Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0221C75836A311F091D9BEF4DAE4EC9C.roa
File: 0221C75836A311F091D9BEF4DAE4EC9C.roa (raw, json)
Hash identifier: qx/+eKJ3L/CUI9PzQaOMOKfBl6f1fw6c6dIUWE+xEbw=
Subject key identifier: 41:CB:3C:60:99:27:4C:9D:90:F1:7E:80:25:DE:EA:9E:53:26:35:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01566D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0221C75836A311F091D9BEF4DAE4EC9C.roa
Signing time: Thu 22 May 2025 00:23:40 +0000
ROA not before: Thu 22 May 2025 00:00:33 +0000
ROA not after: Fri 20 Jun 2025 00:00:33 +0000
asID: 57043
IP address blocks: 45.198.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87661 (0x1566d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 00:00:33 2025 GMT
Not After : Jun 20 00:00:33 2025 GMT
Subject: CN=682e6e8b-cc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:33:66:de:62:a6:69:8c:e2:07:b2:c5:43:
b9:b3:52:67:ed:5c:c0:34:01:f7:d2:23:ae:e3:d7:
69:f4:24:9f:27:d8:0e:4f:3d:5d:15:6b:ac:12:cc:
3a:dd:e7:b6:bd:99:7e:bb:10:0d:04:40:a3:02:ca:
ff:21:b2:b2:43:6f:f5:98:5d:d8:70:02:6d:f7:45:
d9:53:eb:24:51:9e:cf:72:ef:22:7a:54:4f:ca:33:
c7:b0:87:6e:01:e3:bb:61:a4:24:c3:69:dc:0c:52:
4c:16:08:88:13:16:59:97:f4:af:43:ee:a6:03:fd:
79:51:b8:96:6b:f1:ec:e3:9a:fa:4b:c8:b4:cc:43:
7d:10:bd:dd:e2:93:c7:bd:e3:0f:40:54:3f:17:12:
73:7b:37:7f:f7:e6:aa:31:12:f6:ab:ea:58:90:15:
04:30:68:b1:55:62:0d:36:0e:c9:e3:59:f5:37:83:
1f:72:55:a6:8b:c8:f4:a6:2e:26:8c:33:9e:2a:30:
3b:63:2f:f3:51:61:ee:26:9b:c0:5e:59:97:76:4a:
c9:2c:62:cd:4a:d8:fe:ea:a7:49:d0:f4:d2:32:73:
65:9c:65:01:e2:00:37:af:ea:e3:1a:e6:2f:ae:ff:
33:ec:e2:9a:a5:41:b8:2c:6f:a6:2d:08:e0:c9:0b:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CB:3C:60:99:27:4C:9D:90:F1:7E:80:25:DE:EA:9E:53:26:35:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0221C75836A311F091D9BEF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.167.0/24
Signature Algorithm: sha256WithRSAEncryption
72:43:17:fd:5a:f5:19:41:9e:46:60:29:e1:59:3a:d1:c8:c3:
15:5b:43:95:bc:13:ca:a2:35:65:39:1d:50:b6:4e:fd:22:ea:
2a:eb:07:2e:45:c4:67:24:f4:06:21:4a:de:28:50:77:0c:3e:
54:7d:06:77:08:b8:a7:0c:79:7b:a3:9d:bc:5f:c4:cb:9b:7e:
63:21:68:e1:a2:75:b1:fa:77:25:63:5f:1a:26:00:ac:35:c4:
42:a9:8e:f9:8e:5e:ab:d7:e9:d9:96:58:96:15:73:3c:e6:83:
fe:63:43:fd:7f:a7:d1:1c:1b:77:51:c6:2f:81:13:8d:9b:b2:
6b:b9:53:39:b7:72:a6:94:21:9b:fe:4b:ce:66:f8:f7:b2:b6:
0e:4f:86:08:4b:5e:a2:4f:a9:a0:fd:fa:e6:44:f4:7b:31:df:
6d:5b:7f:85:f1:11:5a:28:77:1a:35:af:4e:e7:64:a1:aa:54:
16:e2:59:52:b1:10:05:25:95:44:c4:a6:5a:e1:97:35:0a:4c:
b6:9b:11:5a:b4:f1:ae:df:c1:f1:bb:d2:cf:d1:58:89:2c:14:
96:19:80:9c:0f:ca:0f:15:81:6f:e6:58:9c:90:c0:6c:c6:66:
db:f9:ff:97:f5:a7:2b:1f:7c:bc:be:88:a5:68:4b:bb:01:20:
e7:0d:da:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:44:12 2025 by rpki-client