Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E87E8223D6E11F083134DC6DAE4EC9C.roa
File: 8E87E8223D6E11F083134DC6DAE4EC9C.roa (raw, json)
Hash identifier: i8l7ve6QMJNZ9QwVi9v+vivy/XVDtDP5iVcTFCx/6zU=
Subject key identifier: 95:F2:18:81:4A:7A:11:98:47:E3:4E:D0:89:29:AD:71:24:B3:0A:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0158FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E87E8223D6E11F083134DC6DAE4EC9C.roa
Signing time: Fri 30 May 2025 15:55:50 +0000
ROA not before: Fri 30 May 2025 15:55:45 +0000
ROA not after: Mon 09 Jun 2025 15:55:45 +0000
asID: 55020
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88315 (0x158fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 15:55:45 2025 GMT
Not After : Jun 9 15:55:45 2025 GMT
Subject: CN=6839d506-55e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:2d:a0:91:61:ba:61:36:82:12:f6:1f:8b:
12:48:71:3a:c7:41:3f:72:aa:69:ca:f0:7c:df:08:
72:d1:53:eb:c6:34:be:8f:7e:f0:f3:d4:8e:65:d5:
f5:69:49:de:4c:2b:a4:b0:1e:3b:f6:86:87:44:c2:
97:1c:bd:9e:3b:75:be:68:de:16:92:a1:f6:ee:48:
8c:2b:06:0d:22:33:5f:cb:68:98:40:75:ef:5d:a1:
c9:13:45:41:6a:f2:96:23:e7:b6:ad:a9:4e:a2:6e:
cb:7c:2c:17:3b:96:9a:1c:59:85:61:9e:f2:92:c7:
bb:78:4f:68:8a:1e:8c:a3:fd:4b:71:7c:5c:7e:fe:
a4:57:38:06:d4:07:d6:34:82:5a:cf:d6:8f:b5:e4:
e6:77:5e:72:00:48:78:46:e6:bc:73:6a:92:91:fc:
59:66:49:b4:68:a9:9f:57:15:6d:ab:69:97:ec:59:
df:6e:95:3c:3f:a1:da:b3:1f:e8:3e:41:bc:eb:1c:
af:e7:cd:05:21:4d:62:73:0f:9c:9d:49:71:12:8d:
07:e2:b9:c6:22:89:cd:ec:e3:1e:fb:ed:e3:70:51:
94:43:6f:b9:7d:74:f5:2c:1f:64:aa:16:74:26:fe:
19:e7:d8:ee:65:0f:f7:33:d4:df:3a:41:8c:f6:ec:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F2:18:81:4A:7A:11:98:47:E3:4E:D0:89:29:AD:71:24:B3:0A:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E87E8223D6E11F083134DC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:fe:fc:b4:81:98:54:66:f1:5d:ac:b3:48:42:94:df:62:68:
04:68:04:31:f5:e4:ce:07:71:6a:73:fa:db:27:8c:6b:a6:c0:
e0:b3:22:8d:1e:6c:5b:4f:9e:45:c4:6a:4e:d7:c5:f5:fa:fd:
6c:3b:d0:8a:c0:df:c6:75:0b:be:5d:2d:bb:71:07:0b:6a:5b:
8b:bb:c0:be:be:5f:d6:b8:27:37:bc:d7:7a:f1:04:4d:6b:7c:
a1:9b:04:95:d2:2b:a4:7b:47:30:da:cb:15:e1:1b:de:b8:b0:
c6:a2:5c:99:e3:5a:01:3a:00:59:9c:14:0a:be:98:06:9b:8b:
03:dd:65:36:25:4e:0a:6c:58:e5:28:e3:bc:d9:74:ef:f2:8e:
85:d1:65:82:c1:7f:0e:6a:2f:ac:3e:37:98:db:b7:c0:40:e8:
0b:37:de:13:3a:10:9c:4f:6b:35:c6:d6:00:0c:0a:87:e5:82:
de:c5:df:f8:5b:04:b3:a9:10:00:68:df:4a:6b:5b:26:db:0f:
e0:cb:25:8e:99:06:f9:15:23:a8:5f:6b:c8:1f:c3:a5:57:c2:
f6:f0:17:49:17:d9:c8:91:a2:4e:51:bf:73:8a:9a:02:3b:c1:
a7:9f:ce:a6:6b:e2:6c:88:c4:7c:2e:99:ce:8d:10:a9:8e:e7:
d9:50:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 09:29:54 2025 by rpki-client