:e6:0c:45:85:
af:ce:8e:f7:fa:dd:a9:f2:5c:19:57:3b:bd:7f:41:
91:e1:a5:45:a3:cf:40:15:a6:52:71:c2:71:b4:96:
ef:86:9b:2b:a8:81:50:e3:d9:d1:5c:b4:b6:30:16:
c9:91:93:96:39:3b:c9:a1:e8:5f:ab:0a:8c:96:ed:
ff:01:55:ba:a5:87:53:cb:17:14:a1:ce:4a:c5:d6:
e6:b3:3d:d1:9a:79:ed:a7:56:7d:52:37:e5:9c:a6:
4f:90:1c:67:7d:49:e9:8e:c1:f1:e7:e6:64:1d:df:
15:93:b3:97:2c:15:81:0d:aa:39:db:ee:ed:80:f8:
34:db:2a:dc:6a:e1:df:94:55:b1:7b:a8:b0:b3:9f:
e5:8c:e8:be:ef:2d:7f:40:85:5b:aa:e6:d3:6d:3a:
09:c2:9e:66:53:92:74:97:ef:0d:05:18:ed:26:51:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E2:FD:86:A9:83:58:6B:2E:CF:7B:80:61:99:D2:B0:95:FF:96:2A
X509v3 Authority Key Identifier:
keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/1AD0D08C4D5F11F08E482186DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.16.162.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ad:bf:ae:18:b8:89:0a:d5:78:c4:9c:43:5f:6a:f7:bd:4f:
5e:31:9a:66:e3:6c:a8:09:31:e0:2e:a2:7c:8b:e0:fa:43:a1:
a5:36:11:8d:2f:d2:9f:36:e4:bf:7e:82:24:75:89:63:f6:99:
0b:a9:7d:16:8d:ab:ba:15:0f:5c:3d:9a:bc:a8:ba:f6:94:86:
ab:df:7a:94:4f:1a:25:b7:c8:9b:3b:da:44:21:0a:a1:16:dd:
4e:82:6e:9d:63:3e:ef:94:6f:bd:53:90:c1:72:f2:0d:52:91:
8a:b5:14:b6:b3:62:d2:06:ed:63:d1:f5:ce:3b:70:4e:45:14:
87:bb:c2:04:26:12:3f:db:82:53:38:f5:3c:e9:47:12:f4:0f:
32:37:32:e5:94:57:03:ff:78:97:6b:3f:c8:ca:f2:2f:f0:97:
6d:aa:84:80:e1:70:c6:42:9b:00:da:b4:8f:27:fd:31:1f:b0:
18:d3:9e:a8:2c:e5:e5:fa:15:46:e8:1c:7b:37:ed:01:3f:55:
61:03:2c:91:eb:ce:db:fe:a0:e6:92:ab:12:63:72:8d:84:40:
48:ac:24:3c:71:25:71:49:e0:cb:2e:7c:d9:0d:71:65:6c:42:
e6:e0:44:53:d7:61:37:ce:86:c5:fb:5a:89:a3:95:f9:a6:92:
02:0f:cb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:51:15 2025 by rpki-client