Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21E5A9303F9811F0A502D6D9DAE4EC9C.roa
File: 21E5A9303F9811F0A502D6D9DAE4EC9C.roa (raw, json)
Hash identifier: kXCakyr18RpRt4RTMpP7ajXhD/p3meRn772dgdRtp54=
Subject key identifier: 01:7F:D2:9F:B9:C6:A4:9A:21:53:9B:BC:75:2D:BD:D2:39:14:C2:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015971
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21E5A9303F9811F0A502D6D9DAE4EC9C.roa
Signing time: Mon 02 Jun 2025 09:58:29 +0000
ROA not before: Mon 02 Jun 2025 09:58:24 +0000
ROA not after: Tue 15 Jul 2025 09:58:24 +0000
asID: 396356
IP address blocks: 45.203.165.0/24 maxlen: 24
45.203.166.0/23 maxlen: 24
45.203.168.0/21 maxlen: 24
45.203.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88433 (0x15971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 09:58:24 2025 GMT
Not After : Jul 15 09:58:24 2025 GMT
Subject: CN=683d75c5-4e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:b5:d4:5e:22:64:10:7b:41:12:73:82:50:
72:d1:e2:62:10:7a:af:60:b4:66:dd:4d:bb:7a:f0:
2d:d7:4d:16:2a:88:dc:bd:3d:3e:3f:4e:45:4a:53:
f5:a3:1a:79:3b:53:31:61:92:85:b4:9b:16:26:6a:
62:ca:ac:7b:ea:f7:74:e1:28:93:be:71:bb:fe:8b:
76:44:4f:6d:29:45:d6:72:67:68:04:32:12:c3:79:
26:b3:87:92:9a:ab:5e:9d:03:06:8b:02:d4:a2:31:
c5:4d:95:ce:22:0a:73:1b:06:4c:45:aa:f6:71:11:
fe:41:47:b2:9c:6d:bb:a7:fc:64:0a:49:67:1a:f2:
9e:b1:da:4f:dd:73:bb:84:6c:bd:ec:1f:df:f7:65:
35:4a:b2:c8:26:c3:37:49:fe:5f:d3:09:ac:0f:38:
dd:70:91:5f:d8:80:6a:64:65:a1:76:b5:1f:43:41:
88:e0:f7:53:b8:19:ea:64:5d:84:61:69:57:e6:05:
c3:d3:75:a6:4c:e8:52:45:7a:6b:54:16:ca:34:5c:
5e:e7:90:4b:77:9c:50:28:df:55:53:4f:27:3c:70:
f6:6f:da:92:a3:90:de:1d:e0:b4:f9:bd:58:77:7d:
a3:78:5a:32:bb:45:15:2b:ad:2b:c5:90:a9:64:f1:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7F:D2:9F:B9:C6:A4:9A:21:53:9B:BC:75:2D:BD:D2:39:14:C2:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21E5A9303F9811F0A502D6D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.165.0-45.203.191.255
Signature Algorithm: sha256WithRSAEncryption
3b:3b:ec:44:e2:02:f9:64:04:3a:37:04:e5:35:8d:b0:b7:72:
93:4a:e7:22:94:45:06:6f:02:99:79:35:3e:ab:e4:a9:f2:c7:
47:2a:85:67:3a:06:5d:de:b6:ce:16:4c:f8:18:ba:58:4a:12:
a5:37:26:d2:09:f3:85:3f:75:3f:82:a7:4e:9d:a5:3e:52:d5:
b5:96:30:d9:4e:31:2c:84:70:16:d4:2a:f6:85:b5:4f:1a:91:
45:66:a9:f0:f7:96:34:eb:13:98:c4:7d:18:62:f2:0c:99:10:
6f:ab:52:2a:d3:95:6c:f5:ff:b1:49:25:d4:fe:2f:b0:cb:a5:
c0:a3:ec:96:7e:27:91:22:71:35:dc:d2:8e:22:38:71:2b:ba:
63:65:75:52:fa:3d:80:cf:86:b2:15:1a:56:09:fb:b9:05:04:
74:21:6d:01:68:6a:24:e5:be:bd:82:12:e8:7d:8e:66:41:0b:
e5:c0:c2:c9:14:b8:75:e9:ac:67:cb:ee:8b:7c:43:85:17:81:
04:c5:6d:7a:db:46:02:ac:1d:68:9f:d0:c9:46:a8:ac:e6:24:
41:24:69:f6:11:74:b4:30:7a:4e:8b:e9:77:c0:ea:ad:de:7e:
26:df:8d:b0:bd:a3:26:d1:34:c8:bf:8b:4d:46:70:d3:56:e2:
e6:2f:cc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:19:42 2025 by rpki-client