Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A005AC0299511F086279DAFDAE4EC9C.roa
File: 7A005AC0299511F086279DAFDAE4EC9C.roa (raw, json)
Hash identifier: P6JdoNjo8h3l2Cn9NDx2Q4Ezy/WDnNpky/gIavWxeW4=
Subject key identifier: 0F:94:CF:0E:F6:C0:A3:0D:CE:48:2B:B0:3F:E9:B4:8F:83:29:4D:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015207
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A005AC0299511F086279DAFDAE4EC9C.roa
Signing time: Mon 05 May 2025 09:44:03 +0000
ROA not before: Mon 05 May 2025 09:43:58 +0000
ROA not after: Fri 14 Apr 2028 09:43:58 +0000
asID: 17561
IP address blocks: 45.199.40.0/24 maxlen: 24
45.199.41.0/24 maxlen: 24
45.199.42.0/24 maxlen: 24
45.199.43.0/24 maxlen: 24
45.199.44.0/24 maxlen: 24
45.199.45.0/24 maxlen: 24
45.199.46.0/24 maxlen: 24
45.199.47.0/24 maxlen: 24
45.199.48.0/24 maxlen: 24
45.199.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86535 (0x15207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 5 09:43:58 2025 GMT
Not After : Apr 14 09:43:58 2028 GMT
Subject: CN=68188862-3bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:9f:28:c9:72:12:a0:81:54:bb:7c:cc:47:
a4:9a:5f:f4:99:f2:be:19:00:58:5b:a7:cd:16:13:
de:ac:a0:77:b1:fd:8d:9c:33:5e:e0:6c:4d:17:57:
76:f7:2b:36:4c:76:11:45:2a:b9:86:2e:36:d1:93:
36:fb:b1:5f:ce:c6:11:7a:4e:b2:75:a2:22:86:f6:
f7:83:f9:15:7e:3d:6f:b9:1c:fc:14:aa:d1:78:fb:
1d:c3:b3:05:0f:52:d9:1e:d4:61:ce:55:a4:3c:06:
ac:11:fc:64:f0:9c:49:a5:fb:5f:9a:dd:1b:05:ff:
b4:e2:88:16:a3:dc:a3:d0:94:82:24:44:c7:6e:77:
18:60:7e:7f:fe:d2:29:f3:c9:bf:69:e9:6b:44:b6:
c1:65:b8:ae:b3:37:5d:87:b9:44:89:04:81:d1:19:
f0:7f:e9:1d:c7:11:6e:40:a7:67:c8:32:c9:b2:85:
29:40:8c:c7:80:ec:c5:74:4a:da:c5:82:8d:83:d2:
ab:ab:1a:8f:4a:de:37:7a:88:3b:37:08:c8:73:57:
cb:07:5e:73:89:40:31:6f:46:c1:ef:9d:3a:97:58:
88:3e:c0:1d:f8:3c:e2:17:12:c6:4f:fb:d3:0e:8c:
56:aa:87:6e:6f:51:1b:bb:b3:15:87:a3:fd:57:d0:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:94:CF:0E:F6:C0:A3:0D:CE:48:2B:B0:3F:E9:B4:8F:83:29:4D:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A005AC0299511F086279DAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.40.0-45.199.49.255
Signature Algorithm: sha256WithRSAEncryption
26:e8:ac:78:c2:3a:de:8a:a5:57:3c:67:f6:f2:11:20:2b:1e:
8c:5e:0e:e1:ec:65:20:8d:b4:5e:f0:e1:33:20:b6:30:96:a5:
a0:3c:57:71:54:4c:5c:8a:d7:35:a1:b1:c9:f2:2d:6e:1c:aa:
37:97:00:34:4c:46:db:39:ab:a5:8b:0a:a9:16:c6:63:05:86:
f7:97:75:39:5b:7c:c2:bd:a5:8a:37:91:d6:69:d9:bb:de:54:
0d:01:a7:7a:76:7a:d3:7b:6c:a0:74:f5:1f:26:03:9e:bf:54:
24:36:7b:49:dd:64:22:e8:52:e8:dc:29:a6:aa:61:10:9b:dc:
fc:42:b1:aa:87:32:bc:99:11:8a:7d:95:22:2b:81:e2:ec:fa:
3d:2b:95:ee:83:c2:16:72:82:23:ed:75:d1:48:a9:92:0b:00:
17:cf:06:30:16:f3:2e:1d:a9:eb:c9:dc:67:1c:17:70:5a:27:
af:99:8c:9c:32:67:68:3c:47:08:cd:4b:eb:c2:97:45:86:0d:
80:f5:cc:b0:dd:74:f0:55:a3:96:22:f5:86:af:cc:a6:db:73:
60:1e:37:f5:24:eb:af:a8:ca:30:b4:8c:e4:99:37:a4:eb:74:
ce:3f:78:06:d3:14:b6:cb:3d:c6:56:58:4e:2a:d8:d4:2f:89:
db:c5:c7:63
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAVIHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTA1MDk0MzU4WhcNMjgwNDE0MDk0MzU4WjAYMRYw
FAYDVQQDEw02ODE4ODg2Mi0zYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz1afKMlyEqCBVLt8zEekml/0mfK+GQBYW6fNFhPerKB3sf2NnDNe4GxN
F1d29ys2THYRRSq5hi420ZM2+7FfzsYRek6ydaIihvb3g/kVfj1vuRz8FKrRePsd
w7MFD1LZHtRhzlWkPAasEfxk8JxJpftfmt0bBf+04ogWo9yj0JSCJETHbncYYH5/
/tIp88m/aelrRLbBZbiuszddh7lEiQSB0Rnwf+kdxxFuQKdnyDLJsoUpQIzHgOzF
dEraxYKNg9KrqxqPSt43eog7NwjIc1fLB15ziUAxb0bB7506l1iIPsAd+DziFxLG
T/vTDoxWqodub1Ebu7MVh6P9V9CwnwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFA+U
zw72wKMNzkgrsD/ptI+DKU0nMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QTAwNUFDMDI5OTUxMUYwODYyNzlEQUZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMtxygDBAEtxzAwDQYJKoZI
hvcNAQELBQADggEBACborHjCOt6KpVc8Z/byESArHoxeDuHsZSCNtF7w4TMgtjCW
paA8V3FUTFyK1zWhscnyLW4cqjeXADRMRts5q6WLCqkWxmMFhveXdTlbfMK9pYo3
kdZp2bveVA0Bp3p2etN7bKB09R8mA56/VCQ2e0ndZCLoUujcKaaqYRCb3PxCsaqH
MryZEYp9lSIrgeLs+j0rle6DwhZygiPtddFIqZILABfPBjAW8y4dqevJ3GccF3Ba
J6+ZjJwyZ2g8RwjNS+vCl0WGDYD1zLDddPBVo5Yi9YavzKbbc2AeN/Uk66+oyjC0
jOSZN6TrdM4/eAbTFLbLPcZWWE4q2NQvidvFx2M=
-----END CERTIFICATE-----
Generated at Sun May 11 14:05:36 2025 by rpki-client