Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E84CA102C1111F0AAD086CCDAE4EC9C.roa
File: 9E84CA102C1111F0AAD086CCDAE4EC9C.roa (raw, json)
Hash identifier: XJqMVa/LW1J0jDKYgqTH6Zxpg9bSRSzienqlRPboJI8=
Subject key identifier: 09:01:A7:8E:14:1C:1B:07:3F:E4:91:73:A4:2B:36:76:F0:04:7E:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0152F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E84CA102C1111F0AAD086CCDAE4EC9C.roa
Signing time: Thu 08 May 2025 13:37:44 +0000
ROA not before: Thu 08 May 2025 13:37:38 +0000
ROA not after: Fri 13 Jun 2025 13:37:38 +0000
asID: 147176
IP address blocks: 45.201.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86769 (0x152f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 13:37:38 2025 GMT
Not After : Jun 13 13:37:38 2025 GMT
Subject: CN=681cb3a8-2ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:40:8e:7a:7b:da:25:b1:97:4a:7a:c9:a3:
b0:61:fb:e3:59:1f:ad:5a:db:6f:45:ae:c0:65:05:
d0:13:c8:06:25:e4:6a:7e:49:fc:8d:50:44:42:80:
73:ec:a5:b8:d8:fa:5b:f8:0c:f3:b8:64:10:23:72:
d6:ec:da:9c:e4:6c:71:bd:ac:c6:7b:92:87:72:0b:
d1:54:1c:2e:76:76:f9:15:fd:d1:ae:bb:2b:a4:d9:
13:9c:7c:08:2c:b2:99:72:68:03:e5:d6:98:11:05:
83:45:42:9d:33:39:15:31:0a:ea:8b:a7:8f:24:f9:
69:b5:ea:5d:6a:a0:58:ec:0d:f1:0f:7e:d0:a0:e1:
d9:21:84:9d:49:f8:49:b2:e8:3c:e7:1f:8a:87:61:
17:99:47:f9:72:9b:4a:23:5b:be:cb:ab:bd:59:b1:
6c:d2:2d:37:e8:e6:8a:a6:08:33:47:af:ab:60:d4:
80:3d:c8:16:f2:4d:4c:2e:c8:be:10:50:82:9f:96:
28:24:25:36:5e:ff:3a:80:f4:79:a9:36:84:53:2f:
80:f4:04:78:a3:34:0b:cf:b2:f5:7c:95:3d:61:ce:
a2:c9:9a:f3:d1:09:78:f6:b1:5b:e8:c6:ec:e2:57:
4e:70:c4:fb:74:ea:b1:d6:12:fb:1c:32:65:e2:26:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:01:A7:8E:14:1C:1B:07:3F:E4:91:73:A4:2B:36:76:F0:04:7E:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E84CA102C1111F0AAD086CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:aa:e9:b1:c3:14:0e:11:4d:a0:e0:4a:ae:64:4c:85:c7:c2:
b6:99:ee:60:c2:68:bb:23:cc:26:68:6d:8e:45:84:44:06:55:
c0:9d:18:46:93:bf:7a:10:14:43:06:80:e8:a9:a3:7a:02:6d:
17:68:24:42:2e:fc:1e:94:b9:43:c9:66:39:23:12:33:29:05:
ed:e4:11:8c:5c:c9:55:ee:17:1d:14:0e:c7:1f:fa:e5:19:5d:
1f:18:50:53:7f:5f:24:5f:ea:a5:b6:41:e2:68:25:1a:5d:19:
f3:d0:bf:48:9d:0d:03:75:46:49:c4:0f:d9:20:0b:38:92:27:
1c:33:e1:e7:b5:bd:58:ef:e3:42:3d:7c:ee:c7:3d:53:d8:b7:
0c:0d:19:05:40:fd:33:69:e7:86:df:95:15:47:6d:ca:22:47:
db:7a:7c:1d:a8:bc:77:2c:66:17:59:e0:51:c2:f0:b4:1b:32:
34:13:ec:4d:8d:2b:bf:eb:10:73:37:9b:62:89:3a:96:2d:70:
4f:05:56:e2:0e:d0:e0:b5:22:45:7e:60:ba:0c:9b:0b:ea:54:
c9:37:b4:e1:44:4c:75:61:51:fa:7c:72:4e:d5:f0:0c:91:96:
0b:57:52:8e:0a:a5:23:99:d0:ed:f2:01:f9:c2:55:04:ab:11:
b2:f4:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:58:35 2025 by rpki-client