Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C91119AE54D11EFA5BBC579762E951A.roa
File: 6C91119AE54D11EFA5BBC579762E951A.roa (raw, json)
Hash identifier: AcWlrR4mnCgC0cUqjhornhyRDz4Wwvjs8QBR/Y0uA+Q=
Subject key identifier: 6D:AE:D9:E8:63:3D:5E:1C:DB:2E:CF:A8:CC:68:8D:CC:C9:CA:1F:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C91119AE54D11EFA5BBC579762E951A.roa
Signing time: Fri 07 Feb 2025 12:16:57 +0000
ROA not before: Fri 07 Feb 2025 12:16:53 +0000
ROA not after: Wed 21 Jan 2026 12:16:53 +0000
asID: 984
IP address blocks: 45.192.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73055 (0x11d5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 12:16:53 2025 GMT
Not After : Jan 21 12:16:53 2026 GMT
Subject: CN=67a5f9b9-e5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:94:18:35:86:0e:c8:a6:1e:b1:cd:d4:b7:
f6:aa:6d:62:f6:77:f2:23:f1:3f:c9:da:8b:ff:96:
6c:9d:61:c7:69:d5:4e:b3:68:28:a3:3b:89:17:3d:
02:3f:3f:4e:d3:8c:2e:97:b4:1f:54:85:cf:b7:72:
56:1f:a6:e4:34:63:84:21:12:81:5d:6d:e9:71:b2:
ab:5f:b6:7b:b9:24:58:d0:b3:8b:07:d6:d7:e0:ea:
a6:c0:14:92:20:2d:a5:df:12:68:db:6d:ab:f5:e5:
46:3a:24:ee:90:cc:0b:04:c6:87:39:6c:26:5a:47:
1d:cb:b2:31:c5:9b:4c:c9:8f:d5:a5:f5:fc:47:e4:
2b:4a:34:07:ee:c8:81:20:8d:e7:a5:73:f6:4c:b8:
a0:ac:07:bf:c7:37:5b:05:c6:d6:55:4b:3d:42:f2:
36:71:33:f0:0f:1c:d7:4d:76:7f:e2:61:4c:86:0d:
ff:4a:6d:91:bb:96:c2:09:6b:47:fa:42:84:2a:d7:
72:9f:bb:7d:46:54:17:24:d4:29:8f:b7:f5:ec:2f:
b5:a3:1d:1d:ee:6d:a1:26:5a:fc:6e:bc:ee:62:54:
73:0a:2f:4c:9e:a1:1a:fb:04:d9:bc:fd:59:1c:64:
c1:c8:93:46:7d:e4:1a:29:6a:0f:80:1a:a4:65:0b:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AE:D9:E8:63:3D:5E:1C:DB:2E:CF:A8:CC:68:8D:CC:C9:CA:1F:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C91119AE54D11EFA5BBC579762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.18.0/24
Signature Algorithm: sha256WithRSAEncryption
61:15:fa:1c:f0:34:88:59:80:7a:1d:cd:ec:cd:22:74:6a:02:
fd:48:34:eb:7d:2b:5c:b6:90:32:cf:75:8f:c3:a8:bc:22:6e:
70:ec:d7:20:07:c9:aa:fd:08:2d:c5:0d:e9:a4:07:b4:ad:e8:
0c:02:34:42:15:0c:40:9b:b2:4d:5b:a0:5e:a5:af:8c:fb:0a:
ca:0f:89:d8:45:ae:cc:22:92:f3:ed:76:d3:72:52:98:ca:e3:
4d:c8:4d:31:8c:14:57:7c:93:b8:eb:6f:3a:b1:4c:23:96:f7:
5e:98:7f:65:fb:05:9d:91:a4:59:7c:2f:a8:ff:8f:9f:81:37:
08:0f:f3:2f:36:e2:28:a6:c0:4c:5c:1a:fc:a4:4e:ca:b7:e2:
b9:69:fe:05:8c:ed:bd:9f:40:6a:f8:4c:57:7e:0b:15:9a:d2:
11:13:62:16:7a:af:8f:cb:da:78:e9:2a:53:fb:16:14:46:08:
50:83:b0:3c:c3:0e:05:a9:07:d4:31:97:90:98:ef:61:e5:c2:
44:ef:2c:3a:3b:22:d4:bf:79:2d:85:12:36:ea:55:28:55:10:
cb:1e:fe:4b:f5:d4:51:4f:5e:29:e9:cb:3b:8d:5a:5b:46:6c:
a9:ee:ba:30:9e:bd:3c:36:39:a8:4c:fc:e7:7c:df:c5:79:f7:
bb:9a:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:09 2025 by rpki-client