Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D185587C558711F085505BA3DAE4EC9C.roa
File: D185587C558711F085505BA3DAE4EC9C.roa (raw, json)
Hash identifier: A6z/nt4TW2wClVZ5k3jMgk8K25lFbAnomlP3jziZgAY=
Subject key identifier: 3F:55:A1:50:CC:1B:86:76:31:D1:F8:EC:80:16:FD:DE:4A:F0:DA:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D185587C558711F085505BA3DAE4EC9C.roa
Signing time: Mon 30 Jun 2025 07:57:08 +0000
ROA not before: Mon 30 Jun 2025 07:57:02 +0000
ROA not after: Fri 04 Jul 2025 07:57:02 +0000
asID: 3561
IP address blocks: 45.194.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89995 (0x15f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 30 07:57:02 2025 GMT
Not After : Jul 4 07:57:02 2025 GMT
Subject: CN=68624353-70a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:b5:1b:77:cc:2d:a4:89:50:e6:50:79:03:
9b:7a:a1:44:16:f7:cc:b1:32:2c:5d:08:16:87:89:
a3:4a:dd:16:bf:01:83:7f:e9:55:e9:52:e6:f2:04:
1b:83:4d:23:f8:61:24:23:2c:31:8b:0f:a1:e4:96:
98:f3:5e:58:23:b6:e3:c9:9d:df:92:ee:61:09:a7:
6d:f7:8c:b4:ea:2a:79:37:b1:6c:a4:c6:75:43:63:
58:77:87:66:ca:23:11:21:44:e6:30:24:e0:38:de:
2d:d6:ce:bb:85:61:4f:8d:ff:90:39:74:ec:cd:fb:
a1:40:91:99:c8:da:64:7d:bd:c7:e7:8d:5f:e7:68:
82:d0:8e:08:4f:b1:ad:ad:97:ea:8f:0f:70:49:1e:
a6:95:2d:f2:0f:16:36:7d:e6:06:cb:28:13:89:d3:
7e:d3:21:49:9b:36:6f:c2:ba:d1:64:4f:51:fb:b4:
63:51:2f:4a:bf:d8:9e:b6:a7:b4:ed:9f:67:45:f1:
39:e0:29:df:40:9e:19:e8:bc:01:6b:5b:1d:3c:dc:
bc:57:3c:c6:a6:5a:b4:43:04:5b:0c:69:cb:5c:9b:
c9:50:9f:d3:18:e6:a6:6c:e8:39:3a:23:ce:ff:06:
c7:bd:11:7e:38:3e:12:0f:a7:de:0e:9c:69:dd:27:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:55:A1:50:CC:1B:86:76:31:D1:F8:EC:80:16:FD:DE:4A:F0:DA:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D185587C558711F085505BA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.100.0/22
Signature Algorithm: sha256WithRSAEncryption
87:12:7e:19:4b:bd:78:a0:d7:b1:d2:5f:96:88:90:a3:6e:41:
b5:45:95:42:2d:85:b6:5b:5d:60:02:02:f0:f4:6b:79:f1:3f:
41:60:6e:56:ee:41:e5:02:55:ca:bf:02:50:55:d6:82:05:02:
6d:fd:0b:0d:93:38:e4:c7:33:5c:9c:bc:8c:77:1f:1e:d1:52:
b3:7d:12:e8:38:18:fe:51:de:23:4f:c1:06:95:f9:7c:b5:a4:
ed:93:68:62:4a:5e:bf:2b:1f:52:93:9b:e2:4a:b5:30:3e:38:
d8:ed:32:4e:a9:c7:84:21:06:0d:a9:e8:7d:ce:04:55:52:25:
97:e9:16:e0:e0:86:09:64:57:49:f8:ed:df:a6:31:cb:50:3b:
99:98:df:7d:3e:80:69:cf:f4:4d:ca:5e:2e:29:e3:7a:69:6a:
d9:f3:dd:1b:b8:8c:53:30:0a:7b:a6:62:06:e5:d0:24:59:d2:
cd:15:0e:ba:2f:56:1f:a5:7e:a8:4d:ec:eb:ed:2a:97:7a:80:
96:85:2b:36:b4:a0:d9:8b:83:13:81:66:2e:e4:d8:5c:85:36:
34:18:fd:a3:da:e0:d0:7a:ca:60:93:da:c2:84:c6:99:62:ab:
b5:89:95:2a:15:eb:dd:9c:05:11:89:05:2e:38:2a:0b:79:11:
23:84:ba:19
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAV+LMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjMwMDc1NzAyWhcNMjUwNzA0MDc1NzAyWjAYMRYw
FAYDVQQDEw02ODYyNDM1My03MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzs61G3fMLaSJUOZQeQObeqFEFvfMsTIsXQgWh4mjSt0WvwGDf+lV6VLm
8gQbg00j+GEkIywxiw+h5JaY815YI7bjyZ3fku5hCadt94y06ip5N7FspMZ1Q2NY
d4dmyiMRIUTmMCTgON4t1s67hWFPjf+QOXTszfuhQJGZyNpkfb3H541f52iC0I4I
T7GtrZfqjw9wSR6mlS3yDxY2feYGyygTidN+0yFJmzZvwrrRZE9R+7RjUS9Kv9ie
tqe07Z9nRfE54CnfQJ4Z6LwBa1sdPNy8VzzGplq0QwRbDGnLXJvJUJ/TGOambOg5
OiPO/wbHvRF+OD4SD6feDpxp3SejwwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD9V
oVDMG4Z2MdH47IAW/d5K8NptMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMTg1NTg3QzU1ODcxMUYwODU1MDVCQTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcJkMA0GCSqGSIb3DQEBCwUA
A4IBAQCHEn4ZS714oNex0l+WiJCjbkG1RZVCLYW2W11gAgLw9Gt58T9BYG5W7kHl
AlXKvwJQVdaCBQJt/QsNkzjkxzNcnLyMdx8e0VKzfRLoOBj+Ud4jT8EGlfl8taTt
k2hiSl6/Kx9Sk5viSrUwPjjY7TJOqceEIQYNqeh9zgRVUiWX6Rbg4IYJZFdJ+O3f
pjHLUDuZmN99PoBpz/RNyl4uKeN6aWrZ890buIxTMAp7pmIG5dAkWdLNFQ66L1Yf
pX6oTezr7SqXeoCWhSs2tKDZi4MTgWYu5NhchTY0GP2j2uDQespgk9rChMaZYqu1
iZUqFevdnAURiQUuOCoLeREjhLoZ
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:50:07 2025 by rpki-client