Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B5F73923D4C11F08A865DE7DAE4EC9C.roa
File: 0B5F73923D4C11F08A865DE7DAE4EC9C.roa (raw, json)
Hash identifier: 0L897apE/ZKwv3UIT5H4c6tC8+4v31Yqaei4UEkrTpE=
Subject key identifier: 16:54:F6:01:F8:D1:EE:09:3C:98:9F:6A:91:EC:FD:15:D7:12:3D:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0158CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B5F73923D4C11F08A865DE7DAE4EC9C.roa
Signing time: Fri 30 May 2025 11:48:47 +0000
ROA not before: Fri 30 May 2025 11:48:42 +0000
ROA not after: Mon 09 Jun 2025 11:48:42 +0000
asID: 400619
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88269 (0x158cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 11:48:42 2025 GMT
Not After : Jun 9 11:48:42 2025 GMT
Subject: CN=68399b1f-21ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:4e:98:56:b7:f8:da:aa:20:31:1e:4a:b9:
27:b3:db:c7:c7:f4:1f:77:49:d2:46:b7:c3:7d:55:
84:68:50:0d:d9:1d:ce:3f:c7:4d:f7:f5:34:14:b1:
6b:c9:a4:9c:a0:ec:55:66:d3:f9:5d:38:ee:f0:54:
5a:50:13:91:86:1b:75:af:ae:0c:c4:37:a0:9f:fe:
a5:cc:85:fc:05:74:87:2b:d0:27:fd:f8:03:28:9b:
5b:40:c7:32:5d:c7:a7:73:e6:dc:60:46:dd:e3:ee:
3b:5f:9c:dc:17:b9:e9:11:7f:82:9d:59:c3:1c:85:
6a:ab:c0:c0:7e:ee:b8:d7:9d:60:41:19:d8:1a:9f:
87:78:c2:5e:83:41:8c:2c:53:62:fb:ec:cc:55:8f:
86:7b:4f:e4:bc:26:94:76:95:5d:ba:81:5c:a3:f0:
d3:3b:e0:25:b7:a8:c0:98:56:5b:06:83:9b:cc:c0:
1b:39:6e:52:0a:c8:8c:d3:41:e7:20:32:77:11:29:
a0:70:ac:8f:23:61:be:50:c2:e8:09:b0:58:06:e5:
01:cf:db:56:10:36:57:22:5a:26:75:78:8a:26:fc:
e8:6b:ad:f8:3f:f4:30:f2:7b:67:00:ae:c1:97:9e:
eb:95:80:1a:a4:d3:a0:80:2f:14:4c:96:9c:1f:b1:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:54:F6:01:F8:D1:EE:09:3C:98:9F:6A:91:EC:FD:15:D7:12:3D:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B5F73923D4C11F08A865DE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:f6:3d:f1:5d:4f:1c:69:77:d8:a1:cc:c8:2b:39:44:7e:41:
05:12:a5:ee:46:7e:48:43:46:5f:a3:87:ad:37:33:b9:0e:2c:
a2:bb:be:74:cf:4e:aa:de:f5:58:4f:0b:22:2b:0c:32:30:79:
ae:a8:8a:b2:09:7a:a2:11:a7:ab:a7:a0:13:61:25:57:87:e5:
07:22:8d:03:f7:a2:2e:26:2b:09:67:6f:e0:c9:66:9e:ef:9c:
0a:15:3a:08:ea:9b:9e:d1:aa:c9:19:e6:d4:cd:e4:a4:26:77:
3b:3a:a2:db:44:4a:6c:04:de:e1:84:11:a9:6e:ec:b9:f4:8f:
99:33:ca:b9:99:50:e2:e7:3c:02:cf:09:34:47:6c:e2:1e:ad:
e6:3d:22:eb:d8:ff:b7:e7:74:78:16:cd:58:6c:ff:6e:ff:e0:
3f:ee:0a:03:29:00:59:9c:b6:47:7a:50:0c:0e:ea:4f:09:cd:
c6:51:3a:dd:84:33:ed:f9:bc:9a:da:3b:94:dd:22:e6:c2:bc:
cc:ef:72:a8:ae:05:71:2a:da:dd:87:32:9f:d6:45:33:7e:6e:
b3:9f:14:05:c0:bd:46:d0:9d:84:97:8b:6a:06:f1:1a:41:5a:
68:7b:b4:75:a4:82:4c:76:7b:f7:a3:26:5d:ca:3b:da:0f:ef:
30:54:ec:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:26:31 2025 by rpki-client