Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4F6BB721C8111F099BE71A4DAE4EC9C.roa
File: B4F6BB721C8111F099BE71A4DAE4EC9C.roa (raw, json)
Hash identifier: KsyFDaF9eKUFBWM7jO4yTeNOf84k68hOdGDttHvCkFk=
Subject key identifier: 51:C1:0E:57:61:E5:23:8E:D9:C4:0F:D9:DF:08:1F:C9:CB:48:56:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4F6BB721C8111F099BE71A4DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 18:19:46 +0000
ROA not before: Fri 18 Apr 2025 18:19:42 +0000
ROA not after: Tue 27 May 2025 18:19:42 +0000
asID: 44559
IP address blocks: 45.199.209.0/24 maxlen: 24
45.199.210.0/24 maxlen: 24
45.199.211.0/24 maxlen: 24
45.199.213.0/24 maxlen: 24
45.199.214.0/24 maxlen: 24
45.199.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85321 (0x14d49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 18:19:42 2025 GMT
Not After : May 27 18:19:42 2025 GMT
Subject: CN=680297c2-95a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:87:a4:11:7b:af:58:77:28:77:3b:7d:4c:
c1:04:87:1e:16:c4:cc:92:38:bc:f1:18:16:7b:4c:
5d:eb:ad:38:c5:bf:48:19:54:e9:54:72:d2:e1:fd:
7a:83:bf:aa:89:e8:03:c6:02:43:8b:2d:44:51:1e:
41:09:19:31:34:ea:cc:e3:c6:0e:7f:c6:22:4a:9a:
bd:f9:28:e2:72:0f:e9:1b:62:5e:79:5f:89:b3:7c:
a9:8b:fe:50:cf:5f:57:60:b2:fb:84:d1:9d:a8:de:
70:df:72:dc:38:b8:82:eb:3a:0b:18:f0:b3:de:56:
35:a6:f1:1a:aa:5b:55:49:55:4d:54:da:5d:72:73:
b5:4a:81:1f:7f:72:0e:ea:eb:0e:88:ff:e2:c9:2d:
12:75:77:a2:71:99:da:cd:df:4c:39:b8:83:3c:65:
40:69:b0:f3:d7:3c:f2:24:af:67:a4:08:f9:c1:6b:
5b:b3:cb:6b:37:96:91:b1:44:d2:11:52:1f:cc:72:
cc:4c:0c:58:b2:9e:aa:0c:4e:75:05:59:f2:b5:72:
21:f7:24:2a:f2:b3:ea:6c:92:f0:13:7a:f7:eb:50:
4a:1f:30:1a:19:73:02:75:d6:ae:87:ae:ae:d9:12:
24:47:10:97:74:07:30:e6:3c:c7:a0:7d:0b:7d:60:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C1:0E:57:61:E5:23:8E:D9:C4:0F:D9:DF:08:1F:C9:CB:48:56:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4F6BB721C8111F099BE71A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.209.0-45.199.211.255
45.199.213.0-45.199.215.255
Signature Algorithm: sha256WithRSAEncryption
19:60:d4:af:e9:e2:e1:33:78:91:b6:59:42:13:a0:0f:54:6f:
08:57:f8:88:b2:f5:c4:a8:d0:bd:80:56:cc:bf:e5:fd:09:e7:
f9:92:31:40:28:41:7f:b6:ed:20:5e:2b:2c:dd:19:65:06:b3:
e8:e0:78:e7:84:ee:b2:4e:e7:bf:08:8f:34:b8:cd:86:a9:c5:
7e:bb:c5:68:d4:85:47:33:1f:24:6f:0b:23:5c:c5:c4:cb:b4:
52:fe:37:b8:64:28:2c:ed:93:24:fd:9b:4c:9b:b0:2d:dc:66:
6b:27:fb:c4:d2:39:9f:e0:a1:8d:fb:9d:0e:e8:49:66:52:73:
ff:02:a8:eb:92:2b:54:cc:f9:58:38:74:71:e1:59:d2:d8:61:
56:f2:e4:e9:6e:36:6e:6d:65:fa:41:f0:6a:b5:7d:39:2f:4b:
da:4e:bc:4c:89:d1:97:0f:30:8a:06:e4:e2:0c:58:b2:ca:89:
d6:e2:6b:7a:7e:4d:cd:74:11:56:f4:63:7a:c5:29:0e:a8:ae:
86:fd:2e:44:24:18:aa:b7:7a:6b:ab:f6:53:21:dc:8d:83:31:
2b:3c:0a:a0:f0:d1:3f:c1:b7:ac:1a:e3:6f:c6:22:14:75:6b:
bb:c0:b8:1b:fb:2a:f6:be:37:c3:71:ee:c2:dd:f3:c0:c7:f6:
87:87:11:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:49 2025 by rpki-client on console.sobornost.net