Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E42F2EA5B3E11F090183CCDDAE4EC9C.roa
File: 0E42F2EA5B3E11F090183CCDDAE4EC9C.roa (raw, json)
Hash identifier: XH2TAKxNfDEkK9kvXEmV2kXXTWdwDNflxBg+ao5SZ9k=
Subject key identifier: 4F:2C:93:B3:72:FC:98:1C:57:A0:41:96:9D:48:A0:02:BA:13:DB:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016318
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E42F2EA5B3E11F090183CCDDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 14:24:14 +0000
ROA not before: Mon 07 Jul 2025 14:24:08 +0000
ROA not after: Wed 13 Aug 2025 14:24:08 +0000
asID: 20326
IP address blocks: 45.202.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90904 (0x16318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 14:24:08 2025 GMT
Not After : Aug 13 14:24:08 2025 GMT
Subject: CN=686bd88e-aeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:55:85:d4:2a:b3:8e:13:06:16:22:2f:f7:f4:
b1:e7:d9:f5:5b:d4:ec:30:45:c6:54:a1:d7:21:b9:
ec:d1:ae:c9:8d:12:97:d5:9f:93:8a:48:ff:dd:cd:
a1:74:62:6b:71:87:36:73:f9:37:03:0f:98:86:fe:
0f:68:2b:cb:e8:00:d6:b4:b5:77:e8:3f:5c:27:a7:
00:72:6f:bd:6c:c1:09:7a:45:dc:7f:ac:a6:5c:d2:
19:e5:e0:f5:06:1c:8e:6a:36:0d:7e:90:44:96:7a:
5f:95:ef:99:d1:cb:c2:b0:a0:e2:46:93:ce:f2:51:
2b:36:47:f5:bf:e8:f2:20:75:0d:06:25:59:f3:1f:
4e:18:13:5b:26:75:27:04:ac:23:0e:ec:6c:4d:40:
a5:a4:f3:f0:e5:d5:50:9d:68:56:46:7c:cc:67:e6:
de:20:80:3c:30:93:38:4a:e5:a0:99:5e:7d:1c:bc:
4c:1b:09:13:93:9e:5e:fe:b8:f2:9b:bf:7a:e6:2c:
23:a2:70:57:02:fc:1a:c8:37:d7:68:ee:72:04:7a:
55:31:27:ea:71:d3:a2:ca:f9:36:74:2d:7f:d0:f8:
a0:3b:af:96:d6:57:62:97:23:48:a5:ac:a5:a0:38:
3b:a3:ec:aa:39:5f:2b:d8:88:85:99:d9:09:8b:3a:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2C:93:B3:72:FC:98:1C:57:A0:41:96:9D:48:A0:02:BA:13:DB:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E42F2EA5B3E11F090183CCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.100.0/23
Signature Algorithm: sha256WithRSAEncryption
84:75:37:e8:ea:f4:fb:d7:15:f0:0e:2e:a3:a8:34:e7:92:c9:
7d:14:6b:21:a1:f8:8e:f9:f6:18:80:03:9e:3f:8b:89:d3:f7:
02:5d:85:c6:1e:58:02:76:d0:02:30:87:e1:10:47:fe:76:f4:
47:d8:91:ea:d3:5f:fd:5d:e5:c4:2e:b4:1b:c6:72:44:e0:20:
b0:5d:1b:3f:a2:db:fe:b2:e3:22:87:34:99:b8:46:be:97:20:
00:19:e8:48:fb:96:73:2f:78:f5:f9:50:19:81:c8:95:dc:89:
7a:c5:c2:f4:91:91:37:6f:d8:d6:0b:55:43:c1:b9:34:a1:27:
e7:90:43:51:55:9c:9b:14:36:36:35:ad:c1:a0:15:c2:77:9c:
e1:56:89:c0:f1:91:39:5c:60:43:f1:99:65:ea:a1:87:05:30:
5d:6f:e6:b7:00:91:b9:b3:41:f9:51:b1:65:0d:ab:c2:10:af:
1d:d8:c0:bc:01:71:0a:3e:e1:c8:16:ac:54:45:64:f6:6b:1d:
02:e2:17:a8:47:92:a9:15:83:76:c0:d6:cd:80:42:92:58:f1:
31:f0:57:c4:ec:03:9d:31:41:82:94:92:d5:4a:11:6b:6e:c5:
89:22:21:64:61:da:db:65:cd:a9:88:e9:26:dc:e8:6e:97:e4:
e1:ff:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:34:16 2025 by rpki-client