Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5F997C02BED11F0A13A0AE0DAE4EC9C.roa
File: C5F997C02BED11F0A13A0AE0DAE4EC9C.roa (raw, json)
Hash identifier: 4oR43t3JlwRIPBF1AU+JmlJ/60S0oKIecxiL3LGz8ss=
Subject key identifier: D5:CD:FE:09:F7:CE:81:41:19:72:CE:4D:3A:AB:94:FA:9A:95:BD:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0152CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5F997C02BED11F0A13A0AE0DAE4EC9C.roa
Signing time: Thu 08 May 2025 09:21:08 +0000
ROA not before: Thu 08 May 2025 09:21:04 +0000
ROA not after: Mon 09 Jun 2025 09:21:04 +0000
asID: 200373
IP address blocks: 45.201.10.0/24 maxlen: 24
45.201.11.0/24 maxlen: 24
45.202.76.0/24 maxlen: 24
45.202.77.0/24 maxlen: 24
45.202.78.0/24 maxlen: 24
45.202.79.0/24 maxlen: 24
45.206.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86735 (0x152cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 09:21:04 2025 GMT
Not After : Jun 9 09:21:04 2025 GMT
Subject: CN=681c7784-6901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:ed:b8:5b:76:b6:ee:fe:04:e2:cf:26:0c:
9b:c0:03:24:0a:65:bd:27:24:bc:d9:f6:9c:7d:de:
2f:94:e4:b6:28:8e:86:a3:b9:b2:86:5b:1d:e4:f0:
02:9d:62:79:bd:92:f5:33:5a:a4:94:22:7e:2a:9e:
00:c3:c3:bf:05:2d:14:f7:77:73:bf:4a:f4:ad:70:
f7:e6:d7:1a:8b:5c:1d:eb:bd:31:ee:e6:44:5b:ef:
c9:be:b9:ad:39:a5:bd:8d:b4:12:73:95:70:48:83:
9c:5a:67:ee:6b:48:2d:22:27:6e:ce:8b:db:ad:fb:
ed:fa:e8:d0:4f:20:a0:72:e4:f9:10:0d:6a:a4:bd:
38:01:57:72:53:19:15:ec:f3:82:cd:ae:4f:5d:7b:
b3:34:e8:3a:57:c5:12:48:52:f6:7e:93:5e:a4:d6:
f2:02:b0:b5:c0:e3:e2:1b:31:fe:09:d2:c7:c4:63:
ea:72:83:66:e5:d4:06:0a:5f:3b:5c:ee:f2:a6:f3:
af:5d:1b:21:48:33:dd:24:fd:d2:04:41:8b:68:9b:
8c:7e:bd:c7:53:03:f8:8d:8a:64:4e:71:b9:b0:63:
9d:27:91:7e:4b:6a:52:b3:a5:46:42:78:17:69:4a:
74:51:10:be:7d:3e:91:f0:2a:a3:ce:fb:88:59:43:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CD:FE:09:F7:CE:81:41:19:72:CE:4D:3A:AB:94:FA:9A:95:BD:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5F997C02BED11F0A13A0AE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.10.0/23
45.202.76.0/22
45.206.72.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:c9:7c:82:f7:86:8f:50:22:8b:93:1e:f2:f7:43:6d:c5:7e:
a0:c1:f5:8a:e3:de:55:df:b0:ea:01:3c:e9:77:c7:b4:1b:d6:
3d:07:d2:12:c3:89:3b:50:c5:97:0f:0b:ca:10:9a:95:a7:e2:
a3:9d:c8:ff:aa:73:3b:c5:33:22:1e:6d:88:fb:37:20:30:3c:
12:a1:65:e3:6a:d0:86:e2:1e:07:c9:3c:33:f7:69:5b:b7:0c:
24:84:fc:b8:5c:ba:41:5a:87:04:b1:e0:c3:bb:54:cb:51:df:
a5:de:1e:1b:83:38:8a:f7:b3:f4:2b:2e:17:d1:02:ce:dd:61:
af:9a:4d:c1:36:04:00:f3:16:69:d2:33:76:38:85:9c:5e:5d:
b6:1d:10:ad:a4:8c:3e:1d:de:8b:66:f6:aa:b8:1f:e6:ed:97:
73:05:56:59:98:19:35:54:73:be:43:54:ed:41:17:d8:a2:c7:
17:06:f0:1a:a3:6c:26:b1:80:04:bc:28:9d:ea:dd:be:25:24:
a0:38:53:1e:a0:1c:13:98:4a:48:65:59:a0:9a:14:ca:5d:6a:
9a:89:57:93:18:6e:cf:d9:56:17:06:38:2b:35:c8:3c:15:16:
8c:59:b6:56:67:18:24:71:55:9c:d4:3a:db:85:8a:a3:0f:40:
9e:f7:de:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:39:07 2025 by rpki-client