Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C484EC8354711F0ADBA72EEDAE4EC9C.roa
File: 3C484EC8354711F0ADBA72EEDAE4EC9C.roa (raw, json)
Hash identifier: VTT/cOHYJz4lGPpgvh79/fuwgXA63xO5f0wF96CfPA4=
Subject key identifier: BA:C2:88:F5:7E:C6:F7:DF:77:88:1B:EC:50:5C:7B:EB:DC:C0:FA:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0155DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C484EC8354711F0ADBA72EEDAE4EC9C.roa
Signing time: Tue 20 May 2025 06:54:12 +0000
ROA not before: Tue 20 May 2025 06:54:08 +0000
ROA not after: Wed 18 Jun 2025 06:54:08 +0000
asID: 213248
IP address blocks: 45.192.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87518 (0x155de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 06:54:08 2025 GMT
Not After : Jun 18 06:54:08 2025 GMT
Subject: CN=682c2714-0bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:21:06:27:78:c8:31:cf:ef:7e:c0:86:ee:
98:b7:d9:41:ce:5f:ef:39:1f:1a:97:12:4a:f8:55:
33:c6:e9:f1:25:b7:7d:e6:79:41:87:c9:b7:94:40:
5f:0f:cc:7a:45:7e:28:2b:85:fa:6c:9f:6a:49:a5:
f4:ca:29:3e:cf:37:80:9e:09:d0:bb:ba:ca:40:99:
42:47:b9:04:25:96:28:3b:de:6a:23:7c:7a:fe:73:
5b:cb:4f:2e:43:fa:1f:11:94:1c:0c:18:1b:dc:91:
0c:90:d7:2e:e8:83:10:e0:91:ba:00:dc:02:3d:92:
ed:a6:ee:61:32:5c:64:8f:87:a8:75:ad:b5:4b:f3:
ca:1a:5e:79:97:0d:57:e9:a6:55:5d:3e:6a:9f:e4:
76:a6:03:d4:d9:8e:f8:41:6d:3b:c4:81:5b:22:5e:
a7:97:12:26:85:05:01:53:d6:f2:e9:47:48:1d:c9:
37:fd:b5:76:a2:66:b5:29:6e:88:66:76:91:d0:12:
80:b6:8a:75:98:74:0c:a3:fb:1f:58:d6:2b:2c:77:
04:ed:17:c4:25:bb:d5:03:d4:4b:3c:05:da:c2:e2:
39:d5:56:65:50:35:fd:b5:70:ea:d3:66:d0:22:71:
82:e1:eb:ce:90:23:ce:f8:3a:b0:7b:cb:79:cb:5c:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C2:88:F5:7E:C6:F7:DF:77:88:1B:EC:50:5C:7B:EB:DC:C0:FA:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C484EC8354711F0ADBA72EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
10:6b:a9:75:df:82:a8:e9:9e:d4:13:d2:9a:15:23:80:52:ee:
7e:25:9a:7f:86:5b:fd:6c:b3:3d:41:4d:96:a0:9b:55:dc:ad:
02:64:ce:94:2b:8b:62:ff:58:9b:12:07:2f:70:2c:61:54:2d:
dd:dc:e5:14:d3:58:1a:6f:94:2a:b0:fd:3b:99:ee:c8:8c:e7:
0e:29:c4:44:1e:a6:41:ce:46:33:c6:77:62:13:7b:bb:b6:33:
30:96:99:ef:12:5d:0d:97:01:9a:67:94:0c:48:e8:ad:cc:6a:
92:f3:0e:a5:33:cf:fa:75:a9:df:39:26:b1:e4:0c:fe:bc:1d:
9d:71:7a:3e:df:19:c9:3e:38:6d:42:8d:ac:c8:3b:c5:a0:1b:
30:85:84:4f:d0:ab:d4:b5:ad:ca:a5:4b:6a:53:b7:8d:ef:b1:
fc:a6:49:d0:c2:03:7d:52:13:16:3a:56:e6:7d:34:88:b0:04:
e1:dc:b9:d8:da:2d:79:3f:26:b1:55:2d:ff:a4:ff:cd:cd:71:
3c:d7:3b:ee:cb:ad:b1:f8:67:75:5b:67:13:cc:9c:e9:df:cb:
95:ad:f0:ad:9f:14:f7:a9:0c:d1:f8:ae:63:98:01:7c:46:55:
f2:73:77:63:1b:b7:fc:79:4b:95:d5:0d:56:6e:01:3e:46:c9:
8d:b3:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:25:22 2025 by rpki-client