Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCEDEB9C1C7411F0A98A79D1DAE4EC9C.roa
File: FCEDEB9C1C7411F0A98A79D1DAE4EC9C.roa (raw, json)
Hash identifier: GGBVFKKGGv+Xt3MPpeLiaT/2COYt2vU/v0HOt4+0w3o=
Subject key identifier: 91:EE:C9:C4:FE:8F:91:91:49:53:F6:4D:AE:16:75:D2:6C:FA:D7:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCEDEB9C1C7411F0A98A79D1DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 16:48:44 +0000
ROA not before: Fri 18 Apr 2025 16:48:39 +0000
ROA not after: Tue 27 May 2025 16:48:39 +0000
asID: 202656
IP address blocks: 45.192.50.0/24 maxlen: 24
45.192.54.0/24 maxlen: 24
45.192.55.0/24 maxlen: 24
45.192.63.0/24 maxlen: 24
45.195.160.0/24 maxlen: 24
45.199.192.0/24 maxlen: 24
45.199.194.0/24 maxlen: 24
45.199.195.0/24 maxlen: 24
45.199.198.0/24 maxlen: 24
45.199.199.0/24 maxlen: 24
45.199.200.0/24 maxlen: 24
45.199.201.0/24 maxlen: 24
45.199.202.0/24 maxlen: 24
45.199.203.0/24 maxlen: 24
45.199.204.0/24 maxlen: 24
45.199.205.0/24 maxlen: 24
45.199.248.0/24 maxlen: 24
45.199.252.0/24 maxlen: 24
45.199.254.0/24 maxlen: 24
45.200.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85297 (0x14d31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 16:48:39 2025 GMT
Not After : May 27 16:48:39 2025 GMT
Subject: CN=6802826c-4ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:2d:46:87:2a:07:21:9c:e0:37:46:bd:f8:
28:6c:68:22:b5:74:21:79:d7:39:a9:9e:60:ba:b7:
05:d6:d5:95:1a:f0:3e:1d:1f:b5:a2:35:d6:03:a0:
ac:ac:a4:8a:87:43:9b:f8:9b:f5:ad:d5:dd:c6:94:
72:24:76:e2:91:7e:09:5d:e2:78:c3:8a:ef:c1:f6:
03:9f:f2:8a:15:1a:1e:05:ea:92:14:61:2e:43:44:
57:9c:c0:a9:0d:a2:5f:a6:d5:b6:b4:96:a2:8f:0d:
62:e0:c2:3a:81:4b:30:49:82:87:36:5f:a2:d0:06:
dc:8e:67:f0:06:22:f4:ae:0b:0d:5f:f3:be:74:92:
ca:d2:43:3d:7c:06:6b:f9:9d:9b:14:41:cf:2e:d5:
71:4b:cc:93:85:a2:9f:2d:07:8c:1d:6f:1b:ae:a9:
69:b5:af:32:fe:32:2c:93:37:c2:4e:7e:01:aa:db:
03:4d:19:e3:e1:60:8e:e5:4c:c8:b4:8e:10:54:05:
82:c1:56:c1:90:cb:88:7e:95:c7:89:8b:d9:61:e7:
29:fa:62:fd:84:28:f1:4c:c9:c7:76:a8:78:56:dd:
d1:15:b7:9b:63:aa:1c:22:7d:88:26:18:f3:09:f0:
a5:f7:06:61:d8:9f:0e:4f:48:9d:4f:f7:53:bf:0b:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EE:C9:C4:FE:8F:91:91:49:53:F6:4D:AE:16:75:D2:6C:FA:D7:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCEDEB9C1C7411F0A98A79D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.50.0/24
45.192.54.0/23
45.192.63.0/24
45.195.160.0/24
45.199.192.0/24
45.199.194.0/23
45.199.198.0-45.199.205.255
45.199.248.0/24
45.199.252.0/24
45.199.254.0/24
45.200.178.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e5:61:a5:6b:bb:23:66:58:b3:18:9c:52:27:27:7f:5e:0c:
a0:a3:94:d2:92:6d:9e:b0:42:08:aa:2d:98:96:f4:51:1b:67:
4c:09:ce:ed:a0:15:3a:2e:3f:3e:be:09:c3:7d:3f:b7:c4:4c:
5b:3d:7f:a2:4d:31:80:97:e0:2c:95:74:cb:39:69:9b:0a:47:
0c:96:53:ae:6e:50:cf:13:c8:c3:0f:ee:b4:df:9f:a0:27:10:
b2:0f:1f:d5:e6:0d:23:c5:2e:95:1e:2e:76:26:43:ef:26:88:
54:11:57:a6:02:a5:6d:de:e9:fd:e5:9b:d9:e6:dd:52:19:62:
33:1f:8d:36:08:ad:d7:04:46:aa:2d:ce:b8:d9:26:38:d6:9d:
01:70:62:00:fd:a4:46:33:f2:80:30:e2:d4:da:5c:bc:c8:37:
bd:ff:ed:aa:bb:da:74:7e:3d:bb:62:2c:de:69:5f:95:6d:2d:
af:d3:c2:94:74:3d:d6:07:6d:06:de:23:cd:12:e4:55:55:c2:
2e:dc:d8:02:49:05:9e:a1:6a:03:ee:34:77:b4:e1:2a:fc:28:
17:96:f8:51:a0:21:49:b6:7e:70:68:12:32:c9:17:38:c0:35:
dd:ce:2a:e3:d7:b0:7b:5c:34:ba:49:92:81:98:21:ff:6b:98:
66:08:4d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:43:22 2025 by rpki-client on console.sobornost.net