Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41AA368A2CDF11F0863A58ACDAE4EC9C.roa
File: 41AA368A2CDF11F0863A58ACDAE4EC9C.roa (raw, json)
Hash identifier: jxHYa8Td1b0gyUHiYnPWKC4OngW4cfBRLGak0f74/YY=
Subject key identifier: 83:05:10:7A:3F:69:00:28:6A:4E:81:3A:7D:63:28:4A:D7:F2:21:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015329
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41AA368A2CDF11F0863A58ACDAE4EC9C.roa
Signing time: Fri 09 May 2025 14:09:44 +0000
ROA not before: Fri 09 May 2025 14:09:39 +0000
ROA not after: Sun 15 Jun 2025 14:09:39 +0000
asID: 395793
IP address blocks: 45.194.1.0/24 maxlen: 24
45.194.4.0/24 maxlen: 24
45.194.5.0/24 maxlen: 24
45.195.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86825 (0x15329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 14:09:39 2025 GMT
Not After : Jun 15 14:09:39 2025 GMT
Subject: CN=681e0ca8-732c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:4c:cd:a1:90:ae:7e:ad:bf:b9:f9:2b:03:
8e:3c:20:6b:43:50:52:84:3a:23:63:a0:4c:46:62:
ef:e1:a0:6a:be:6b:4e:32:78:be:aa:00:36:87:f4:
c2:d3:df:bf:4a:64:af:0d:cc:6f:45:df:62:3e:bb:
94:b7:79:88:68:a2:bb:8a:6b:81:26:2e:0b:ed:fb:
c3:6f:d9:66:51:b0:03:f8:c9:b4:19:00:fa:c7:33:
92:c8:68:b6:56:9a:46:9e:de:42:64:a5:60:28:44:
d2:26:f4:a9:6c:4d:62:12:4a:9a:63:9b:93:fe:78:
5d:10:b2:98:48:54:77:23:2a:3e:95:f8:8a:2d:6f:
22:f4:b0:13:32:f2:58:27:da:49:fe:6f:98:da:79:
77:cc:0a:32:d4:ef:aa:8e:a7:e3:85:08:d0:49:b5:
ef:16:6b:28:68:e8:9c:85:75:de:aa:6c:e7:db:a0:
73:58:a0:d4:b4:05:24:48:08:bb:aa:6e:50:77:79:
b7:27:32:2e:b9:b6:b0:e5:2d:c5:bb:3b:dd:ad:7b:
74:23:45:82:29:6d:13:3d:15:29:49:73:45:8a:5b:
d6:0b:2b:f0:09:47:06:ce:8c:c4:6d:f7:57:23:64:
e3:64:49:91:6d:c1:54:59:f8:58:1e:7b:82:fe:18:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:05:10:7A:3F:69:00:28:6A:4E:81:3A:7D:63:28:4A:D7:F2:21:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41AA368A2CDF11F0863A58ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.1.0/24
45.194.4.0/23
45.195.63.0/24
Signature Algorithm: sha256WithRSAEncryption
72:5d:fa:fe:0c:1b:be:c5:82:5c:ec:ef:d8:ee:fe:e1:7e:ee:
f0:de:4a:50:fe:b0:55:9b:d1:c1:e6:ac:4d:d2:d9:8f:93:9a:
6b:82:9f:f2:2b:19:15:c6:e0:fe:5a:51:e5:c7:3b:0c:97:0a:
6d:3d:62:1c:f1:56:ed:61:bd:b9:e9:20:3e:f4:4c:96:cf:39:
0e:98:58:81:eb:c0:3b:90:91:dc:83:3a:ef:ba:4a:e9:93:b3:
ad:b1:bd:f7:7e:c7:b3:1a:69:90:08:85:ef:a5:0c:4e:d2:0f:
04:02:f0:1b:f1:cb:cf:e8:34:b4:bb:71:72:56:16:d2:db:71:
95:61:ff:06:65:d7:92:41:b2:26:71:4b:f0:bd:cd:1f:3b:01:
82:6d:a1:12:fd:b4:46:b6:92:6c:31:eb:3d:43:6e:c5:aa:3f:
82:54:95:54:a6:8a:f6:7c:18:0b:2e:df:42:91:6c:7b:7e:fe:
ad:b8:ef:7a:4c:b0:e1:28:7b:f8:71:a4:bc:9f:b3:e4:80:bd:
99:9f:ec:f8:d7:6d:cf:ae:3c:30:85:8e:97:3b:ec:71:a6:35:
8f:3a:9d:a8:d5:75:5c:79:7f:7a:82:d2:88:cf:9b:cb:f7:85:
fe:dc:05:3d:7b:94:30:c2:24:9f:a1:4f:26:ee:3d:ab:fc:3e:
60:df:62:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:30:51 2025 by rpki-client