Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0B7D488316311F09442C7EADAE4EC9C.roa
File: A0B7D488316311F09442C7EADAE4EC9C.roa (raw, json)
Hash identifier: fJOcqjk91j8G/i3GzdsmM95YmMuiE0TBFmnXyrfXuCA=
Subject key identifier: 11:8B:C0:2B:61:3E:E2:8F:E2:CA:27:81:36:7D:0D:A1:E5:5C:C5:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01548F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0B7D488316311F09442C7EADAE4EC9C.roa
Signing time: Thu 15 May 2025 08:07:22 +0000
ROA not before: Thu 15 May 2025 08:07:17 +0000
ROA not after: Sun 22 Jun 2025 08:07:17 +0000
asID: 57043
IP address blocks: 45.197.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87183 (0x1548f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 08:07:17 2025 GMT
Not After : Jun 22 08:07:17 2025 GMT
Subject: CN=6825a0ba-b4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:a4:c8:1c:8f:81:87:77:79:e1:6a:7f:42:
a7:83:08:b4:ae:e9:9d:df:d1:47:2a:37:bc:82:0d:
ce:d4:b1:fa:00:a7:56:b0:ce:1a:f8:72:28:a5:f6:
45:55:8c:b8:2a:8b:47:8f:7c:dd:ad:39:22:f8:7e:
f0:f9:eb:f8:48:a1:9b:97:41:40:47:12:57:27:5b:
a1:f5:47:c4:d7:8d:e6:33:aa:4b:dc:e4:1d:e6:22:
2f:3b:16:e8:a6:67:45:88:06:c7:84:27:09:b1:3e:
56:54:8e:fa:78:22:9d:e1:71:e2:bb:7d:8e:d1:cc:
bc:b1:1e:04:fa:ec:1d:7f:ee:b9:ca:72:5c:9b:b4:
9d:b4:e8:92:6f:dd:7d:97:20:9a:50:0d:50:e0:43:
69:47:bb:9a:04:e7:49:80:ee:6a:b8:7b:f7:57:06:
e3:4e:5c:b8:c0:b7:79:61:b5:b0:82:c6:36:8d:0d:
5e:79:a7:46:73:1f:84:06:e8:7b:93:72:fa:29:7a:
27:c4:f2:c9:b8:39:35:6d:66:37:d6:a8:8d:89:c5:
9d:f7:97:16:26:fa:da:1a:5f:31:16:e6:69:f3:68:
a8:90:1b:89:8f:70:fe:66:6b:c9:cf:28:b0:91:39:
9e:d5:7c:03:8f:0d:0a:00:c5:a2:44:fe:15:bb:0e:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8B:C0:2B:61:3E:E2:8F:E2:CA:27:81:36:7D:0D:A1:E5:5C:C5:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0B7D488316311F09442C7EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.133.0/24
Signature Algorithm: sha256WithRSAEncryption
16:23:50:15:49:28:58:82:56:92:2e:7b:3e:bd:b0:43:3c:30:
3b:a6:b9:44:f5:07:6a:66:e6:3e:4b:15:52:48:fb:f7:5a:98:
73:4c:4a:34:e9:12:0d:e1:d9:91:63:ab:2f:e5:d0:49:a2:e3:
64:f9:60:a1:37:c3:79:31:8e:a3:f1:e2:f7:65:12:fc:03:7f:
79:89:b7:a7:42:08:b2:02:40:9d:c0:af:8e:38:e5:85:a1:56:
fa:b5:85:86:36:d2:03:cc:97:ab:73:65:cb:6c:40:d3:3e:b5:
bc:3b:6a:79:80:d9:94:f7:cc:c4:6b:21:22:d0:56:f8:bc:9c:
56:ce:62:32:f1:75:82:a6:0b:b2:dc:9c:88:fd:72:20:3f:99:
cd:e0:35:6a:27:9a:98:39:17:4e:25:f7:ae:b0:7b:10:ca:64:
1a:a0:42:35:83:f7:01:41:8a:43:83:99:19:70:ca:1b:7b:ff:
5b:c3:8a:4a:a5:e2:6e:c9:6b:c7:a1:cf:e5:f1:47:f6:d6:d5:
33:11:24:26:2a:22:ff:62:fd:b7:24:8a:11:9e:9d:4f:01:7b:
3a:42:76:4d:0d:7e:9c:d0:82:52:1a:ff:b0:23:61:f3:34:c4:
0f:d5:80:04:ce:32:09:7b:4a:0e:69:67:b7:c9:f5:32:9e:7c:
0d:43:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:38:56 2025 by rpki-client