Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7989F40566A11F08D4730E3DAE4EC9C.roa
File: F7989F40566A11F08D4730E3DAE4EC9C.roa (raw, json)
Hash identifier: sErbnPgjHjltpgsdqoRpqV7zcc0dK/Y8OUVGi1MZRjE=
Subject key identifier: EF:5C:5E:9E:F8:F9:51:35:A8:E2:32:87:46:E8:60:A4:AA:79:1B:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7989F40566A11F08D4730E3DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 11:03:07 +0000
ROA not before: Tue 01 Jul 2025 11:03:03 +0000
ROA not after: Sat 09 Aug 2025 11:03:03 +0000
asID: 6079
IP address blocks: 45.202.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90064 (0x15fd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 11:03:03 2025 GMT
Not After : Aug 9 11:03:03 2025 GMT
Subject: CN=6863c06b-01a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:70:d9:10:48:4b:7b:ee:7c:a4:d1:50:ce:
4b:e0:b5:34:ff:bb:f8:c7:dc:51:75:d3:38:b0:fc:
6a:d2:d1:69:b9:fe:64:f3:22:78:32:e1:87:17:46:
a3:7b:18:58:35:47:0c:7c:97:d2:89:98:5a:81:d2:
7c:46:4f:d0:b7:81:b5:e7:80:07:8f:1b:37:3a:f5:
99:2e:94:15:a1:1f:89:51:bb:8d:af:d4:1b:74:7c:
78:30:39:89:0d:b3:fe:32:9f:2f:63:d8:04:34:e3:
3d:21:71:b0:9b:af:3b:26:46:6d:8d:ae:79:53:8c:
b1:c5:03:b3:d6:0b:87:05:58:1e:13:9d:ce:7c:ea:
eb:a8:cd:23:ad:3e:e6:cd:79:1d:62:28:37:04:08:
35:c8:8d:8a:56:22:b9:59:7c:72:93:7f:a5:c2:51:
e0:92:f1:ba:da:42:ff:17:03:c2:2e:2f:42:56:a8:
3a:34:29:1c:d0:3f:7a:2e:c5:b3:2a:d4:87:fd:b9:
65:58:30:e1:9c:4f:5c:b4:e7:3c:10:0d:55:55:29:
4b:13:ee:f5:9d:61:80:cc:3e:0b:af:32:cd:36:2d:
5c:c4:17:85:05:75:da:c8:55:5c:a1:0d:50:8f:3e:
2c:d1:52:e8:1b:a0:2d:b4:15:6a:c3:c7:76:66:2a:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5C:5E:9E:F8:F9:51:35:A8:E2:32:87:46:E8:60:A4:AA:79:1B:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7989F40566A11F08D4730E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.114.0/24
Signature Algorithm: sha256WithRSAEncryption
98:11:d5:62:03:48:5f:20:8f:1b:76:c5:38:d4:65:c0:94:a1:
49:f4:0d:1a:de:f0:c9:18:be:94:d6:1f:cf:ba:9f:bf:22:e9:
5b:96:e4:e0:54:cb:27:32:19:ad:48:39:52:86:29:67:bb:b7:
03:48:05:29:a3:9e:66:4a:01:e8:83:aa:fe:ae:6f:da:0a:34:
4a:81:45:4a:03:43:62:97:5f:89:44:5c:94:38:2f:02:73:78:
1e:cb:b1:52:22:29:7b:54:8b:6a:28:64:90:00:73:6f:b1:5a:
c2:28:86:d2:5b:00:57:e3:f4:32:ce:25:dc:81:40:00:d3:e1:
85:8f:62:f4:0d:21:e4:d9:36:ca:8d:47:48:7e:10:ec:c5:48:
b5:32:5d:62:9d:9d:f6:00:8f:75:64:d0:b8:eb:6c:c8:8a:a6:
2e:3b:8f:dd:d5:8a:a7:53:e5:fc:d4:99:7e:c9:67:da:df:23:
ca:4d:51:a3:85:02:50:42:64:13:7c:d6:78:86:3d:1d:19:07:
18:41:07:ad:89:2a:16:fe:ab:5b:f5:a3:c7:ac:63:45:b0:ec:
bd:27:f3:60:b8:26:c8:a3:4c:6a:88:45:07:1f:63:e6:a0:7f:
34:f6:06:6d:18:3d:60:4d:07:a4:89:95:aa:77:64:fd:b8:56:
5f:1e:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:19:56 2025 by rpki-client