Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B0D7D9E460311F0964AD68FDAE4EC9C.roa
File: 4B0D7D9E460311F0964AD68FDAE4EC9C.roa (raw, json)
Hash identifier: WLJoz8rVnYlkB3Plp5R5bYfoIvCW8vmTOqe+3vQXQ5A=
Subject key identifier: 9D:0E:EC:D7:40:BB:FD:25:E4:64:04:93:83:A3:72:32:C6:AF:8D:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015AF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B0D7D9E460311F0964AD68FDAE4EC9C.roa
Signing time: Tue 10 Jun 2025 14:00:41 +0000
ROA not before: Tue 10 Jun 2025 14:00:36 +0000
ROA not after: Wed 05 Nov 2025 14:00:36 +0000
asID: 148994
IP address blocks: 45.200.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88823 (0x15af7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 14:00:36 2025 GMT
Not After : Nov 5 14:00:36 2025 GMT
Subject: CN=68483a89-ee97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:a2:1e:d6:5d:5c:82:42:c8:9e:56:c5:06:
14:51:5f:a6:59:38:b5:18:64:17:b3:fc:04:15:c1:
e0:65:17:e2:4e:e2:8e:2a:de:f2:bd:8d:88:92:18:
65:92:72:ca:65:9f:4d:8e:8c:04:9b:47:d0:67:41:
39:3c:ee:4a:17:60:19:5a:71:73:01:27:11:46:30:
39:e9:54:3d:0a:16:e3:66:61:4a:dc:1d:8f:af:02:
bf:23:26:a3:e2:ef:b1:33:e0:e4:a2:a6:97:53:17:
5b:a1:46:75:c6:74:4f:d9:6f:72:f8:3a:b2:57:1c:
8f:de:ee:d6:65:85:ad:77:7c:7a:a4:7a:b3:a6:2f:
e8:a4:14:14:55:4b:4f:9b:03:ba:f0:73:b5:da:66:
a5:be:5a:f4:65:71:77:6d:54:f1:6e:06:34:93:b1:
95:86:cf:14:3e:0b:66:e4:c5:c5:e9:e3:ce:0b:ea:
95:3e:4b:87:58:61:22:48:a2:9d:2e:58:a9:2f:38:
60:31:b3:11:89:df:93:f3:01:e2:be:6e:ba:9b:b0:
a3:46:a6:ac:c2:e0:9c:b1:73:c2:11:aa:eb:45:56:
c4:e9:7c:4c:fb:3e:94:f9:13:5e:e6:1f:01:09:a7:
39:bc:93:66:60:8f:67:97:60:07:7e:92:3a:3e:83:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0E:EC:D7:40:BB:FD:25:E4:64:04:93:83:A3:72:32:C6:AF:8D:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B0D7D9E460311F0964AD68FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:93:0c:6c:37:f1:50:1f:93:8b:6b:52:8e:d7:0a:2c:fd:b9:
ef:28:95:db:99:a4:ba:b9:90:41:e0:a8:ab:cc:fb:39:70:1f:
af:95:31:ca:61:97:67:fc:01:e8:02:45:bb:fe:a4:c9:a2:51:
2d:91:ee:11:5a:c6:35:8a:03:ff:6b:57:0e:8c:fe:d4:3c:15:
bb:da:96:a6:eb:95:03:81:7c:20:de:e7:c1:28:a2:02:3d:fc:
8b:b2:63:06:18:37:76:ee:a5:5d:d0:d3:78:d8:d7:34:ba:5b:
9d:62:b7:c9:f6:28:dd:d1:3d:7d:af:18:41:6b:40:c1:cf:ba:
8f:0d:41:1b:83:3b:36:df:6c:5c:d3:ee:9b:22:44:e3:4d:31:
63:30:ee:02:fb:08:6d:d7:95:a3:42:97:40:df:ae:6e:2c:d7:
85:50:bd:95:46:a2:57:d1:c6:e9:93:35:3b:3e:81:4a:97:8d:
f1:69:d2:78:04:d2:88:31:9b:a4:38:af:a0:b2:85:01:c2:99:
de:fc:f7:7d:c9:90:04:f8:2f:29:cc:63:4d:3c:15:9d:37:80:
04:e4:12:cd:c7:7d:a4:c0:61:23:ad:6b:13:4d:f2:78:71:0f:
3d:9a:67:f5:25:54:8a:e5:2b:56:72:57:20:aa:63:a5:43:ad:
3a:c7:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:53:39 2025 by rpki-client