Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/4601A8304D5F11F0AA717286DAE4EC9C.roa
File: 4601A8304D5F11F0AA717286DAE4EC9C.roa (raw, json)
Hash identifier: O60MwYsiZd+UlKceOJ85IOxK7Q1+As/RwsVdr1Ykpjc=
Subject key identifier: 80:0A:84:13:73:61:D1:A9:91:69:ED:6F:F5:3B:E6:1D:CF:5A:77:31
Certificate issuer: /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Certificate serial: 08DD
Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
Authority info access: rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/4601A8304D5F11F0AA717286DAE4EC9C.roa
Signing time: Thu 19 Jun 2025 22:46:44 +0000
ROA not before: Fri 20 Jun 2025 22:46:40 +0000
ROA not after: Wed 20 Jun 2035 22:46:40 +0000
asID: 37049
IP address blocks: 165.16.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2269 (0x8dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AR, serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Validity
Not Before: Jun 20 22:46:40 2025 GMT
Not After : Jun 20 22:46:40 2035 GMT
Subject: CN=68549354-cdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:69:8c:e7:f9:16:b5:91:62:05:f9:6d:81:
6c:a9:33:be:c3:ab:11:36:1e:15:5e:dc:25:32:a7:
34:a0:e0:84:54:03:68:8d:d4:aa:be:01:68:69:48:
16:c5:58:a1:42:53:fc:ac:57:ab:f1:32:d1:83:ee:
98:84:e6:e7:61:03:eb:53:39:dc:4a:e8:e1:78:07:
67:c1:a7:4b:20:eb:1e:7a:ef:aa:7a:5c:c6:b5:38:
18:9f:5c:e6:17:11:33:df:88:89:8d:b7:e8:63:de:
68:b7:26:c6:cc:c7:b3:5a:bc:49:b8:54:88:75:1c:
95:11:a4:a9:9e:df:12:16:17:b1:a1:42:9a:82:2c:
c5:86:fa:5e:56:c3:2a:2d:81:39:da:be:db:34:8c:
5b:5e:30:13:8e:90:85:42:a8:e4:97:8c:86:16:2c:
98:fe:eb:7f:1b:0f:27:3f:42:98:a2:dd:95:93:5e:
3b:94:a3:39:d0:78:64:2a:2b:f6:4f:a4:b3:64:aa:
26:4d:a6:03:67:2e:32:bc:4d:b4:91:92:d1:b7:11:
d1:c7:35:6c:b2:2c:a7:8e:1e:06:4f:16:eb:dc:41:
4c:fd:43:eb:d4:fb:b1:14:1d:aa:2a:2f:ab:f2:b2:
14:fe:83:91:88:1a:4f:b6:4f:9b:54:17:b4:9e:2d:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0A:84:13:73:61:D1:A9:91:69:ED:6F:F5:3B:E6:1D:CF:5A:77:31
X509v3 Authority Key Identifier:
keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/4601A8304D5F11F0AA717286DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.16.163.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0b:a1:b7:58:8c:13:4b:b2:f4:fb:55:df:2a:de:4a:47:d6:
85:78:11:20:73:92:28:55:ae:a8:d2:7a:13:7a:eb:84:0b:16:
9b:58:7f:ce:d6:9d:5e:21:14:7e:56:3d:a7:1d:46:d6:11:d8:
1d:b3:5d:5f:f7:fd:18:1d:da:d8:c5:30:14:85:c3:87:6b:07:
0d:9f:cc:e5:e4:72:a4:f7:41:fd:19:d0:d0:33:68:cf:56:27:
e2:c0:36:f4:08:61:61:c9:b5:0b:2e:be:33:17:9b:d2:0c:3c:
98:e7:dd:be:56:61:d8:b1:24:09:c9:93:75:ff:0e:49:9f:3b:
73:5a:e7:ed:01:14:3f:8a:62:d0:d2:38:ff:67:c5:50:3e:39:
e2:73:59:56:31:a2:54:b3:e4:93:d7:34:e9:de:30:a0:a4:24:
bd:48:c6:0b:6e:f4:6c:84:5f:15:2c:6e:ad:df:81:5d:8a:6f:
55:53:c7:ed:bb:98:ae:42:1a:8f:6f:3b:c4:6e:a6:14:5e:6e:
70:a2:a5:7f:b2:22:5b:1d:79:6e:0f:fc:06:4d:0c:b1:50:1b:
c1:20:03:e8:e7:15:7f:87:f4:02:3e:1e:06:1c:aa:80:cd:7d:
8f:b8:31:95:45:55:a5:fd:ad:cc:d1:1e:3d:3f:9f:64:a3:03:
f5:82:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:40:47 2025 by rpki-client