Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9668967C356C11F0AD822AE6DAE4EC9C.roa
File: 9668967C356C11F0AD822AE6DAE4EC9C.roa (raw, json)
Hash identifier: JkG+iXTI+gcw7g8AAwaun9I5LtUjv09NspDGLVosVic=
Subject key identifier: 29:8E:2D:ED:DA:9B:16:92:1C:F5:D7:A8:27:CB:FC:04:0E:0A:71:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015642
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9668967C356C11F0AD822AE6DAE4EC9C.roa
Signing time: Tue 20 May 2025 11:21:35 +0000
ROA not before: Tue 20 May 2025 11:21:28 +0000
ROA not after: Fri 27 Jun 2025 11:21:28 +0000
asID: 44559
IP address blocks: 45.199.209.0/24 maxlen: 24
45.199.210.0/24 maxlen: 24
45.199.211.0/24 maxlen: 24
45.199.213.0/24 maxlen: 24
45.199.214.0/24 maxlen: 24
45.199.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87618 (0x15642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 11:21:28 2025 GMT
Not After : Jun 27 11:21:28 2025 GMT
Subject: CN=682c65bf-75ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:3b:94:7f:55:87:05:cd:c5:44:68:92:f9:
e1:06:23:10:d4:fd:da:a8:d2:90:83:65:91:5f:94:
02:03:2a:27:02:92:ee:50:b5:ca:f7:03:9e:38:2b:
a2:f8:b7:c3:f0:93:e6:26:4b:00:73:ca:61:ce:ee:
ab:3c:7d:79:7b:0d:89:99:5b:32:ce:25:b5:c2:a3:
9e:80:03:b6:d6:d9:5b:71:d7:25:65:52:e8:4e:2c:
f1:60:ce:a8:ad:41:d8:20:6a:bf:8f:60:47:9d:cf:
a8:ed:20:b0:19:94:24:15:86:0b:05:69:bf:d0:a2:
51:15:3c:d6:44:1f:2f:06:27:c1:09:fa:8a:1c:a1:
4e:f5:f6:4a:9c:50:18:17:c8:b0:93:ed:73:5f:05:
f5:8e:96:e4:4b:d5:63:5f:02:b2:7e:61:d0:38:5b:
58:5f:d1:e2:be:a7:8b:ed:4c:ce:d5:62:aa:23:4d:
ab:84:3d:fc:ca:19:0d:dd:2a:00:ec:42:d5:5f:ff:
52:69:0c:a1:9f:91:60:c8:fb:fe:34:af:44:b7:dc:
62:58:21:e1:4a:2f:25:e2:20:67:74:46:89:18:52:
0d:25:c4:8b:23:51:a5:4e:da:67:e5:49:a1:f8:04:
70:68:a9:d1:e1:e5:44:3e:83:0f:c7:15:ed:9f:ed:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:2D:ED:DA:9B:16:92:1C:F5:D7:A8:27:CB:FC:04:0E:0A:71:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9668967C356C11F0AD822AE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.209.0-45.199.211.255
45.199.213.0-45.199.215.255
Signature Algorithm: sha256WithRSAEncryption
19:df:09:d6:f0:e7:dc:44:74:f0:a8:e8:a3:24:88:ba:96:52:
a7:c5:4d:6b:af:64:9b:a1:b0:53:f8:93:1a:f6:2d:a3:6f:77:
31:34:79:3d:ad:d8:b2:cb:fc:a3:6e:db:ed:52:cb:59:98:14:
ee:31:6e:7f:8c:43:08:0a:9d:87:b4:ab:55:cd:70:57:82:00:
61:03:5f:e9:bf:52:b0:09:42:d0:cb:2a:fc:4d:31:6e:12:a8:
4d:ef:78:06:80:f1:fb:e7:2b:6c:2a:1d:0c:31:80:f2:29:b9:
e6:2f:70:c1:14:b3:ae:b7:3f:17:e5:3c:7f:aa:70:77:2a:5c:
75:6f:08:ea:90:5a:94:54:69:b6:00:ba:d4:86:a0:9e:42:d1:
27:ad:56:ff:36:b6:96:d3:0d:b9:05:dd:33:ec:5b:45:b8:e8:
78:e0:82:1a:d2:fb:3e:04:8e:e1:34:26:c2:e9:ce:c2:68:1a:
91:4e:e2:e9:5e:e6:bc:99:67:67:5b:12:1a:28:f4:2d:49:84:
72:2b:48:d3:c5:25:22:92:60:49:a9:e8:cb:c7:60:ce:22:41:
38:97:33:66:76:03:77:5d:32:23:c3:d1:5e:e5:a9:9a:47:eb:
20:99:ac:12:74:d1:71:02:6f:36:72:c3:69:6e:2c:35:af:b9:
15:3d:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:36:20 2025 by rpki-client