Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/124072D82CC611F0B8194786DAE4EC9C.roa
File: 124072D82CC611F0B8194786DAE4EC9C.roa (raw, json)
Hash identifier: MRVbaXe3dXMBLkADqL6Tgv8/67e64z4R3/u+a+/d3nU=
Subject key identifier: A3:E9:F0:95:E1:5E:13:78:DF:87:92:99:38:8C:2E:A3:96:CC:9C:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01531F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/124072D82CC611F0B8194786DAE4EC9C.roa
Signing time: Fri 09 May 2025 11:09:27 +0000
ROA not before: Fri 09 May 2025 11:09:22 +0000
ROA not after: Sun 09 Nov 2025 11:09:22 +0000
asID: 17561
IP address blocks: 45.195.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86815 (0x1531f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 11:09:22 2025 GMT
Not After : Nov 9 11:09:22 2025 GMT
Subject: CN=681de267-b4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:e5:34:5f:58:de:c6:92:31:fc:50:74:0d:
d2:ca:79:f7:0d:0f:d3:37:47:5e:93:bc:91:d7:01:
0d:11:1c:5b:96:5d:3e:6f:23:d7:32:41:1a:e3:93:
6e:43:0d:f2:84:65:5e:13:93:2c:ca:03:67:ec:59:
42:78:2c:f1:06:91:82:19:e4:b5:4d:a7:ff:cb:6e:
8a:b1:54:19:7d:61:0d:31:1a:4d:77:da:63:06:78:
30:32:29:6b:a4:03:3f:5a:fa:b2:97:c8:42:c9:d1:
e6:6c:75:85:e2:44:04:65:9b:0b:c1:23:3e:02:19:
ac:5b:41:f4:07:20:1a:f7:3c:1a:46:c5:ce:c6:f5:
c7:2a:22:66:e0:79:e4:90:e5:da:48:2e:a8:34:86:
08:bc:fc:77:4b:dc:75:cb:a9:70:f9:e1:31:7c:6b:
88:39:8f:42:5e:9e:6d:76:b6:fd:7e:ca:90:41:c7:
31:5c:3a:84:f1:bc:d4:c4:a0:c7:31:b3:f8:76:fa:
ea:ac:39:a6:16:a5:27:9d:a3:c0:20:77:92:12:12:
ce:c3:08:f5:a0:b2:bb:43:15:64:24:66:b3:3d:66:
4a:e6:4a:1e:af:eb:d0:f6:ee:5e:34:f7:d8:2a:f1:
2d:e1:82:6c:16:66:e6:f1:d9:d2:b4:9e:bf:2f:bd:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:F0:95:E1:5E:13:78:DF:87:92:99:38:8C:2E:A3:96:CC:9C:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/124072D82CC611F0B8194786DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.3.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:8b:3a:c3:7b:e5:51:d1:da:69:19:a7:b7:5c:57:fd:43:a1:
a1:84:45:4f:ff:e4:64:cf:ff:a9:da:3f:6d:e7:ef:bf:cb:af:
d0:3d:0b:a2:c5:50:b5:b0:43:ea:85:3d:44:b8:50:32:3c:1d:
2d:af:5c:51:a2:be:c7:b3:75:fb:56:4e:46:f6:68:d4:25:f1:
6c:32:be:f1:a2:3e:f9:7f:6d:4b:92:dd:46:9a:43:fd:70:0e:
33:f8:69:00:d4:88:1a:94:c6:51:91:94:27:92:31:58:83:0d:
64:16:d4:ec:a9:24:20:95:7f:9c:b6:0b:44:ea:e9:88:23:6f:
b3:8b:c6:87:c1:49:8d:2a:a1:2a:74:b7:91:05:af:fa:5f:ae:
d3:64:c8:63:76:76:1b:80:49:91:e2:09:2f:0d:00:5e:17:c5:
4b:f6:40:12:a8:99:3e:d9:d7:af:b4:b0:35:33:3e:31:87:45:
d5:2d:d1:bf:b0:97:eb:b4:e5:15:de:d0:19:20:ab:f9:55:2c:
4c:d4:5f:09:fd:f4:0e:49:67:61:bd:83:c2:b1:cf:31:e4:4f:
77:b2:c5:4f:6b:a3:40:f4:db:62:7d:b0:55:63:16:25:7d:71:
cd:0f:d8:33:2d:91:b8:8c:9e:d3:d3:93:a7:69:cf:4f:c1:da:
63:f9:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:46:40 2025 by rpki-client