Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70904D56477C11F08E206CA7DAE4EC9C.roa
File: 70904D56477C11F08E206CA7DAE4EC9C.roa (raw, json)
Hash identifier: DMllw6xX2pTQV9Cdkkam2/s0aAvWSo+Aerp0WXYFzLU=
Subject key identifier: 7E:2A:F5:8C:46:38:2B:E9:5B:CE:88:31:B7:D2:96:28:05:EB:4D:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70904D56477C11F08E206CA7DAE4EC9C.roa
Signing time: Thu 12 Jun 2025 11:00:24 +0000
ROA not before: Thu 12 Jun 2025 11:00:19 +0000
ROA not after: Fri 18 Jul 2025 11:00:19 +0000
asID: 21859
IP address blocks: 45.192.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88935 (0x15b67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 11:00:19 2025 GMT
Not After : Jul 18 11:00:19 2025 GMT
Subject: CN=684ab348-b1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:83:5c:67:09:ea:da:d9:14:b5:e3:2e:15:
0e:67:74:63:1f:60:dd:e9:72:d1:87:d5:02:95:2c:
7c:c0:c9:9a:0c:3e:e3:8f:1e:b1:98:de:64:ec:ff:
b1:49:b9:7f:b9:38:60:ae:74:04:b7:65:11:fb:92:
ef:78:81:c0:5e:e5:de:23:80:98:73:c9:ba:ab:80:
ef:ba:2c:a5:5a:17:93:c6:b0:85:2a:1f:53:4f:d2:
cc:fd:eb:db:07:bb:24:4e:33:1b:19:ae:0f:95:e5:
25:48:f1:44:c6:5e:66:c1:95:40:d8:ad:ff:01:c1:
0f:f3:ee:89:22:32:73:b6:e3:2a:0b:17:e0:1a:14:
54:8e:aa:a6:8a:d5:be:08:ea:8e:e6:ef:cb:95:fb:
dc:bb:94:be:52:ab:3a:d2:36:8a:11:37:35:f2:7a:
2f:3e:13:35:31:5a:ff:46:fc:56:62:21:51:06:90:
d6:07:ad:f9:01:0c:e1:19:c5:9e:eb:5e:84:a7:53:
2f:1e:18:69:75:10:0d:bf:7b:7c:fc:cd:db:56:89:
93:a0:3d:ee:22:4c:13:1a:1c:19:20:7a:4b:57:8e:
c9:18:b8:d2:36:a3:22:77:15:6b:d6:84:4d:38:55:
04:02:88:ba:bf:93:02:af:f7:a1:b7:72:6d:81:ba:
1a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2A:F5:8C:46:38:2B:E9:5B:CE:88:31:B7:D2:96:28:05:EB:4D:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70904D56477C11F08E206CA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:01:cf:51:fd:7b:91:e6:7f:19:0b:02:4e:05:dc:a1:36:8b:
bf:a1:f9:41:38:9b:82:86:be:1c:ba:76:2b:62:a4:5b:0c:bb:
83:3d:71:4a:67:cf:5d:fc:7f:bd:6c:ba:b7:90:72:88:5a:d2:
e8:60:43:5b:95:94:79:5e:06:34:6f:e5:e7:0f:d1:c8:2d:3f:
45:df:04:4b:2b:b9:9b:da:e0:2b:ea:8f:56:64:00:93:34:5f:
10:67:52:00:68:c3:41:5c:78:c7:e6:19:50:18:2d:83:8e:c4:
e1:6d:9a:02:ec:fb:c7:20:f1:f5:eb:13:98:9b:47:2a:63:25:
f0:5f:81:fd:2b:e5:26:d4:34:c7:8e:31:12:c8:9d:24:0f:4a:
9f:6a:55:3c:9c:c3:12:72:bc:04:cf:01:56:8e:cc:f5:36:c7:
35:87:02:52:33:6f:c2:60:3b:be:22:be:f4:3b:4f:4d:5a:f8:
9a:b4:a4:29:72:8a:51:3b:41:51:c6:5e:70:16:ae:5f:1f:fd:
d7:d8:da:55:99:b8:a3:bc:8c:df:18:dc:73:0b:3a:15:bc:49:
73:d7:68:6e:ba:30:d8:f8:d4:c9:11:fc:4b:80:bb:c2:ea:04:
ce:2d:4b:67:33:cb:54:e6:aa:9c:d0:93:70:8f:48:fb:73:30:
85:aa:1d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:25:17 2025 by rpki-client