Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7F38F1C1A8D11F0BF5795CB6DB8BCC6.roa
File: B7F38F1C1A8D11F0BF5795CB6DB8BCC6.roa (raw, json)
Hash identifier: DfqQocGKbADezTnEZMOtNTpQo6o1AUucREe9WUXmJUs=
Subject key identifier: DC:D1:F3:38:C4:AE:94:1C:4E:33:C6:83:4F:31:CC:22:81:55:6B:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014C8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7F38F1C1A8D11F0BF5795CB6DB8BCC6.roa
Signing time: Wed 16 Apr 2025 06:40:43 +0000
ROA not before: Wed 16 Apr 2025 06:40:38 +0000
ROA not after: Sat 18 Apr 2026 06:40:38 +0000
asID: 3491
IP address blocks: 45.195.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85131 (0x14c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 06:40:38 2025 GMT
Not After : Apr 18 06:40:38 2026 GMT
Subject: CN=67ff50eb-12eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:eb:52:18:15:27:05:0d:8d:28:b2:6c:8a:
5f:86:ee:f5:bb:3e:57:6f:24:ac:06:fc:32:24:e0:
80:db:34:55:62:9e:ca:4c:bc:29:37:28:f1:13:fb:
e9:38:22:45:3a:73:c1:55:c0:e2:a1:69:27:6b:52:
08:47:af:00:4c:72:dd:dc:88:27:78:fc:60:84:e9:
5e:04:8f:f9:f8:b4:fe:55:75:c2:b9:a9:50:08:d3:
fa:7f:ef:4f:f7:9a:34:8c:0e:76:2e:77:34:a0:48:
4d:3f:b8:8d:a8:ec:5e:b8:b4:b9:79:9d:7b:21:83:
a2:83:ca:0e:70:2a:1f:df:b0:a0:37:95:48:51:23:
c7:c4:d6:4e:c1:42:0f:0a:a5:9c:3b:55:88:21:af:
53:b2:f2:d7:a9:4d:1c:91:b3:fd:ee:3f:9b:45:04:
d2:c6:f0:18:c8:24:f7:1f:12:75:d5:7e:cd:fd:17:
59:cc:06:4b:42:d9:08:e2:77:7e:09:37:57:4f:1c:
73:84:5e:d2:63:63:7b:12:97:51:f9:e4:d1:be:5e:
58:a7:19:a7:3f:10:2b:06:28:41:25:ec:54:7e:85:
0b:c6:58:ac:b5:cc:16:d4:d1:1c:01:c0:14:b4:ec:
70:56:ad:84:c5:f2:bc:2b:f6:92:a7:42:93:77:26:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D1:F3:38:C4:AE:94:1C:4E:33:C6:83:4F:31:CC:22:81:55:6B:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7F38F1C1A8D11F0BF5795CB6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.111.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b6:5b:a0:59:20:8f:76:23:2e:91:78:98:e5:41:c6:18:18:
65:26:0a:04:ea:bb:29:c9:a5:60:5a:69:4e:4b:76:d1:a5:47:
0e:9c:7a:7c:66:bc:09:cf:5a:43:53:87:ed:c0:fb:f5:16:78:
57:c0:bc:7a:76:a5:0f:d3:63:18:0f:42:77:f5:b1:56:4f:80:
8b:af:ad:da:cb:9d:2e:45:0a:6a:be:bd:37:4f:40:ec:8c:7a:
96:54:4a:92:a1:51:c1:4e:c9:35:20:00:2e:85:3a:f7:fa:78:
81:4b:2c:7a:e9:75:66:96:d6:60:53:35:45:92:40:66:12:b1:
f8:c1:a3:95:a7:cc:dc:f6:f9:17:31:a8:cd:84:f0:5c:b7:b3:
ba:ca:c8:3d:49:15:7c:b8:4b:e1:e2:6d:88:ed:71:75:5a:54:
5a:1a:9b:0d:fa:23:1a:37:ee:62:d1:c2:8e:63:36:7d:d3:af:
db:33:12:d7:f3:fb:44:39:84:58:27:59:55:75:45:00:cb:f2:
ed:2e:72:c3:39:b5:80:ad:fa:82:f6:24:fd:a3:8d:47:ad:3d:
e5:94:8e:4c:e9:6c:e8:e8:cc:8a:36:95:e6:e5:54:55:26:2a:
2c:11:a2:b6:46:0d:35:77:ec:3e:f7:0c:24:e8:6e:7d:5e:9b:
96:33:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:18:30 2025 by rpki-client