Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D92D23DA4ABE11F0BFE133E6DAE4EC9C.roa
File: D92D23DA4ABE11F0BFE133E6DAE4EC9C.roa (raw, json)
Hash identifier: TQYtmdm4OG/8tFhshb3qb+xFVvauUx2o9YyzK5Ozx/M=
Subject key identifier: CB:0E:4D:2E:5B:42:FE:71:8F:63:C0:D3:1E:C0:07:98:A7:92:47:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D92D23DA4ABE11F0BFE133E6DAE4EC9C.roa
Signing time: Mon 16 Jun 2025 14:33:20 +0000
ROA not before: Mon 16 Jun 2025 14:33:15 +0000
ROA not after: Tue 22 Jul 2025 14:33:15 +0000
asID: 397071
IP address blocks: 45.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89199 (0x15c6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 14:33:15 2025 GMT
Not After : Jul 22 14:33:15 2025 GMT
Subject: CN=68502b30-97a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:51:6a:07:71:f4:2b:c4:68:b4:82:9e:56:
df:04:06:5b:a3:e9:1c:a7:55:1b:53:d1:63:96:80:
0e:8e:de:0c:3b:e6:75:9f:db:05:90:7a:13:3d:c5:
91:81:5e:52:6e:b6:b3:2d:e3:cc:cc:94:d1:34:64:
ba:c4:4f:78:cf:0f:6e:3e:96:7f:3a:fe:83:f9:9a:
f7:80:0d:91:8c:74:b3:8f:54:ab:81:14:ad:ca:c0:
a6:90:b1:34:69:24:00:8a:92:56:16:09:f4:15:fc:
58:34:b0:59:6e:fd:ab:4f:98:d2:97:14:f3:d9:bf:
a8:e4:18:0c:44:b9:35:71:96:6b:ae:55:ed:d8:d9:
7f:eb:f0:24:be:45:a0:3f:4f:af:e7:3f:33:c5:5c:
5f:cb:f2:99:00:ec:07:58:1c:7f:c5:29:e5:0e:e0:
8a:17:ae:7c:45:0c:50:d5:36:8a:36:80:7d:ec:0f:
cf:f4:bb:b5:da:89:ae:e0:f3:e1:00:c4:f8:9f:42:
fa:36:96:56:d9:80:09:ef:47:de:b3:39:f9:11:cd:
f5:74:a9:b8:e1:80:89:b7:40:71:bd:db:ee:05:2b:
95:70:bc:5e:53:1e:4b:bd:36:64:8c:49:8a:2a:40:
3d:0b:ea:e1:b3:5e:4f:32:75:f9:07:65:6f:af:a4:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0E:4D:2E:5B:42:FE:71:8F:63:C0:D3:1E:C0:07:98:A7:92:47:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D92D23DA4ABE11F0BFE133E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
15:82:a2:99:8d:fd:b7:b8:fc:51:67:fa:85:47:e0:f0:02:b4:
2d:51:d3:82:4e:3f:ed:9b:28:9e:c4:a8:cc:81:79:af:f5:4a:
72:29:93:84:85:0f:a0:ee:38:0d:88:23:5d:07:9c:9b:42:18:
b0:3f:c8:9b:0f:13:b0:76:48:fe:3a:72:b6:d1:9f:06:7a:6b:
c3:32:30:c6:c5:35:f7:5c:af:6a:39:8a:a6:df:f0:2e:f8:b7:
94:80:86:32:d8:e8:21:13:a6:47:93:10:06:13:98:62:78:76:
b1:1f:82:10:a7:d2:ec:80:d9:79:77:66:0d:b6:57:34:08:a6:
da:2c:e1:c0:3f:bd:25:74:03:85:59:cd:c5:48:97:8f:2a:79:
6c:4d:1c:82:8b:c8:c3:f3:42:da:91:a6:61:bf:b9:bd:75:2d:
d5:fa:76:35:8a:b0:1c:ef:2d:fa:47:6f:9e:c9:fe:92:54:2b:
64:f5:92:6a:0c:ce:5b:2c:88:b0:7e:c4:bd:8b:a2:6f:7a:85:
8b:be:93:10:b6:08:6a:fd:d5:1e:ae:d3:82:a9:58:d0:25:e5:
73:59:f2:5e:1c:4c:a3:43:ce:d7:9c:18:41:0b:b1:60:a1:3e:
18:85:a1:eb:b3:cf:47:5d:f6:5a:7c:b1:fc:9f:cd:3d:6c:25:
fe:7c:cc:98
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVxvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE2MTQzMzE1WhcNMjUwNzIyMTQzMzE1WjAYMRYw
FAYDVQQDEw02ODUwMmIzMC05N2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0lRRagdx9CvEaLSCnlbfBAZbo+kcp1UbU9FjloAOjt4MO+Z1n9sFkHoT
PcWRgV5SbrazLePMzJTRNGS6xE94zw9uPpZ/Ov6D+Zr3gA2RjHSzj1SrgRStysCm
kLE0aSQAipJWFgn0FfxYNLBZbv2rT5jSlxTz2b+o5BgMRLk1cZZrrlXt2Nl/6/Ak
vkWgP0+v5z8zxVxfy/KZAOwHWBx/xSnlDuCKF658RQxQ1TaKNoB97A/P9Lu12omu
4PPhAMT4n0L6NpZW2YAJ70feszn5Ec31dKm44YCJt0BxvdvuBSuVcLxeUx5LvTZk
jEmKKkA9C+rhs15PMnX5B2Vvr6Ra1QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMsO
TS5bQv5xj2PA0x7AB5inkkfsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOTJEMjNEQTRBQkUxMUYwQkZFMTMzRTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOGMA0GCSqGSIb3DQEBCwUA
A4IBAQAVgqKZjf23uPxRZ/qFR+DwArQtUdOCTj/tmyiexKjMgXmv9UpyKZOEhQ+g
7jgNiCNdB5ybQhiwP8ibDxOwdkj+OnK20Z8GemvDMjDGxTX3XK9qOYqm3/Au+LeU
gIYy2OghE6ZHkxAGE5hieHaxH4IQp9LsgNl5d2YNtlc0CKbaLOHAP70ldAOFWc3F
SJePKnlsTRyCi8jD80LakaZhv7m9dS3V+nY1irAc7y36R2+eyf6SVCtk9ZJqDM5b
LIiwfsS9i6JveoWLvpMQtghq/dUertOCqVjQJeVzWfJeHEyjQ87XnBhBC7FgoT4Y
haHrs89HXfZafLH8n809bCX+fMyY
-----END CERTIFICATE-----
Generated at Sun Jul 6 08:48:48 2025 by rpki-client