Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F47B618C0CD511F09A49C7AF762E951A.roa
File: F47B618C0CD511F09A49C7AF762E951A.roa (raw, json)
Hash identifier: 73vgkP5eGyPE39iw2s4jmlR74uCzTtOWsFcAQk19920=
Subject key identifier: 3B:15:E9:B1:A9:A1:C9:0C:DC:6B:AF:B7:23:0A:70:4D:58:65:BC:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01490C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F47B618C0CD511F09A49C7AF762E951A.roa
Signing time: Sat 29 Mar 2025 19:42:32 +0000
ROA not before: Sat 29 Mar 2025 19:42:28 +0000
ROA not after: Mon 20 Apr 2026 19:42:28 +0000
asID: 21859
IP address blocks: 45.199.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84236 (0x1490c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 29 19:42:28 2025 GMT
Not After : Apr 20 19:42:28 2026 GMT
Subject: CN=67e84d28-35ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4d:79:e0:c8:65:e2:c0:db:c6:b7:f8:af:81:
4c:dc:0a:78:37:a8:e8:f8:6b:28:5c:18:73:6e:67:
c5:be:74:df:e8:c2:d3:85:2b:eb:c7:80:af:96:b1:
05:56:27:20:4a:ee:61:59:17:8d:5c:22:d4:e3:47:
4f:79:3d:84:bf:e5:78:fc:4d:1c:5c:cb:17:a2:93:
ce:02:8d:05:0d:8d:ea:d9:25:46:ab:4c:c2:27:ba:
ef:f7:09:2c:2b:40:a0:0e:79:15:17:d8:67:97:71:
99:d6:ba:3f:6a:9d:0a:db:69:98:41:d9:ef:ec:88:
db:4f:22:b3:db:79:0a:9a:9f:b3:3d:a4:b6:39:cc:
85:16:28:db:ca:ec:c2:ae:07:31:22:65:b7:09:48:
3e:62:ac:11:b6:70:1e:3a:b4:16:d5:71:1c:cf:e7:
55:74:92:61:bd:a3:74:41:e9:63:f5:ac:90:d8:53:
12:3b:44:10:14:93:fc:60:e7:bf:ee:c4:24:85:50:
db:ac:de:26:c7:bd:c2:89:73:65:f4:f5:4f:d5:29:
ea:da:ff:67:b4:aa:95:03:09:71:22:4c:9f:84:c5:
8d:0d:e2:da:3c:1b:05:a9:df:f7:dc:ac:b6:e7:95:
fc:ac:30:12:41:f8:fa:2e:b2:52:77:a3:26:d6:a2:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:E9:B1:A9:A1:C9:0C:DC:6B:AF:B7:23:0A:70:4D:58:65:BC:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F47B618C0CD511F09A49C7AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.186.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7d:3c:29:f9:41:48:65:3c:be:62:ca:7b:37:d8:64:10:ef:
d4:41:7c:40:99:02:ed:1f:09:0d:42:46:0e:e2:b1:dc:23:9a:
3f:79:1c:b1:10:19:0a:3c:79:28:4f:55:28:61:74:a6:f8:86:
34:18:24:fd:9b:28:31:6c:6d:9a:b9:b9:7e:c0:6a:57:e7:5b:
fc:98:51:32:1e:a3:39:0b:cd:fa:13:7f:60:df:b6:36:5c:74:
b6:2e:bb:6d:9a:47:9b:3c:d9:f9:8f:b6:a1:c9:0b:ab:7a:0f:
e1:44:58:f0:72:27:6b:3d:44:98:b6:5c:14:5f:68:e0:51:c3:
e0:31:bd:77:0f:78:9d:ee:e5:3b:aa:98:cb:c1:17:36:4a:62:
61:95:d1:f7:38:1b:87:f9:3b:d0:8c:86:fd:2f:08:b5:78:98:
a7:6b:0f:00:f3:a3:d4:e6:a6:48:a2:6a:9e:86:cf:61:67:d3:
e4:b0:f1:eb:2c:75:fc:22:01:66:4e:e1:39:cd:1c:c5:3c:ad:
03:4d:ac:90:51:5e:78:a4:fe:ba:7a:70:06:8a:ed:98:0d:71:
12:59:3c:f1:2d:75:b1:e8:2d:f8:fd:ad:c6:42:4d:cd:a2:0b:
3f:98:9c:b5:72:98:87:27:7b:ef:ee:b8:cb:13:24:07:5f:ff:
c3:c9:0a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:47 2025 by rpki-client on console.sobornost.net