Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE6D58C82F3511F0A8E7C6CEDAE4EC9C.roa
File: DE6D58C82F3511F0A8E7C6CEDAE4EC9C.roa (raw, json)
Hash identifier: 4bXl2/pTmt/C2QDiHaoD+EnH0zuKuCnSPMHrubjlzpE=
Subject key identifier: EE:7F:D7:1B:84:73:43:1F:C2:CF:B7:1A:4D:AF:E9:D8:FF:5E:41:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015379
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE6D58C82F3511F0A8E7C6CEDAE4EC9C.roa
Signing time: Mon 12 May 2025 13:34:46 +0000
ROA not before: Mon 12 May 2025 13:34:42 +0000
ROA not after: Thu 19 Jun 2025 13:34:42 +0000
asID: 6079
IP address blocks: 45.202.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86905 (0x15379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 13:34:42 2025 GMT
Not After : Jun 19 13:34:42 2025 GMT
Subject: CN=6821f8f6-e6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:8a:2b:c5:49:cf:b6:d4:15:d8:70:26:b1:
34:e3:4d:35:c1:84:5f:e0:d1:79:67:1f:9a:8b:92:
38:6f:63:cb:c6:be:15:d9:10:8e:23:83:79:e9:cd:
e3:50:d1:5f:34:f2:c0:98:a5:91:c9:14:9e:c1:17:
57:36:a3:30:cf:1a:cd:db:45:6e:70:ae:91:a3:a5:
c6:00:ac:a0:66:7a:a8:0f:b0:fe:c5:5e:27:30:81:
85:ff:18:29:e9:dc:40:a7:ed:65:c9:e2:4d:48:a1:
b4:6e:62:05:af:e4:9c:d4:b4:d3:f2:f9:4a:5a:e5:
34:13:d6:4c:9c:09:f3:d9:ad:e5:18:fc:34:7b:91:
35:e5:06:ab:cc:84:7a:9e:47:2f:2d:4b:c5:21:cd:
38:8b:31:5c:bd:68:95:02:26:83:40:89:2a:1c:c2:
fa:6d:b0:72:f4:01:ef:b1:93:37:2d:3f:b6:6d:7c:
ec:c0:40:a7:3f:b1:26:c2:07:70:ee:ff:90:4b:36:
10:19:5e:c2:05:2b:2d:1c:b8:b2:05:20:90:43:3a:
0f:d1:c6:ca:7e:a0:e3:fc:17:15:be:da:4a:e7:bd:
f3:9b:bb:76:e2:e8:87:27:d4:4e:0b:64:1f:49:f3:
4a:05:26:a9:5f:92:7e:09:8a:fb:1f:65:be:d9:83:
a4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7F:D7:1B:84:73:43:1F:C2:CF:B7:1A:4D:AF:E9:D8:FF:5E:41:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE6D58C82F3511F0A8E7C6CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.68.0/24
Signature Algorithm: sha256WithRSAEncryption
59:40:98:03:60:b2:6f:f8:cf:2b:2d:10:bc:98:6a:1b:65:34:
82:67:18:c1:a3:43:d9:35:50:42:5a:ac:d1:ec:8d:2a:17:b7:
67:40:0e:51:13:d2:0b:b7:b2:74:fd:8f:18:2c:b9:5d:65:cf:
3a:b1:ad:4f:01:cc:4c:c4:15:27:81:53:a0:f4:8e:63:e8:da:
b5:dc:88:44:58:ec:17:60:93:76:2d:e6:ae:c8:45:c8:c2:3f:
d7:6c:d6:d6:3b:b7:68:3e:66:eb:0e:50:be:c1:85:21:92:ad:
cd:62:85:33:39:d0:64:a0:8c:81:bc:61:c7:e3:5f:05:40:ca:
e5:60:5d:1c:20:96:f7:8b:e3:1a:90:e7:04:23:8a:27:72:25:
59:f2:34:66:cf:a0:14:f0:00:2b:d6:27:7e:48:44:d6:87:2e:
ec:07:8c:04:8f:ac:f2:76:cb:e2:15:4d:f6:6f:8d:6b:b5:40:
7c:ef:5b:4b:fc:08:6c:42:dc:24:98:8e:e4:fd:56:57:3b:e6:
80:eb:b1:38:94:a0:5a:5b:4f:87:88:a7:8c:59:1b:a4:08:9c:
40:ce:10:10:39:be:ae:15:1d:b3:3b:9b:2b:ae:e6:57:7d:a6:
51:d7:79:c9:a0:41:02:f0:0c:4d:ba:31:36:dd:f4:d2:72:ca:
d3:17:0b:3b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVN5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTEyMTMzNDQyWhcNMjUwNjE5MTMzNDQyWjAYMRYw
FAYDVQQDEw02ODIxZjhmNi1lNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwwqKK8VJz7bUFdhwJrE04001wYRf4NF5Zx+ai5I4b2PLxr4V2RCOI4N5
6c3jUNFfNPLAmKWRyRSewRdXNqMwzxrN20VucK6Ro6XGAKygZnqoD7D+xV4nMIGF
/xgp6dxAp+1lyeJNSKG0bmIFr+Sc1LTT8vlKWuU0E9ZMnAnz2a3lGPw0e5E15Qar
zIR6nkcvLUvFIc04izFcvWiVAiaDQIkqHML6bbBy9AHvsZM3LT+2bXzswECnP7Em
wgdw7v+QSzYQGV7CBSstHLiyBSCQQzoP0cbKfqDj/BcVvtpK573zm7t24uiHJ9RO
C2QfSfNKBSapX5J+CYr7H2W+2YOk4wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFO5/
1xuEc0Mfws+3Gk2v6dj/XkF4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERTZENThDODJGMzUxMUYwQThFN0M2Q0VEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpEMA0GCSqGSIb3DQEBCwUA
A4IBAQBZQJgDYLJv+M8rLRC8mGobZTSCZxjBo0PZNVBCWqzR7I0qF7dnQA5RE9IL
t7J0/Y8YLLldZc86sa1PAcxMxBUngVOg9I5j6Nq13IhEWOwXYJN2LeauyEXIwj/X
bNbWO7doPmbrDlC+wYUhkq3NYoUzOdBkoIyBvGHH418FQMrlYF0cIJb3i+MakOcE
I4onciVZ8jRmz6AU8AAr1id+SETWhy7sB4wEj6zydsviFU32b41rtUB871tL/Ahs
QtwkmI7k/VZXO+aA67E4lKBaW0+HiKeMWRukCJxAzhAQOb6uFR2zO5srruZXfaZR
13nJoEEC8AxNujE23fTScsrTFws7
-----END CERTIFICATE-----
Generated at Tue Jun 3 09:40:14 2025 by rpki-client