Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB158930532C11F0B25542D3DAE4EC9C.roa
File: FB158930532C11F0B25542D3DAE4EC9C.roa (raw, json)
Hash identifier: 3gnsey07paFPR6aiS0Csxc/tTqP1lYk8W9mR0M1yLHw=
Subject key identifier: 4F:98:AC:A4:F5:E9:BF:61:9B:E9:27:EE:AA:22:7F:B7:9C:9A:FA:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB158930532C11F0B25542D3DAE4EC9C.roa
Signing time: Fri 27 Jun 2025 08:01:51 +0000
ROA not before: Fri 27 Jun 2025 08:01:46 +0000
ROA not after: Sun 03 Aug 2025 08:01:46 +0000
asID: 214143
IP address blocks: 45.192.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89859 (0x15f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 08:01:46 2025 GMT
Not After : Aug 3 08:01:46 2025 GMT
Subject: CN=685e4fef-ced2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:d9:88:32:42:8c:63:1f:52:c9:4f:c4:a6:
89:5c:a6:3d:d3:ad:c5:c9:52:b1:5f:f4:40:6f:b2:
a6:4f:89:35:51:14:68:12:f0:74:83:2b:33:8a:77:
05:a2:7b:50:30:c5:ec:c8:5e:e8:46:db:dd:9d:bb:
1f:16:14:66:84:69:cd:11:ea:37:ca:c8:c8:63:5f:
84:d0:29:fe:cc:c0:0f:6b:5d:c4:31:1d:4f:02:36:
66:ae:b9:32:07:28:59:9a:e8:c8:28:25:b3:60:39:
28:3b:dd:27:02:1b:13:6c:59:41:ee:29:ab:45:04:
26:e8:34:45:de:01:b2:05:79:79:73:ab:ad:3b:35:
97:9c:5d:ce:5c:44:95:14:72:f0:79:d6:21:58:d2:
dc:2b:3d:41:ba:83:45:42:ab:09:ce:9a:7f:c8:e1:
dc:78:f9:ef:71:ab:86:c5:da:3a:a7:e4:1c:b6:3d:
60:49:43:84:8f:ba:6e:4c:f3:20:72:a1:16:b2:49:
5d:7d:ee:09:e6:af:c2:fc:77:7d:ad:59:79:2f:1a:
eb:bf:07:04:aa:c9:a7:e4:77:91:38:55:9d:cc:68:
f4:26:d7:dd:e2:f0:6a:2b:ba:59:77:a7:41:ab:3a:
f6:06:bb:10:24:c3:1e:dd:88:ad:1f:3a:42:d6:69:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:98:AC:A4:F5:E9:BF:61:9B:E9:27:EE:AA:22:7F:B7:9C:9A:FA:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB158930532C11F0B25542D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.235.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f5:33:ba:b5:5c:c7:98:26:41:61:d5:40:85:c7:3b:ec:bb:
75:7f:4d:df:8d:a0:22:93:59:5c:d5:b1:cd:9e:68:b2:45:96:
5b:75:87:6d:15:6d:51:a5:55:14:62:b2:47:80:4c:c5:49:09:
64:96:b8:d6:f3:56:ab:ca:0b:08:b6:0d:26:ba:5a:b7:1c:10:
56:72:ea:c0:2d:cc:d7:f3:cc:5d:f9:c2:da:0d:0c:f6:34:fd:
63:45:5e:ae:b2:cd:4e:38:cb:a4:2e:01:c4:5f:98:72:d1:cd:
fb:20:67:bd:1f:41:3f:1c:f7:61:c7:80:0b:59:0e:05:75:79:
b1:f6:21:3f:d1:a2:df:fc:26:89:e3:2a:8b:12:38:d2:6d:27:
68:29:62:6a:c9:34:2b:19:04:7e:b4:3b:ec:3c:52:0b:93:70:
ee:1e:62:8c:59:88:b6:25:9d:14:60:8f:e8:3b:5e:cc:d6:1b:
c7:68:00:77:3e:1a:3e:21:bd:02:0e:4d:e8:c3:89:2d:4c:62:
1a:e6:4a:e0:a5:eb:16:c9:82:03:0d:94:54:e7:1e:4e:fa:aa:
cf:55:b8:d2:85:16:2a:0d:4c:06:e8:b9:25:71:df:e4:80:90:
06:00:87:3f:c9:c3:b5:7a:5c:63:1f:8a:cd:f4:ca:3a:23:cc:
04:b3:e4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:24 2025 by rpki-client