Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1451C04439611F09FDB69D0DAE4EC9C.roa
File: F1451C04439611F09FDB69D0DAE4EC9C.roa (raw, json)
Hash identifier: U4FCX5CsN8knpgxDUpT9nx4lylhs+kijODpQJCkPNfI=
Subject key identifier: A3:4F:3A:14:2A:B8:7B:A3:6C:C1:C0:1F:F0:9E:FD:26:03:B5:84:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1451C04439611F09FDB69D0DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 12:00:02 +0000
ROA not before: Sat 07 Jun 2025 11:59:58 +0000
ROA not after: Mon 14 Jul 2025 11:59:58 +0000
asID: 395793
IP address blocks: 45.198.228.0/24 maxlen: 24
45.198.229.0/24 maxlen: 24
45.198.230.0/24 maxlen: 24
45.198.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88649 (0x15a49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 11:59:58 2025 GMT
Not After : Jul 14 11:59:58 2025 GMT
Subject: CN=684429c2-8f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:93:0a:95:9f:2e:3e:c5:84:f9:63:8f:24:
4a:91:0d:2e:93:e2:ce:c7:2c:9a:c3:02:0a:aa:4f:
ac:88:ed:bb:69:73:1f:c2:80:a4:49:4c:42:d5:2e:
00:9d:94:fa:39:0f:f1:2b:71:b5:b3:e2:22:84:bd:
d9:37:df:b2:ad:f1:e9:ba:01:8e:42:d0:2a:cc:8c:
19:a6:eb:f9:cc:38:64:12:a9:0c:03:91:a4:d2:fc:
c4:41:8e:ab:75:29:60:3d:40:38:bf:ac:6b:24:4b:
55:34:e9:b7:7c:e0:8f:67:90:b9:b3:0e:4b:9b:8f:
a4:72:b1:b5:aa:8d:9e:a3:4f:a7:00:af:ab:9d:93:
ca:cf:f0:4e:5b:da:91:a5:1d:61:29:45:e4:d9:09:
16:0a:04:be:d3:85:a6:b6:95:e4:88:ae:32:d5:4f:
d2:6d:1f:86:7c:f1:d5:3a:a0:af:0a:59:9a:0d:a1:
3e:72:56:e9:ad:37:1d:bb:7b:84:50:f0:e9:56:02:
ba:b8:18:42:df:78:f5:78:85:03:2a:5e:35:ef:f2:
2d:97:50:a9:f9:6f:26:11:dc:ee:f3:d7:33:ac:8f:
6a:a2:43:32:bb:e6:fc:0a:b1:bd:7c:21:5e:38:c8:
5f:d1:b9:52:d6:af:39:57:19:ee:d5:90:40:c5:40:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4F:3A:14:2A:B8:7B:A3:6C:C1:C0:1F:F0:9E:FD:26:03:B5:84:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1451C04439611F09FDB69D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:e0:46:0b:87:80:e4:08:79:71:66:c3:a3:31:59:eb:48:91:
a0:39:de:86:87:70:d7:22:b0:bd:3f:57:c2:49:60:d9:d8:43:
c5:61:ed:9d:90:bc:14:dd:36:e3:7b:78:9c:45:23:ac:84:93:
ce:16:d2:40:4f:40:57:6f:e0:b8:ea:9b:cf:51:f5:93:8c:98:
69:4e:94:85:06:af:d2:4b:ed:66:9a:25:c7:76:ba:d6:1f:ee:
8c:43:ea:b1:bf:30:6b:df:1d:3b:76:a4:03:91:6b:5b:75:e5:
b1:91:f0:4c:0b:4d:56:56:06:ed:f9:4a:8e:e2:82:f2:50:9a:
f0:c8:9b:ae:f4:7a:93:89:e2:ef:09:a4:8d:6d:dc:04:f2:d2:
71:47:76:4b:0c:ce:56:0b:ee:0e:c5:e8:08:58:bf:94:70:c8:
d3:53:c5:30:4a:5a:7a:8c:c3:e3:91:3d:6e:0c:80:6d:8f:fa:
30:58:ee:36:c9:78:47:20:e1:1b:d5:91:35:66:d1:e3:e6:71:
47:22:87:f3:09:1b:21:42:fe:d5:78:d2:12:ca:96:9c:29:9f:
9e:b9:98:d3:33:2f:03:18:59:02:99:9e:2e:28:9e:2e:30:93:
31:ee:0f:20:16:9f:b1:3c:61:a6:42:90:f9:41:0e:a4:63:d9:
35:ad:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:33:33 2025 by rpki-client