Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/F3C08E9020E211F0A2C53D7DDAE4EC9C.roa
File: F3C08E9020E211F0A2C53D7DDAE4EC9C.roa (raw, json)
Hash identifier: enlL6UEVMDAvLiUb1YWnPP3xVArZHJPHYnN3vdBMklU=
Subject key identifier: 37:2B:4B:56:F1:BC:98:48:0D:6D:0F:86:31:04:59:33:BF:89:71:25
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0504
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/F3C08E9020E211F0A2C53D7DDAE4EC9C.roa
Signing time: Thu 24 Apr 2025 08:05:58 +0000
ROA not before: Thu 24 Apr 2025 08:05:53 +0000
ROA not after: Tue 13 Jan 2026 08:05:53 +0000
asID: 329007
IP address blocks: 45.221.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Apr 24 08:05:53 2025 GMT
Not After : Jan 13 08:05:53 2026 GMT
Subject: CN=6809f0e6-8af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:be:f1:65:7b:5b:11:52:28:f6:1f:67:bc:
da:86:fe:c5:d7:1a:d7:95:50:30:e1:12:77:e6:6a:
c1:4c:52:90:9b:71:49:58:f8:17:75:d4:e5:a9:2d:
2f:1a:b1:1b:38:e7:7f:6e:65:00:55:60:48:39:aa:
f0:3e:56:40:79:e2:40:87:98:5f:30:de:8b:ce:ff:
1f:cf:19:aa:75:a9:98:88:1b:00:a5:fe:a5:c9:0a:
d0:f4:31:90:3d:cb:db:e1:ed:f1:55:ee:eb:35:b4:
10:d3:f1:2e:15:89:ff:cc:af:8d:24:d5:aa:29:f6:
54:2e:5f:18:69:43:83:4a:91:8d:d7:7e:60:41:54:
c8:11:25:64:40:d0:9d:f7:c6:25:07:ee:aa:02:08:
bf:49:62:6b:82:be:90:ce:86:9a:0a:c5:6a:6d:39:
32:a0:27:2b:7d:75:80:ca:bc:d0:ae:70:bf:2a:eb:
d2:0d:79:0b:f2:f7:e0:87:03:fd:9b:fd:8b:ee:22:
c4:9f:2d:52:c7:55:54:6f:62:e6:60:c2:e5:87:b5:
27:46:f0:81:1d:76:ed:bd:37:4c:b7:f4:58:4f:81:
88:63:bf:4e:9d:95:5c:6b:2f:2f:dc:fb:06:e6:ec:
72:7d:c8:34:ec:18:a3:7d:83:9d:fb:41:ae:6b:39:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2B:4B:56:F1:BC:98:48:0D:6D:0F:86:31:04:59:33:BF:89:71:25
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/F3C08E9020E211F0A2C53D7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.71.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:02:08:dd:32:04:3d:ee:bb:12:b2:4a:a7:ca:4e:6d:b3:cc:
56:68:de:5c:54:29:5d:fa:83:ea:01:6f:02:4a:e9:2f:36:e1:
a4:54:c6:00:ae:b8:10:14:99:53:fd:57:65:79:71:38:28:84:
bb:88:90:15:d1:6f:a3:b2:f5:7f:c4:68:47:5a:ba:e7:b6:9c:
e6:2b:36:76:e7:3b:da:c6:12:cc:7e:b5:c5:37:63:2b:f5:3b:
24:5d:0a:a9:85:1f:0c:29:5c:43:d1:72:01:d7:1f:0a:96:2a:
b9:1e:fe:6f:6c:6d:d2:b7:f1:5a:34:42:4a:54:4b:4c:dc:d0:
75:af:f7:50:aa:77:10:c6:b1:2e:46:77:60:22:82:50:e3:5f:
58:f1:f9:b8:97:21:91:50:32:4b:f8:54:3a:e0:90:cc:07:eb:
1b:21:d4:be:66:d1:78:3f:bf:bf:5e:4c:94:55:8e:76:bc:c9:
3c:7d:9f:6e:18:6f:96:55:7b:84:b1:d7:3c:65:06:c0:7f:de:
e7:f5:6a:38:fe:f7:63:fc:f7:f4:a8:4a:31:ee:58:aa:f9:2c:
f5:2f:4d:15:ce:3c:da:44:b4:ad:ba:b7:79:62:3f:a7:2f:04:
f8:31:44:c8:68:61:48:1f:79:a1:cf:72:bd:ff:5f:f4:ad:97:
5d:0a:d7:17
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNTA0MjQwODA1NTNaFw0yNjAxMTMwODA1NTNaMBgxFjAU
BgNVBAMTDTY4MDlmMGU2LThhZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHKb7xZXtbEVIo9h9nvNqG/sXXGteVUDDhEnfmasFMUpCbcUlY+Bd11OWp
LS8asRs4539uZQBVYEg5qvA+VkB54kCHmF8w3ovO/x/PGap1qZiIGwCl/qXJCtD0
MZA9y9vh7fFV7us1tBDT8S4Vif/Mr40k1aop9lQuXxhpQ4NKkY3XfmBBVMgRJWRA
0J33xiUH7qoCCL9JYmuCvpDOhpoKxWptOTKgJyt9dYDKvNCucL8q69INeQvy9+CH
A/2b/YvuIsSfLVLHVVRvYuZgwuWHtSdG8IEddu29N0y39FhPgYhjv06dlVxrLy/c
+wbm7HJ9yDTsGKN9g537Qa5rOeb5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUNytL
VvG8mEgNbQ+GMQRZM7+JcSUwHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3L0YzQzA4RTkwMjBFMjExRjBBMkM1M0Q3RERBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UcwDQYJKoZIhvcNAQELBQAD
ggEBANMCCN0yBD3uuxKySqfKTm2zzFZo3lxUKV36g+oBbwJK6S824aRUxgCuuBAU
mVP9V2V5cTgohLuIkBXRb6Oy9X/EaEdauue2nOYrNnbnO9rGEsx+tcU3Yyv1OyRd
CqmFHwwpXEPRcgHXHwqWKrke/m9sbdK38Vo0QkpUS0zc0HWv91CqdxDGsS5Gd2Ai
glDjX1jx+biXIZFQMkv4VDrgkMwH6xsh1L5m0Xg/v79eTJRVjna8yTx9n24Yb5ZV
e4Sx1zxlBsB/3uf1ajj+92P89/SoSjHuWKr5LPUvTRXOPNpEtK26t3liP6cvBPgx
RMhoYUgfeaHPcr3/X/Stl10K1xc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net