Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/904015B0580111F0948FB8B8DAE4EC9C.roa
File: 904015B0580111F0948FB8B8DAE4EC9C.roa (raw, json)
Hash identifier: y9goS58g12e9BTFOuzCaArLVd5F0DPOG8HuYQtqZO/8=
Subject key identifier: 92:5B:4F:28:A6:71:67:3D:BC:6C:F1:4C:EA:E4:FD:6B:3F:BE:23:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01605A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/904015B0580111F0948FB8B8DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 11:33:39 +0000
ROA not before: Thu 03 Jul 2025 11:33:34 +0000
ROA not after: Fri 08 Aug 2025 11:33:34 +0000
asID: 147176
IP address blocks: 45.195.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 04:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90202 (0x1605a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 11:33:34 2025 GMT
Not After : Aug 8 11:33:34 2025 GMT
Subject: CN=68666a93-51c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:cc:ed:41:f9:f7:66:6f:0c:38:e7:67:3a:
43:a9:4b:eb:f6:8e:48:5b:be:90:d5:bc:d2:6a:ac:
cd:aa:50:44:29:2e:c6:35:83:09:cd:21:d4:30:16:
63:b1:2f:95:84:6d:d7:87:cd:a8:bd:e1:d1:60:18:
9d:68:c3:27:89:f2:ff:bb:82:59:3f:2e:44:19:b3:
b6:1b:a8:d4:fd:82:e2:8c:b3:eb:a6:86:52:9b:31:
f0:00:62:fe:e4:9b:92:43:06:d5:69:80:ed:c1:05:
5a:76:34:f5:12:c7:d9:ac:6e:cf:5e:39:71:2d:31:
8a:b9:0f:77:8e:33:1d:33:ad:9b:d2:15:41:e0:d5:
13:ec:27:94:a6:50:ae:58:8e:a5:d1:d2:1e:eb:71:
19:03:d2:e0:44:bc:37:3f:46:d5:19:ad:ce:59:e5:
c1:ae:38:e5:cf:73:ce:3b:9f:02:5e:0a:2d:b2:fb:
81:65:eb:01:2d:3e:83:dd:4b:29:b6:27:51:83:37:
d4:54:a2:a5:a7:89:79:d2:55:4f:eb:d9:5a:49:66:
20:a3:3e:7a:cd:36:86:69:06:08:2d:53:8d:ee:8d:
9f:6c:b9:f2:f0:91:99:30:44:85:02:42:8b:66:0d:
73:08:32:09:f4:97:0b:f8:b2:dd:cc:74:0a:3a:bb:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5B:4F:28:A6:71:67:3D:BC:6C:F1:4C:EA:E4:FD:6B:3F:BE:23:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/904015B0580111F0948FB8B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.152.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:8c:47:28:0b:8e:f7:63:e6:4e:92:b6:8d:ab:eb:e2:46:9b:
fb:1a:17:2b:55:28:11:78:68:4c:51:87:37:77:43:5b:ea:ee:
73:c8:f3:9f:50:b7:ec:b7:28:8f:ef:8d:0b:9a:e7:55:bb:90:
8f:3a:8a:4f:0e:d5:cb:06:9b:28:dd:5d:ce:b2:ea:4e:8a:6a:
15:42:cc:55:9c:92:56:92:e2:93:bb:2d:b8:a0:b5:22:6a:a0:
bd:cf:21:cf:fb:68:21:6a:7a:a8:c9:d3:55:e8:05:aa:f2:9d:
15:5d:0d:aa:b2:29:7d:d3:fe:bc:87:8d:03:48:f7:ec:69:3f:
65:f4:11:14:c1:04:11:7a:83:4d:1e:39:c5:65:d6:03:f0:ab:
e8:eb:12:d6:44:67:df:25:5b:d9:e3:39:7d:8a:db:ab:9b:00:
6d:73:b4:7a:ba:d1:bb:6e:6f:97:db:6b:8e:36:f1:22:46:e7:
c8:da:e1:86:25:ca:6e:74:1f:01:34:bf:71:0a:fa:9a:69:8a:
f7:99:19:2b:06:f5:14:18:5b:3b:c1:00:49:09:fc:26:19:69:
24:36:83:7c:dc:37:63:c0:6b:af:20:15:fd:89:1f:cd:95:ee:
c3:9b:eb:b8:ff:56:7e:db:e0:ab:d7:0d:4b:91:07:0d:85:dc:
56:69:12:d8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWBaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzAzMTEzMzM0WhcNMjUwODA4MTEzMzM0WjAYMRYw
FAYDVQQDEw02ODY2NmE5My01MWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAprfM7UH592ZvDDjnZzpDqUvr9o5IW76Q1bzSaqzNqlBEKS7GNYMJzSHU
MBZjsS+VhG3Xh82oveHRYBidaMMnifL/u4JZPy5EGbO2G6jU/YLijLPrpoZSmzHw
AGL+5JuSQwbVaYDtwQVadjT1EsfZrG7PXjlxLTGKuQ93jjMdM62b0hVB4NUT7CeU
plCuWI6l0dIe63EZA9LgRLw3P0bVGa3OWeXBrjjlz3POO58CXgotsvuBZesBLT6D
3UsptidRgzfUVKKlp4l50lVP69laSWYgoz56zTaGaQYILVON7o2fbLny8JGZMESF
AkKLZg1zCDIJ9JcL+LLdzHQKOrvVQwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJJb
TyimcWc9vGzxTOrk/Ws/viNdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MDQwMTVCMDU4MDExMUYwOTQ4RkI4QjhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOYMA0GCSqGSIb3DQEBCwUA
A4IBAQCKjEcoC473Y+ZOkraNq+viRpv7GhcrVSgReGhMUYc3d0Nb6u5zyPOfULfs
tyiP740LmudVu5CPOopPDtXLBpso3V3OsupOimoVQsxVnJJWkuKTuy24oLUiaqC9
zyHP+2ghanqoydNV6AWq8p0VXQ2qsil90/68h40DSPfsaT9l9BEUwQQReoNNHjnF
ZdYD8Kvo6xLWRGffJVvZ4zl9iturmwBtc7R6utG7bm+X22uONvEiRufI2uGGJcpu
dB8BNL9xCvqaaYr3mRkrBvUUGFs7wQBJCfwmGWkkNoN83DdjwGuvIBX9iR/Nle7D
m+u4/1Z+2+Cr1w1LkQcNhdxWaRLY
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:13:05 2025 by rpki-client