Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08BFA7DA478B11F0AB6DC285DAE4EC9C.roa
File: 08BFA7DA478B11F0AB6DC285DAE4EC9C.roa (raw, json)
Hash identifier: y/jjX6PWCEiI+v33bMrGKwFCfwrEFA+X5j7T5WURRrM=
Subject key identifier: 30:F4:B6:97:39:93:3B:82:BB:49:82:F5:C3:76:46:F6:32:A2:8B:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08BFA7DA478B11F0AB6DC285DAE4EC9C.roa
Signing time: Thu 12 Jun 2025 12:44:53 +0000
ROA not before: Thu 12 Jun 2025 12:44:47 +0000
ROA not after: Tue 22 Jul 2025 12:44:47 +0000
asID: 395886
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88954 (0x15b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 12:44:47 2025 GMT
Not After : Jul 22 12:44:47 2025 GMT
Subject: CN=684acbc4-e0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:bd:d3:a3:27:7f:e4:b0:a1:af:65:2a:98:
36:94:f4:79:07:15:e0:4e:e9:4c:a0:76:b3:5a:6f:
0c:95:6a:db:be:c4:57:6f:69:7a:4c:91:6d:2f:d6:
00:15:85:8f:2f:a5:ea:16:d3:90:ca:6a:f0:4f:dc:
0f:8f:e2:6b:08:c9:0d:3f:d1:e5:f8:d5:6b:c0:51:
9e:c9:f0:a0:76:c9:45:fe:42:8f:b5:bd:6d:65:1b:
47:2c:70:13:cf:bd:b3:44:8c:1d:90:88:39:12:71:
09:d5:75:01:5d:e5:43:56:78:28:c1:ac:a2:2e:cc:
db:8e:20:f1:f4:57:81:2e:16:03:12:a3:f9:21:5e:
67:7d:97:b5:0f:67:26:76:6e:b3:43:f9:98:b8:82:
8f:e4:5b:e4:15:dd:c6:39:67:20:ad:da:9e:4b:f2:
6c:28:92:ed:0d:80:60:a0:cb:91:65:63:f9:b5:b9:
3e:a1:14:38:88:95:16:70:79:d4:18:cb:44:de:9e:
c3:e6:b9:8a:00:96:60:ba:de:a9:f7:6f:d8:88:df:
49:8f:cf:05:31:80:b2:53:e4:3f:0e:cf:60:7c:17:
b0:80:1d:f4:02:87:cb:68:2c:f6:8e:76:74:a4:e4:
2f:7f:50:8b:8d:9e:44:c4:b2:a7:ac:72:35:23:2f:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F4:B6:97:39:93:3B:82:BB:49:82:F5:C3:76:46:F6:32:A2:8B:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08BFA7DA478B11F0AB6DC285DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
03:7a:a2:6e:31:60:6b:30:ac:f9:53:a1:ed:81:13:a8:3c:b7:
bb:3b:38:f1:ad:bd:02:19:df:97:a7:1c:25:0c:15:87:87:71:
12:1e:f0:3f:54:26:fe:6f:0d:8a:95:ea:7b:2f:8d:cb:55:25:
3f:35:9e:e7:48:8d:bd:29:1b:85:78:c3:18:a6:86:6b:b2:5c:
96:c6:6d:37:f7:93:80:eb:e4:9f:7e:46:44:6a:43:a4:39:4f:
61:45:06:c9:d1:1e:48:41:8c:b2:7e:71:b3:35:33:86:b6:16:
20:31:4e:b7:b5:c2:7f:e5:0d:30:8c:4b:01:82:e7:36:0e:3d:
d0:55:61:e7:2a:b3:48:b4:62:64:88:d8:39:3d:39:98:c5:66:
33:9c:a6:4c:cc:b7:22:31:36:cd:12:9f:60:49:72:33:06:2e:
07:89:e8:f9:c9:81:81:80:27:36:b1:b5:3c:6e:1c:e9:e8:99:
a8:a5:d5:21:01:b8:a8:43:74:3d:6c:23:2d:50:73:36:ad:d1:
d7:a5:ae:6b:2c:78:af:b2:32:02:f0:a2:3b:c8:a5:62:d0:db:
7c:6a:88:8b:45:49:2e:dd:ce:5c:88:19:39:69:1f:df:af:00:
5e:09:f1:ab:f0:7d:db:d2:f6:d2:54:2c:d4:1b:42:29:86:06:
f0:fc:ea:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:39:25 2025 by rpki-client