Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D403D2283BB411F081F3EA92DAE4EC9C.roa
File: D403D2283BB411F081F3EA92DAE4EC9C.roa (raw, json)
Hash identifier: AXT/Y2kOSIcLOr48pFpVDPa96ebXAeNSWxGC0/AMWu8=
Subject key identifier: 2D:4B:17:5B:2B:B2:E6:74:DD:E8:43:72:2C:76:11:DA:E2:B4:2A:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01584F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D403D2283BB411F081F3EA92DAE4EC9C.roa
Signing time: Wed 28 May 2025 11:13:49 +0000
ROA not before: Wed 28 May 2025 11:13:44 +0000
ROA not after: Sat 07 Jun 2025 11:13:44 +0000
asID: 5650
IP address blocks: 45.196.36.0/22 maxlen: 24
45.196.44.0/22 maxlen: 24
45.196.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88143 (0x1584f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 11:13:44 2025 GMT
Not After : Jun 7 11:13:44 2025 GMT
Subject: CN=6836efed-70b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:1a:fe:47:9b:cf:df:eb:42:cf:cc:62:54:
8a:a3:83:fe:32:dd:74:a6:fd:88:dc:cd:8e:8e:3b:
fa:fa:89:c9:c0:3a:2d:7b:c4:5c:c6:9d:7d:80:db:
48:c1:c9:f5:ff:84:4a:67:5c:06:ad:d6:81:c5:4d:
85:02:9f:39:c2:ab:24:7c:3f:0c:01:18:60:b9:65:
0c:4f:e1:c1:b0:62:d8:a5:e7:2b:36:c2:48:d3:57:
50:34:58:6e:88:a1:0e:ef:8f:b9:64:b6:45:c8:90:
7c:f8:ba:db:cc:6c:a5:6b:6a:47:d2:13:d0:ac:76:
2d:f4:52:52:6e:c3:fb:18:c2:01:52:f3:fe:3a:28:
40:e9:66:d9:41:ff:14:6a:b7:e5:b7:b9:15:25:c6:
3d:9b:f0:a5:11:e4:78:fb:40:d4:89:7f:3d:47:8c:
d9:b8:31:30:76:82:29:18:88:f6:ae:e7:b9:ad:6b:
03:1d:33:b4:1f:34:34:2e:72:d3:41:42:9d:ba:7f:
76:30:fc:91:ab:58:89:1d:17:0d:79:37:c3:57:e6:
1a:6f:39:cf:71:d6:4f:1f:c7:44:f7:a5:da:31:e9:
a3:ab:27:56:f5:6b:53:5c:94:18:ee:ad:80:3e:7a:
d3:ff:e4:82:b7:87:98:91:80:84:77:d2:4d:7b:18:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4B:17:5B:2B:B2:E6:74:DD:E8:43:72:2C:76:11:DA:E2:B4:2A:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D403D2283BB411F081F3EA92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.36.0/22
45.196.44.0/22
45.196.56.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:85:17:61:46:ca:bb:7f:fd:93:ee:09:00:22:19:f4:a6:0a:
ab:e6:8a:7d:f2:5f:85:e9:70:8b:6c:1c:6e:40:1f:20:ed:47:
30:a3:18:a2:86:9d:a8:c3:fa:95:1a:93:7c:1c:59:c6:5a:73:
5b:16:a9:5a:58:b8:5b:c9:87:2f:94:50:4d:11:81:1f:67:b4:
bb:26:52:de:75:d0:c3:f6:5f:9d:3d:19:2e:96:d5:c8:11:c8:
bc:a8:9f:9a:5f:be:37:ad:fd:f8:4d:a5:60:fc:13:55:b3:eb:
28:18:c3:97:ee:6e:93:f7:8a:0c:49:50:73:e5:a4:f8:6c:7c:
5c:4d:a8:2b:c9:b3:3f:8d:4f:e5:ab:dc:74:66:19:f9:5d:e9:
d2:05:17:8c:b4:a1:f7:d5:42:e5:f6:74:b2:3e:39:95:38:81:
d8:bf:31:e7:ec:51:f0:1a:5c:1d:55:68:b0:10:18:0d:2c:ef:
bc:4c:39:2a:62:45:27:d6:b1:84:cd:89:5d:5d:ba:8a:18:90:
db:4a:9a:87:6e:45:12:87:9d:f4:e2:10:af:5a:c4:3d:07:6a:
0a:6e:6c:5b:70:6f:a7:41:ce:21:dc:5e:a4:51:c4:d9:a1:f3:
a4:0d:cf:97:28:02:af:53:89:34:9a:22:d3:44:4e:3e:ec:de:
3c:17:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:51:46 2025 by rpki-client