Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA587C783F8F11F0A7066BA5DAE4EC9C.roa
File: BA587C783F8F11F0A7066BA5DAE4EC9C.roa (raw, json)
Hash identifier: j0lNJKQU7iGtl68pxFq+0bA+D14FUOWs3KRmJYVI60w=
Subject key identifier: B4:77:21:6D:80:92:23:02:04:9B:AE:DD:9A:68:A5:A1:EA:0A:E6:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015963
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA587C783F8F11F0A7066BA5DAE4EC9C.roa
Signing time: Mon 02 Jun 2025 08:58:19 +0000
ROA not before: Mon 02 Jun 2025 08:58:14 +0000
ROA not after: Thu 10 Jul 2025 08:58:14 +0000
asID: 20326
IP address blocks: 45.206.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88419 (0x15963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 08:58:14 2025 GMT
Not After : Jul 10 08:58:14 2025 GMT
Subject: CN=683d67ab-57e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:38:3a:56:8d:4d:a8:52:9a:86:81:0d:4d:d4:
85:99:1a:be:50:8b:51:72:f0:35:08:68:4f:ac:28:
b6:2b:3d:d6:c6:14:2b:02:27:b1:9a:84:29:5f:fb:
65:3d:e7:27:75:a9:3b:67:e3:88:e6:2d:bf:b4:6a:
9f:d5:93:30:d1:fb:54:6f:0e:38:09:d0:a0:1b:47:
0e:3e:8d:8b:cb:47:98:c9:1f:bf:77:79:e4:0a:8f:
74:11:1b:ed:e2:df:dc:e8:de:df:f1:a4:14:37:0f:
06:20:d0:49:08:fc:99:3b:7d:06:b3:ae:c1:1f:e3:
e3:7d:d7:10:49:1b:f6:7d:4b:1b:72:65:5d:70:2d:
e1:b4:c1:ea:16:26:d1:84:fb:cd:28:4d:cb:f3:64:
82:a6:03:eb:33:b8:a9:9d:dc:67:71:81:e7:2e:bc:
59:61:81:ba:ca:7e:3c:79:ca:5e:96:2c:c3:41:82:
77:47:29:79:cd:df:87:56:b9:99:b6:bb:f5:e9:5d:
64:d0:0c:1b:b9:1d:88:f6:b1:d3:1b:fa:ca:02:71:
f5:5a:93:c9:a1:d1:a3:ed:e8:79:57:f7:84:29:74:
57:f1:63:59:56:0f:8a:bf:83:5e:e8:4b:2c:8c:e0:
73:b7:d6:c3:f7:a1:11:25:ce:83:52:69:a6:d6:b1:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:77:21:6D:80:92:23:02:04:9B:AE:DD:9A:68:A5:A1:EA:0A:E6:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA587C783F8F11F0A7066BA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.10.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:fc:b8:41:31:21:7c:e7:d8:56:06:2c:b2:f0:f7:a8:15:7e:
83:71:49:46:a8:62:1d:c9:59:01:91:5c:f9:50:ed:1c:8d:e3:
91:4d:54:1a:2b:52:83:2e:2a:1b:83:f4:c5:78:a7:26:ea:4a:
c1:29:ca:e5:48:bf:08:78:b7:28:a0:50:e5:95:1a:21:38:00:
59:08:90:de:87:b7:93:14:5c:24:8f:7d:8c:a8:52:df:0a:44:
59:2f:ff:6a:5b:b5:e1:3e:dd:9f:6f:bd:c9:fe:ac:48:64:42:
b7:61:78:af:8c:7a:ec:87:2e:52:c8:e8:9b:36:4a:b0:97:59:
cb:a6:04:1b:c8:fa:6a:f3:5a:b0:1c:10:a7:91:0a:6e:b7:10:
36:9c:b1:cd:d3:86:f2:8e:ba:21:49:9e:70:dc:1e:d4:73:b8:
07:dc:f5:5c:0f:91:d9:b0:91:05:13:68:84:ae:bb:85:fb:7b:
fa:0f:ec:83:9d:51:0d:74:ad:ae:f8:94:40:2a:d3:4f:be:1d:
ae:f3:24:64:76:9e:10:38:01:d7:15:09:d5:c9:68:c8:0a:60:
d3:8d:0e:45:c9:aa:85:49:58:15:85:38:23:e8:da:ea:d3:b6:
d0:dc:ed:c9:88:14:cf:10:e5:88:cb:7b:9d:62:d9:2c:2d:7e:
cc:4c:2a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:15 2025 by rpki-client