Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C57B8B22CBD11F0AD69DCCADAE4EC9C.roa
File: 0C57B8B22CBD11F0AD69DCCADAE4EC9C.roa (raw, json)
Hash identifier: 2DW/AXseYCD0YzmlWZg1XztggCOlFO3TORcF3BbpDKw=
Subject key identifier: F3:DA:06:23:B9:38:9D:27:9C:AD:A6:AB:78:26:5D:26:EB:14:93:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015313
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C57B8B22CBD11F0AD69DCCADAE4EC9C.roa
Signing time: Fri 09 May 2025 10:04:52 +0000
ROA not before: Fri 09 May 2025 10:04:47 +0000
ROA not after: Thu 12 Jun 2025 10:04:47 +0000
asID: 401075
IP address blocks: 45.207.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86803 (0x15313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 10:04:47 2025 GMT
Not After : Jun 12 10:04:47 2025 GMT
Subject: CN=681dd344-aeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:cd:fb:cf:61:3f:61:a0:e0:88:3b:f3:85:
cc:62:8f:e8:1f:03:67:ab:73:bd:c7:82:af:1e:c3:
36:f7:d8:6c:c0:2a:5d:18:eb:ae:aa:35:8d:01:f2:
29:39:23:51:16:32:79:9e:1e:24:0c:f3:e3:5e:e4:
0d:54:d6:c4:4b:f0:44:44:a6:b3:f5:07:de:e6:b3:
2b:9f:65:6d:cc:8d:65:ee:97:9d:ca:93:8f:e9:b7:
74:cf:c9:86:eb:9c:35:06:60:3e:9a:73:c9:23:10:
e6:dc:79:ba:dd:38:d5:02:4b:63:23:b6:b6:6a:70:
c2:52:b0:65:fa:a9:2b:ff:83:f4:04:57:1c:60:44:
8d:df:70:09:43:0f:b8:46:ea:1c:7e:94:7d:da:86:
54:c3:e7:09:6e:4c:4e:20:9d:1f:e9:ff:b2:e0:6b:
b6:07:aa:06:3f:73:ca:7e:a4:55:68:db:ee:c4:30:
9a:b7:4d:9a:30:a0:17:60:e4:19:b3:00:b4:44:a0:
0e:97:8f:76:b7:ff:d5:f1:05:56:94:99:62:a5:72:
d7:cf:1f:03:c4:b7:45:80:b8:6b:11:98:b2:8f:25:
c2:4f:56:4b:1f:14:0d:08:3f:d0:12:b5:ba:df:52:
86:95:2f:47:56:7c:87:6c:60:60:c1:78:a2:ae:aa:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DA:06:23:B9:38:9D:27:9C:AD:A6:AB:78:26:5D:26:EB:14:93:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C57B8B22CBD11F0AD69DCCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.217.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3c:bd:ca:31:84:42:b7:59:2f:e4:9e:52:90:f1:e5:10:a8:
a5:71:68:93:64:e1:98:59:0f:f4:4f:5d:70:f9:be:3a:57:47:
d9:1b:c9:e1:31:92:f2:ba:9b:86:bc:2a:84:d1:80:53:46:cf:
82:ef:26:07:b4:bb:a1:92:4c:a3:5a:c6:db:bf:ca:dc:48:2f:
06:8b:24:dd:bf:ab:1e:8c:b9:58:88:c7:88:be:03:43:bb:bd:
ac:f5:1c:a4:c8:ee:27:22:14:c6:42:ac:f5:b8:42:e5:d3:8a:
d1:8e:71:53:4f:bc:6c:31:d2:cd:a8:f8:62:c6:ad:fb:2a:7c:
97:a5:0c:8e:8b:ad:fe:62:2d:2a:2d:63:46:d9:ae:30:bd:60:
73:de:6c:ee:58:8b:52:8e:01:06:76:f2:38:8d:70:85:0d:96:
67:ee:8c:dd:cb:8c:48:e3:ef:74:ff:4a:d3:ab:fa:71:e0:b2:
3f:6b:e0:75:e2:54:8e:4f:d9:9c:87:31:e2:44:72:3b:56:fa:
03:e9:57:75:14:e7:86:f9:1d:fe:8d:ac:dc:ea:52:4c:4e:1e:
bb:a6:e9:cf:6b:38:da:7d:44:b3:82:46:d0:68:dd:d1:de:04:
7b:47:de:68:91:c1:4f:1a:6c:3c:d5:4a:a5:99:f2:75:3b:e6:
11:92:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:32:16 2025 by rpki-client