Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93765654482F11F0889285C8DAE4EC9C.roa
File: 93765654482F11F0889285C8DAE4EC9C.roa (raw, json)
Hash identifier: Nv6fFfpcHkW6vc0gbUvLZRLvsWGgvTWSuAwo9+AMrG8=
Subject key identifier: 52:03:DD:7A:23:02:6E:0E:15:34:7D:FE:02:AB:DC:CF:55:14:5E:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93765654482F11F0889285C8DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 08:22:43 +0000
ROA not before: Fri 13 Jun 2025 08:22:38 +0000
ROA not after: Mon 14 Jul 2025 08:22:38 +0000
asID: 271916
IP address blocks: 45.207.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Jun 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88992 (0x15ba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 08:22:38 2025 GMT
Not After : Jul 14 08:22:38 2025 GMT
Subject: CN=684bdfd3-783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:3a:0e:4e:22:f3:63:8e:2b:b2:a4:e1:9e:
f1:37:97:2d:18:3d:40:d8:b4:05:a1:8e:61:bd:a7:
2d:ed:7d:d9:77:9d:c2:ba:3b:33:a1:6e:63:8b:ec:
f8:63:5c:84:af:0e:b9:2f:9d:5c:b7:5c:16:16:cf:
77:9f:dd:7d:f5:ba:1a:9a:bc:8c:ff:b1:e2:27:f5:
4d:d6:e2:7a:28:6b:67:4c:66:0c:5a:22:22:62:e1:
4b:f7:42:45:21:1c:bb:12:6c:28:ec:1e:21:9c:83:
3c:b2:1d:66:67:63:64:f0:80:21:bf:eb:af:9e:ea:
91:ea:e7:d3:de:b6:86:4b:f0:be:19:74:2e:4b:90:
e3:af:6e:b0:5d:50:4d:4d:db:6e:f6:3d:81:73:62:
3d:f9:1f:33:47:d6:e0:27:63:44:0f:a2:b6:e9:30:
6c:44:8c:ca:e2:e0:78:a1:f7:87:d1:cb:4b:17:bc:
a6:b8:d9:93:28:0a:35:ac:52:38:8b:86:8e:3d:4a:
58:34:63:13:1b:f8:ed:d7:d7:dd:da:05:7f:e8:72:
1e:a0:08:05:28:05:3c:85:76:98:ef:64:20:65:ca:
20:ae:5a:73:7a:5c:83:e1:6e:c0:c9:5b:1d:c3:57:
5b:53:0b:9d:8d:e1:24:07:b2:bf:ad:43:3e:b6:62:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:03:DD:7A:23:02:6E:0E:15:34:7D:FE:02:AB:DC:CF:55:14:5E:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93765654482F11F0889285C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:32:4b:90:eb:a9:42:08:ab:9e:03:d3:2b:c1:c1:d4:24:d1:
81:f2:64:da:c2:27:9f:79:73:63:7f:29:0d:8e:a3:12:fb:23:
24:65:2e:3f:ba:2e:8a:d1:9c:64:bb:73:60:ac:37:3b:ec:76:
f9:e6:b0:ed:a7:ee:0a:25:2c:7e:0f:bb:9c:63:4f:7b:1b:94:
65:5a:2f:4e:a4:03:56:aa:36:48:f5:fa:f4:1a:f0:24:4c:cc:
2f:d5:0e:ce:7b:a9:b9:07:8b:ea:e2:ab:19:77:42:5a:b9:c8:
75:1a:2f:fe:41:ce:02:0e:70:a3:e4:34:17:a1:3c:54:b8:cf:
ba:8e:5e:75:ac:14:c8:a2:13:fd:44:5f:59:f9:3e:5a:0e:cf:
e6:53:b5:a5:a0:f3:5d:51:15:c4:e8:3e:ea:c9:7e:73:ac:50:
00:f2:38:81:45:01:fa:70:cf:54:ea:42:73:86:21:24:c8:f5:
bb:94:63:45:2c:a3:76:e2:6b:93:3c:bb:89:6e:1b:78:be:ef:
2d:92:b8:69:cf:11:8c:9a:e9:9f:1f:40:52:bf:83:71:91:c0:
1d:12:3e:cc:bb:9f:1f:89:da:86:5b:ca:08:2f:48:80:cb:0e:
8b:16:07:8f:6f:51:8c:fa:98:ae:d0:49:00:1a:30:b4:a5:2f:
80:4a:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 15:43:51 2025 by rpki-client