Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D679B5B01C8611F0B92E14C6DAE4EC9C.roa
File: D679B5B01C8611F0B92E14C6DAE4EC9C.roa (raw, json)
Hash identifier: hwR2vr7HcOht19pZ3P0NTyYIHJOXVx/XP9gYy/I2pLU=
Subject key identifier: F9:89:26:C0:7B:A7:0A:F1:A4:86:8D:19:54:3B:A3:DE:43:5B:BC:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D679B5B01C8611F0B92E14C6DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 18:56:30 +0000
ROA not before: Fri 18 Apr 2025 18:56:26 +0000
ROA not after: Sat 17 May 2025 18:56:26 +0000
asID: 398993
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85329 (0x14d51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 18:56:26 2025 GMT
Not After : May 17 18:56:26 2025 GMT
Subject: CN=6802a05e-f173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:5d:11:43:2f:4c:8a:93:b8:63:57:9c:2a:
bc:7f:c4:ae:4f:f1:dc:c3:5c:c5:37:44:f6:3e:1c:
af:03:9c:f1:42:98:89:a3:9e:a4:3d:72:e1:7e:3b:
45:65:a4:bb:80:02:51:10:e2:b3:44:3a:8a:56:a5:
aa:06:d9:56:d3:1b:d2:9f:4b:2c:6e:4a:57:cd:f0:
f1:2b:d3:6a:2a:c7:14:c2:9d:00:70:c0:33:54:c5:
fb:e5:ec:ab:bf:2b:c0:a0:de:1d:f4:51:bc:6f:3c:
ba:d9:a7:9e:b1:0d:95:49:a8:2f:3a:7f:00:d6:42:
61:99:b7:82:15:26:01:6e:33:86:30:35:63:c3:66:
93:b3:b0:f2:15:9e:bb:07:45:9c:d2:f8:b2:27:07:
1e:16:48:69:de:c3:96:2c:56:13:c4:89:3f:17:c8:
e2:51:e5:fa:42:ea:9d:11:05:55:66:98:0d:dd:2c:
c4:09:33:2b:cc:00:b8:09:38:6b:3b:cd:2d:18:75:
7e:b8:4c:d5:f6:ee:5f:b5:84:58:ad:29:54:04:19:
1d:86:57:77:c0:4a:db:5d:92:8a:40:aa:e4:ac:4e:
4b:d5:1f:71:3a:75:b0:89:04:27:b6:84:82:b0:0c:
b8:e6:f9:44:e0:a7:2c:90:d1:c7:5e:4e:9a:fa:85:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:89:26:C0:7B:A7:0A:F1:A4:86:8D:19:54:3B:A3:DE:43:5B:BC:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D679B5B01C8611F0B92E14C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
63:7b:6d:42:eb:54:6d:91:0b:e2:76:b2:2b:80:b5:f5:e5:e4:
39:0d:8f:9e:e0:97:eb:f4:dc:85:f5:a1:3c:d4:e5:f6:cf:55:
3e:9e:38:ab:a9:16:13:fa:08:cb:9d:69:1d:f2:31:2c:44:19:
c0:a2:88:f0:80:f7:69:9e:bd:3b:2b:58:66:74:34:ce:e2:7b:
b0:92:92:2a:63:e0:73:b0:88:2a:3d:ef:97:6c:e7:cd:33:61:
5e:16:7d:7e:26:64:ed:99:6c:62:9e:3a:5f:3f:8c:43:e8:5b:
13:68:73:a5:32:ed:08:27:d5:56:74:71:47:a5:94:78:e4:a8:
47:78:27:cc:91:9d:31:fb:e0:60:49:85:cb:7c:67:91:e2:30:
69:a0:ed:5d:2e:50:2f:e3:66:dd:ce:b9:57:f3:c1:8a:8e:1d:
41:c7:c7:c9:3f:de:a9:8b:bc:a2:1b:5e:bf:67:22:3a:e7:9f:
6d:58:d9:57:4f:45:5e:88:a8:62:e5:18:b0:e1:b5:a5:87:21:
74:e6:5e:4a:ec:17:54:a5:40:f0:e1:f6:9c:84:89:a9:a8:1d:
d3:60:e7:5f:83:ed:db:ce:cb:54:8e:59:24:4b:47:ca:e3:f1:
32:19:7f:f7:12:f0:20:4a:35:14:cf:a7:8a:5f:e2:92:0a:7a:
64:6a:ca:4f
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAU1RMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDE4MTg1NjI2WhcNMjUwNTE3MTg1NjI2WjAYMRYw
FAYDVQQDEw02ODAyYTA1ZS1mMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArxZdEUMvTIqTuGNXnCq8f8SuT/Hcw1zFN0T2PhyvA5zxQpiJo56kPXLh
fjtFZaS7gAJREOKzRDqKVqWqBtlW0xvSn0ssbkpXzfDxK9NqKscUwp0AcMAzVMX7
5eyrvyvAoN4d9FG8bzy62aeesQ2VSagvOn8A1kJhmbeCFSYBbjOGMDVjw2aTs7Dy
FZ67B0Wc0viyJwceFkhp3sOWLFYTxIk/F8jiUeX6QuqdEQVVZpgN3SzECTMrzAC4
CThrO80tGHV+uEzV9u5ftYRYrSlUBBkdhld3wErbXZKKQKrkrE5L1R9xOnWwiQQn
toSCsAy45vlE4KcskNHHXk6a+oVqRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmJ
JsB7pwrxpIaNGVQ7o95DW7yoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENjc5QjVCMDFDODYxMUYwQjkyRTE0QzZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELcDAAwQGLcjAMA0GCSqGSIb3
DQEBCwUAA4IBAQBje21C61RtkQvidrIrgLX15eQ5DY+e4Jfr9NyF9aE81OX2z1U+
njirqRYT+gjLnWkd8jEsRBnAoojwgPdpnr07K1hmdDTO4nuwkpIqY+BzsIgqPe+X
bOfNM2FeFn1+JmTtmWxinjpfP4xD6FsTaHOlMu0IJ9VWdHFHpZR45KhHeCfMkZ0x
++BgSYXLfGeR4jBpoO1dLlAv42bdzrlX88GKjh1Bx8fJP96pi7yiG16/ZyI6559t
WNlXT0VeiKhi5Riw4bWlhyF05l5K7BdUpUDw4fachImpqB3TYOdfg+3bzstUjlkk
S0fK4/EyGX/3EvAgSjUUz6eKX+KSCnpkaspP
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:00:13 2025 by rpki-client on console.sobornost.net