Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBB3A84838A011F09107B986DAE4EC9C.roa
File: DBB3A84838A011F09107B986DAE4EC9C.roa (raw, json)
Hash identifier: uCD3vCEvaXgdd/4EgzMcBjgDsiRYoDHZ0qbCW5X0xr4=
Subject key identifier: 0D:01:04:14:6B:22:1E:D0:5A:0C:21:6F:C6:D0:3E:33:13:41:28:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015752
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBB3A84838A011F09107B986DAE4EC9C.roa
Signing time: Sat 24 May 2025 13:13:18 +0000
ROA not before: Sat 24 May 2025 13:13:13 +0000
ROA not after: Mon 01 Dec 2025 13:13:13 +0000
asID: 55720
IP address blocks: 45.207.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87890 (0x15752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 13:13:13 2025 GMT
Not After : Dec 1 13:13:13 2025 GMT
Subject: CN=6831c5ee-9285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:2a:18:8d:c9:75:c0:aa:76:c2:9e:24:d4:
26:a3:06:ce:ef:73:ac:cb:14:33:61:8d:c1:60:12:
ae:e4:4f:0d:6f:bc:74:ad:7e:60:38:b4:55:c9:2e:
a1:99:ac:40:8f:a6:51:dc:0e:41:c7:bf:8f:29:fe:
90:02:80:ac:35:0e:b4:11:d8:0e:a1:44:8b:1f:e9:
8c:6f:6a:bd:03:b5:f6:d7:a9:23:bb:07:9f:d6:b2:
60:69:33:a1:fb:ae:5b:73:c9:8b:91:fb:00:e1:1c:
13:a8:73:83:5e:86:4e:5d:3c:3b:17:62:4c:45:53:
77:b7:91:07:2e:0f:b7:6f:a1:a4:56:89:71:b1:b4:
ac:d8:88:b8:31:60:d0:13:92:a3:87:35:b7:db:6e:
3a:37:19:62:fe:2d:14:5b:88:78:37:11:ea:b0:d8:
99:3e:3d:a5:66:db:fe:8e:d7:60:f2:b0:df:8d:9c:
64:ce:d1:0b:03:9a:d0:70:08:2b:c7:83:49:3b:43:
8b:d2:c8:2e:8d:f0:0a:c6:78:59:f8:b0:cf:9d:9f:
d7:32:2c:80:08:a6:b4:d3:0f:06:97:fc:e0:d2:bd:
99:c2:32:81:62:e4:fc:e6:29:89:6d:0a:c0:58:5a:
3b:a0:1b:70:00:38:0a:7e:25:ee:2b:9b:d5:b1:71:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:04:14:6B:22:1E:D0:5A:0C:21:6F:C6:D0:3E:33:13:41:28:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBB3A84838A011F09107B986DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b8:f5:c3:c4:62:52:54:c2:96:bb:a0:ef:ed:c3:0f:d7:29:
75:d0:a9:ca:eb:36:6d:10:33:10:da:bb:97:60:25:f0:64:75:
36:54:5c:d6:62:c6:6c:12:a2:e6:a6:64:b3:45:63:71:40:1b:
3a:fc:8d:1d:77:68:05:e5:9b:2b:32:3f:52:79:31:35:5e:0b:
68:f2:54:a2:88:dc:87:9a:22:a8:f4:1b:2d:b5:06:d3:c0:21:
cc:3b:0c:49:ca:6d:ce:d0:df:17:36:28:da:2e:60:85:f4:cd:
70:5f:73:14:c4:54:5e:d9:90:3c:54:c9:96:58:4b:4a:51:68:
7d:de:59:3f:c7:6a:c6:23:47:dc:d8:88:03:d2:de:9b:c8:6c:
34:c1:b8:42:da:e6:f7:38:7d:6b:1e:0d:53:18:fb:e0:8b:fe:
95:a8:0e:2e:67:b5:03:26:05:b6:02:1c:8d:f0:79:67:10:3f:
63:d6:d7:94:8c:41:c3:e5:51:d2:a7:5f:a0:03:4a:12:47:41:
ee:0b:e9:8b:5a:55:79:c0:34:f5:65:e9:29:bb:fb:01:4a:1b:
6e:b7:e6:52:d3:db:86:e6:f9:5b:45:13:c4:ec:cb:6a:6b:c4:
17:71:ae:94:28:c9:a8:87:6d:a9:aa:fa:bf:2e:85:8c:e7:c2:
a6:69:76:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:24:28 2025 by rpki-client