Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8059BAF430A911F09DDF158CDAE4EC9C.roa
File: 8059BAF430A911F09DDF158CDAE4EC9C.roa (raw, json)
Hash identifier: SBoe9qW9uAuNUGc0su4G64oUr44iDZoqtDjUunyg1oE=
Subject key identifier: AA:3A:E4:08:C7:E5:3A:B1:31:85:25:3D:E1:70:E6:BE:56:CD:DD:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01543C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8059BAF430A911F09DDF158CDAE4EC9C.roa
Signing time: Wed 14 May 2025 09:55:01 +0000
ROA not before: Wed 14 May 2025 09:54:57 +0000
ROA not after: Mon 04 May 2026 09:54:57 +0000
asID: 13335
IP address blocks: 45.194.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87100 (0x1543c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 09:54:57 2025 GMT
Not After : May 4 09:54:57 2026 GMT
Subject: CN=68246875-a062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:37:16:e2:2c:0b:d3:e5:b1:9a:97:a1:15:
74:d3:8b:52:62:e2:64:35:6b:88:75:fb:c7:4e:a9:
e1:da:d1:12:cb:bc:1c:9a:da:66:76:57:4c:b5:8d:
33:a3:81:8a:29:58:64:fc:ea:7d:ad:61:d3:6a:55:
0c:4e:d5:f4:26:92:01:f7:a4:85:a0:52:09:df:d4:
52:2d:e1:2d:92:60:bf:81:1f:8d:00:f6:72:a6:0a:
b8:c0:0e:69:9b:55:d3:6d:ef:ab:86:49:30:68:02:
78:d1:c7:88:22:31:46:90:ac:37:c5:ab:64:0c:54:
80:a6:4e:b3:38:c6:e3:c0:b0:09:18:8b:ab:bd:a0:
6d:70:a1:91:96:83:6a:c4:b8:5b:e4:cd:29:ce:fc:
eb:bd:05:96:fb:32:a8:fa:9f:d3:a5:3b:4f:b4:d7:
77:38:d8:84:04:7c:1b:65:fa:4e:94:a8:48:d8:f4:
2d:02:b5:20:0b:9a:6f:ec:cd:c9:31:32:09:f2:77:
a6:2a:8b:7a:ea:b8:a3:2a:7c:07:9b:85:42:12:d6:
8e:21:0d:f7:ee:96:94:ae:ad:ce:cf:c4:ec:64:61:
3e:98:10:26:bd:79:c7:d8:8d:3f:c2:d6:52:2a:6e:
a4:4a:ef:0b:4c:fa:8e:0d:fc:b0:04:56:cf:6d:55:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:E4:08:C7:E5:3A:B1:31:85:25:3D:E1:70:E6:BE:56:CD:DD:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8059BAF430A911F09DDF158CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.11.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:36:ca:44:ce:61:aa:a5:16:39:77:08:b9:e4:03:4b:f6:ec:
e5:6f:03:18:66:ed:48:1c:c0:42:69:bd:e9:81:20:7f:6e:ab:
d1:db:5b:04:aa:37:f0:0d:98:78:6e:66:7b:52:6c:0a:02:79:
3c:01:28:a4:b0:4e:94:a6:85:2a:d3:5a:32:bc:4e:0a:32:cf:
32:10:c5:84:d2:36:d1:9a:ff:61:28:21:1a:59:66:59:31:ce:
c0:d4:0d:1b:e9:5f:9f:a7:26:6b:6a:b9:f2:45:c5:f8:ed:e8:
95:a7:07:35:e8:33:f9:31:db:ef:87:4b:72:0c:f8:54:0f:d5:
c7:bb:b2:69:09:d8:45:dc:8d:5d:b8:32:be:ed:f1:1f:b5:56:
2f:5a:e1:29:99:77:b1:69:87:6a:06:79:34:fc:d8:b5:a0:ce:
14:79:8d:8c:d2:19:f0:7a:50:de:3c:57:4b:27:e2:6d:19:e7:
83:f1:e2:b7:9e:44:b4:74:f9:05:93:8e:d8:8a:8a:06:2b:02:
6b:85:81:a4:db:37:38:80:77:a8:18:91:50:98:62:07:88:ce:
6c:bd:01:41:dc:c0:19:85:5b:7d:ed:47:47:b5:71:e8:f2:5e:
13:c3:37:a4:9c:b0:7a:23:6b:c7:a4:ca:23:9a:cb:64:96:c3:
8a:de:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:23:42 2025 by rpki-client