Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/007FD3DA490511F087A7C6B3DAE4EC9C.roa
File: 007FD3DA490511F087A7C6B3DAE4EC9C.roa (raw, json)
Hash identifier: q+i0D8vlreAINr5MlzLqgJ4Vqsswi8xrXYql1cw1AtI=
Subject key identifier: A0:D4:81:20:6D:0B:4E:BD:53:B6:04:AF:9F:C7:91:6C:5A:F4:BC:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/007FD3DA490511F087A7C6B3DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 09:50:28 +0000
ROA not before: Sat 14 Jun 2025 09:50:24 +0000
ROA not after: Sun 20 Jul 2025 09:50:24 +0000
asID: 174
IP address blocks: 45.195.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89071 (0x15bef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 09:50:24 2025 GMT
Not After : Jul 20 09:50:24 2025 GMT
Subject: CN=684d45e4-0002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:3e:b4:61:92:34:0d:72:7b:60:3d:01:d3:
30:0a:2a:13:91:a2:9c:03:90:a5:74:b3:e8:e9:c5:
4c:50:67:7f:67:4f:ad:18:ad:2b:e5:6f:f6:9a:f9:
98:e9:8f:50:32:8d:c9:c2:fd:17:23:d0:1f:9c:21:
28:25:9b:99:69:fc:09:02:ec:99:c7:49:c7:e9:17:
8c:04:2c:a7:ed:de:1d:20:66:06:78:38:34:c6:ee:
90:ec:5f:48:a2:96:44:35:e3:23:d0:e6:0e:b9:00:
30:75:60:76:c6:05:f8:17:c1:e1:69:ce:29:73:48:
ed:8b:fa:85:f9:fa:95:91:05:47:f4:5a:54:b9:6d:
99:a1:2f:1a:84:bb:1c:bf:d3:b7:4f:9f:09:be:19:
6e:d9:49:a6:08:b5:57:7a:92:8e:02:a7:5a:ee:80:
d2:4d:43:79:43:8a:79:82:32:8b:59:be:6f:b4:d3:
bb:2a:af:99:bf:45:c0:33:30:db:f6:5a:37:c4:05:
c0:eb:a0:ed:f4:93:9d:d9:65:5a:d4:f0:c2:ee:1c:
13:c4:5d:c4:64:37:11:ed:5a:70:08:8f:30:9b:b2:
aa:79:85:76:f9:05:3a:e4:d1:79:c5:ae:5e:5e:5c:
d8:98:f2:f3:68:44:08:81:c1:a9:52:bc:92:5f:46:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D4:81:20:6D:0B:4E:BD:53:B6:04:AF:9F:C7:91:6C:5A:F4:BC:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/007FD3DA490511F087A7C6B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.244.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:d6:69:96:91:22:7a:42:10:7c:9f:ce:96:15:ca:5a:07:30:
1c:9c:39:a4:1c:5a:13:6d:d9:c6:46:be:e6:c9:8d:1b:25:80:
f7:09:86:4a:f6:16:01:9c:27:4a:8a:78:54:2e:d9:cd:d6:d7:
07:ff:2d:9e:22:af:00:1f:ae:a9:62:be:be:07:1b:d0:9a:89:
b0:53:cf:9b:93:7d:75:d4:a3:e6:b4:89:ed:b3:ca:a5:dd:d5:
70:79:c3:04:67:e1:57:91:20:ec:b3:2f:47:6f:42:20:93:3d:
51:86:eb:e4:a3:4c:74:fa:1b:90:fb:bc:fd:67:89:fe:48:47:
5f:66:26:27:1c:78:62:bc:6b:37:e5:84:83:82:8f:3c:0b:fd:
47:37:10:c3:8a:dc:88:c8:65:ab:c5:56:c7:7f:0a:51:48:29:
c7:57:9e:32:7b:9a:c4:a0:68:1a:4f:a1:7c:8f:f0:e5:77:92:
f2:39:37:84:3f:64:de:3c:4d:c9:70:37:32:2d:4c:c0:b8:29:
96:65:d4:08:aa:af:8a:70:31:eb:d6:30:69:61:50:58:21:d0:
cc:61:a9:6b:e0:c8:08:ed:25:55:20:3d:c7:d7:97:fd:22:60:
9d:c8:69:be:7b:d3:f0:85:53:95:0e:91:09:b6:37:2e:9d:39:
29:b5:13:73
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVvvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE0MDk1MDI0WhcNMjUwNzIwMDk1MDI0WjAYMRYw
FAYDVQQDEw02ODRkNDVlNC0wMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq3E+tGGSNA1ye2A9AdMwCioTkaKcA5CldLPo6cVMUGd/Z0+tGK0r5W/2
mvmY6Y9QMo3Jwv0XI9AfnCEoJZuZafwJAuyZx0nH6ReMBCyn7d4dIGYGeDg0xu6Q
7F9IopZENeMj0OYOuQAwdWB2xgX4F8Hhac4pc0jti/qF+fqVkQVH9FpUuW2ZoS8a
hLscv9O3T58Jvhlu2UmmCLVXepKOAqda7oDSTUN5Q4p5gjKLWb5vtNO7Kq+Zv0XA
MzDb9lo3xAXA66Dt9JOd2WVa1PDC7hwTxF3EZDcR7VpwCI8wm7KqeYV2+QU65NF5
xa5eXlzYmPLzaEQIgcGpUrySX0YHhwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKDU
gSBtC069U7YEr5/HkWxa9LxcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMDdGRDNEQTQ5MDUxMUYwODdBN0M2QjNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcP0MA0GCSqGSIb3DQEBCwUA
A4IBAQBO1mmWkSJ6QhB8n86WFcpaBzAcnDmkHFoTbdnGRr7myY0bJYD3CYZK9hYB
nCdKinhULtnN1tcH/y2eIq8AH66pYr6+BxvQmomwU8+bk3111KPmtInts8ql3dVw
ecMEZ+FXkSDssy9Hb0Igkz1Rhuvko0x0+huQ+7z9Z4n+SEdfZiYnHHhivGs35YSD
go88C/1HNxDDityIyGWrxVbHfwpRSCnHV54ye5rEoGgaT6F8j/Dld5LyOTeEP2Te
PE3JcDcyLUzAuCmWZdQIqq+KcDHr1jBpYVBYIdDMYalr4MgI7SVVID3H15f9ImCd
yGm+e9PwhVOVDpEJtjcunTkptRNz
-----END CERTIFICATE-----
Generated at Thu Jun 19 03:05:33 2025 by rpki-client