Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06E3CFF0478F11F0BDCED29EDAE4EC9C.roa
File: 06E3CFF0478F11F0BDCED29EDAE4EC9C.roa (raw, json)
Hash identifier: YoeWnRQgX7n44Ori1TDAKPcoya+aGGkCcxwbYZF7htY=
Subject key identifier: 80:F3:FB:98:39:75:4A:C6:4A:94:C9:62:65:D9:D8:17:18:FE:7C:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B85
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06E3CFF0478F11F0BDCED29EDAE4EC9C.roa
Signing time: Thu 12 Jun 2025 13:13:27 +0000
ROA not before: Thu 12 Jun 2025 13:13:23 +0000
ROA not after: Tue 22 Jul 2025 13:13:23 +0000
asID: 40779
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88965 (0x15b85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 13:13:23 2025 GMT
Not After : Jul 22 13:13:23 2025 GMT
Subject: CN=684ad277-79f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:99:0e:c3:5e:09:f2:f0:3a:40:ae:47:37:
10:ab:7c:f9:38:f5:7e:18:33:dc:f1:66:da:3f:c8:
0f:3a:7e:91:a7:93:16:20:5a:31:99:48:40:42:10:
25:2f:9a:88:2f:ea:1e:bd:20:03:05:48:bb:d6:21:
bc:1a:ea:cf:66:f1:da:9f:7c:bd:c9:77:ba:75:65:
24:0c:53:14:b6:4f:29:5e:61:ce:a7:b7:be:da:53:
51:c3:33:c1:7c:65:fe:73:cc:94:91:82:34:0e:42:
2e:30:54:a2:b9:86:d4:b8:67:ff:ec:db:5f:46:ae:
71:2d:62:09:54:08:55:7c:ef:6a:e0:ce:14:b4:bd:
7e:55:10:8d:1f:04:15:8f:0f:60:b4:73:c1:8b:6f:
08:51:d1:2e:ce:24:42:8c:52:f6:db:9c:2c:04:62:
c6:83:19:9d:48:02:df:80:09:66:a1:45:f9:af:bb:
11:e1:b2:03:f2:bb:77:e5:9d:32:9b:e7:f2:61:62:
32:05:99:b8:e4:0f:43:bb:1d:19:a6:0a:1c:26:89:
89:69:ae:a4:74:f2:e6:75:0b:68:46:8e:23:eb:2c:
01:b4:28:65:b6:98:4c:5e:ed:98:d7:b8:69:ea:df:
65:98:8a:72:b0:82:6f:98:c7:fc:3c:58:04:a9:5d:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F3:FB:98:39:75:4A:C6:4A:94:C9:62:65:D9:D8:17:18:FE:7C:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06E3CFF0478F11F0BDCED29EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
05:07:c5:4d:11:2a:67:b2:e7:0a:a3:9f:15:1d:ca:f4:de:bc:
84:6e:d1:d7:93:d6:4c:88:1b:4d:72:c8:75:f9:3d:6e:73:f0:
59:3b:83:03:a7:36:5e:0b:2f:81:44:b5:77:7a:ba:8f:21:3a:
d3:fc:39:04:dc:27:d7:ce:87:ad:60:0e:dd:9d:a4:5f:a4:9c:
c1:a0:55:49:7f:67:04:bd:44:59:38:26:ad:74:08:52:4f:78:
1a:f4:ef:7b:15:24:8b:56:be:67:44:8a:85:6f:07:89:0c:fb:
1c:64:f6:ee:02:3b:8d:a8:fc:d9:a0:ce:bd:e5:55:6e:2a:9b:
14:30:40:5b:2d:74:cc:08:c1:1c:6a:d5:01:17:fc:4b:d5:f6:
ee:f7:8e:06:87:39:bb:fc:be:7b:1d:94:a7:d7:32:fa:b1:b5:
df:36:53:08:92:ab:97:c2:58:85:cf:d7:55:86:6d:4d:bd:59:
70:5d:c9:eb:8e:46:46:ce:b6:76:50:35:1d:58:0d:b1:1a:40:
90:6b:76:23:57:f2:6d:40:4d:a8:ea:f4:4e:96:86:3a:07:95:
47:1a:f8:d3:fe:c3:34:b2:7e:21:95:7c:b6:2b:8d:39:59:e8:
9c:a4:aa:a7:f6:bc:bc:10:ae:89:f3:f4:90:e5:39:84:f5:b0:
be:f2:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:30:09 2025 by rpki-client