Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C846ABB4482E11F0A7BF20C4DAE4EC9C.roa
File: C846ABB4482E11F0A7BF20C4DAE4EC9C.roa (raw, json)
Hash identifier: +vvlXjMYZQRdOmb1vWajsVnGD3SRO8V9UwYc0Kd6rcI=
Subject key identifier: 85:69:4E:CA:ED:63:39:AE:AD:C8:6A:34:72:89:71:B5:A9:E0:8E:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C846ABB4482E11F0A7BF20C4DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 08:17:02 +0000
ROA not before: Fri 13 Jun 2025 08:16:56 +0000
ROA not after: Sun 22 Jun 2025 08:16:56 +0000
asID: 395839
IP address blocks: 45.198.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 08:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88990 (0x15b9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 08:16:56 2025 GMT
Not After : Jun 22 08:16:56 2025 GMT
Subject: CN=684bde7e-2435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:2c:68:ff:81:dd:34:69:ac:35:f0:2e:18:
7a:b9:be:c6:6a:53:ff:30:54:02:16:ca:28:77:ed:
4a:13:20:b8:ea:b1:d7:d8:62:23:63:d3:50:6b:98:
c2:33:5d:26:19:55:45:ca:57:bb:42:96:e0:c8:31:
06:bd:47:b0:db:a3:04:1d:13:d6:10:b1:de:29:8f:
0d:ff:90:ac:4f:8c:0d:fd:0b:dd:f8:ce:16:b9:aa:
0e:34:2f:e6:dc:33:d0:0a:23:7e:40:01:71:6f:21:
83:9c:30:2e:42:b9:48:5c:3c:82:4b:e2:dd:e0:a1:
bc:63:64:96:70:a2:52:a4:cc:f4:3b:b4:22:7e:e2:
4a:11:f7:cc:53:a2:6a:7e:6b:dd:36:d0:65:5e:b8:
d3:9e:a0:e7:bf:7f:5d:71:de:13:cd:c4:ca:d6:45:
53:de:98:84:45:af:d0:0a:f0:9b:87:9a:76:36:02:
f4:a1:87:2f:23:73:fd:84:26:b6:4d:a9:fe:5c:8b:
1a:7e:7d:da:67:38:ca:5a:70:2c:6a:06:ca:2f:0e:
f0:0c:2e:6a:0e:09:6b:f6:d1:e1:cf:79:e4:f8:5d:
52:b8:05:da:e6:3d:17:61:15:25:26:31:23:80:2c:
24:68:7c:2c:1a:ee:26:80:4c:4c:a7:3d:58:ee:98:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:69:4E:CA:ED:63:39:AE:AD:C8:6A:34:72:89:71:B5:A9:E0:8E:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C846ABB4482E11F0A7BF20C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.123.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ad:3c:ee:cf:75:d1:c1:18:4f:c2:11:6c:f3:91:43:40:09:
ca:bb:56:c5:25:ba:37:c5:00:ff:9c:5f:80:60:85:69:52:16:
44:85:76:0e:d7:e6:33:95:b9:2a:d0:f7:49:f9:02:f1:c2:4c:
63:2b:cd:aa:5d:f5:7b:bc:b8:e3:aa:55:94:9f:65:96:f0:20:
49:c5:2b:53:f4:00:bd:f5:e3:35:3b:af:39:88:35:7c:ba:b0:
ec:7b:0e:97:08:be:51:ff:8a:49:cc:78:0d:34:af:c8:79:f7:
d4:83:00:52:68:7a:88:7e:44:17:66:f6:6e:d3:87:24:79:24:
5f:01:6f:0c:5a:58:5d:34:f4:40:7a:71:e2:a8:13:74:94:63:
ee:aa:a4:10:52:5c:b4:4f:c3:87:b8:0a:13:bc:2f:fa:d4:82:
62:d7:82:a3:0b:35:62:df:dc:27:fc:17:6f:f2:8a:76:be:2d:
81:44:19:03:2a:80:2f:27:8b:47:ef:39:eb:cb:4e:d3:76:f0:
6b:39:26:2f:a2:40:1b:77:d2:e4:ca:27:3b:9c:25:1f:b6:64:
f9:04:79:bb:f7:06:a0:25:5c:04:7e:72:5d:89:3c:78:30:20:
70:a5:db:62:47:a9:41:a4:04:04:f3:4c:02:98:ab:0f:75:1a:
7f:3c:09:73
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVueMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjEzMDgxNjU2WhcNMjUwNjIyMDgxNjU2WjAYMRYw
FAYDVQQDEw02ODRiZGU3ZS0yNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArvAsaP+B3TRprDXwLhh6ub7GalP/MFQCFsood+1KEyC46rHX2GIjY9NQ
a5jCM10mGVVFyle7QpbgyDEGvUew26MEHRPWELHeKY8N/5CsT4wN/Qvd+M4WuaoO
NC/m3DPQCiN+QAFxbyGDnDAuQrlIXDyCS+Ld4KG8Y2SWcKJSpMz0O7QifuJKEffM
U6JqfmvdNtBlXrjTnqDnv39dcd4TzcTK1kVT3piERa/QCvCbh5p2NgL0oYcvI3P9
hCa2Tan+XIsafn3aZzjKWnAsagbKLw7wDC5qDglr9tHhz3nk+F1SuAXa5j0XYRUl
JjEjgCwkaHwsGu4mgExMpz1Y7pgsBwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIVp
TsrtYzmurchqNHKJcbWp4I5GMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DODQ2QUJCNDQ4MkUxMUYwQTdCRjIwQzREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcZ7MA0GCSqGSIb3DQEBCwUA
A4IBAQCXrTzuz3XRwRhPwhFs85FDQAnKu1bFJbo3xQD/nF+AYIVpUhZEhXYO1+Yz
lbkq0PdJ+QLxwkxjK82qXfV7vLjjqlWUn2WW8CBJxStT9AC99eM1O685iDV8urDs
ew6XCL5R/4pJzHgNNK/IeffUgwBSaHqIfkQXZvZu04ckeSRfAW8MWlhdNPRAenHi
qBN0lGPuqqQQUly0T8OHuAoTvC/61IJi14KjCzVi39wn/Bdv8op2vi2BRBkDKoAv
J4tH7znry07TdvBrOSYvokAbd9Lkyic7nCUftmT5BHm79wagJVwEfnJdiTx4MCBw
pdtiR6lBpAQE80wCmKsPdRp/PAlz
-----END CERTIFICATE-----
Generated at Thu Jun 19 14:29:21 2025 by rpki-client