Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A55B4DD4477B11F09748A3A2DAE4EC9C.roa
File: A55B4DD4477B11F09748A3A2DAE4EC9C.roa (raw, json)
Hash identifier: s3qgvceJ6GTETvBGO0vFnVZbZEIqO+COsCwU8awY3Zo=
Subject key identifier: B3:4A:F9:C8:1D:33:7B:2B:B6:8C:93:7E:E8:B8:3A:D2:4A:11:3D:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A55B4DD4477B11F09748A3A2DAE4EC9C.roa
Signing time: Thu 12 Jun 2025 10:54:43 +0000
ROA not before: Thu 12 Jun 2025 10:54:38 +0000
ROA not after: Sun 20 Jul 2025 10:54:38 +0000
asID: 133180
IP address blocks: 45.192.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 06:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88933 (0x15b65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 10:54:38 2025 GMT
Not After : Jul 20 10:54:38 2025 GMT
Subject: CN=684ab1f3-6036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:47:ac:10:cb:56:9b:57:80:20:70:9b:8b:
a6:1f:48:a3:cc:a5:41:d0:77:72:83:6c:80:7d:bb:
24:59:82:f9:42:99:89:45:fa:4c:c9:16:7b:f0:16:
31:b0:12:e7:2a:6b:a4:86:2c:8f:27:51:2c:39:ad:
84:3d:de:6a:3e:dc:6c:da:2f:90:b4:53:03:a8:d2:
45:93:7a:dc:c8:85:53:47:bb:ed:47:a5:13:7e:b8:
d0:21:20:af:d1:76:0a:75:ce:2c:19:a5:1d:23:4c:
ec:ee:43:9a:71:2e:a5:ef:f8:0c:7a:a6:ba:f4:1d:
99:39:8c:b3:b3:a1:9a:23:c1:f3:2a:48:98:b8:14:
f5:fa:4c:8b:ad:d6:48:52:b5:96:be:d8:7d:73:77:
67:48:de:a2:3c:35:1b:2b:fc:f8:d0:57:69:14:74:
7d:95:c9:c6:54:e1:95:87:8c:c7:67:3d:63:ce:ac:
31:0b:11:db:1d:13:de:c7:cc:f9:07:82:69:1f:78:
4d:45:02:a6:d5:4c:ca:7d:8e:0f:56:d8:6f:8f:36:
89:c6:ed:cc:10:0d:0a:71:17:cf:f5:f5:d8:4a:d4:
4e:4f:94:7a:b8:f8:d3:90:2e:9a:56:e9:32:a0:b0:
36:0b:61:22:20:96:73:fb:a8:45:f0:0a:d3:e0:64:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4A:F9:C8:1D:33:7B:2B:B6:8C:93:7E:E8:B8:3A:D2:4A:11:3D:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A55B4DD4477B11F09748A3A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.2.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a3:59:80:47:06:52:97:ac:fc:56:5a:07:54:87:f3:6f:3a:
d5:eb:5b:17:04:34:26:0b:0e:62:97:0f:cd:78:79:27:07:48:
61:e3:bb:e6:92:04:2e:17:d1:1d:7a:f0:94:e4:4f:94:d3:b2:
bd:dc:c5:6c:1f:ff:51:3d:4d:1a:33:2f:ab:ba:58:2a:2e:82:
59:3c:e6:c4:f7:f3:f1:bf:10:85:fd:6f:e7:17:15:08:d5:e8:
4b:77:4d:fc:79:50:56:05:98:e4:13:33:d0:9b:58:4c:60:39:
67:e0:bd:f8:73:8a:de:d7:58:96:8c:d5:20:0d:ad:c0:22:bd:
7d:6c:ef:d9:b3:77:34:30:05:ca:36:6e:02:80:4d:5b:37:ab:
99:81:bd:63:89:57:1e:67:27:f9:b4:cd:4d:dd:b1:2e:7d:ac:
28:ea:35:67:d2:42:bd:1a:0c:04:a9:9a:86:57:da:41:8b:7b:
a6:d2:44:be:bc:5d:6b:87:47:9a:86:e1:ed:3a:2f:6a:69:30:
61:a2:85:cd:f1:26:82:87:70:e8:05:14:3f:2e:f7:37:42:22:
82:14:81:25:b8:06:3a:d5:3c:30:db:f3:f8:b7:4c:b0:90:eb:
83:57:7e:90:e6:d2:0b:44:4d:55:67:66:2f:dc:2a:6f:89:43:
36:bd:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:00:22 2025 by rpki-client