Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89FDE372299311F0B35E95A4DAE4EC9C.roa
File: 89FDE372299311F0B35E95A4DAE4EC9C.roa (raw, json)
Hash identifier: Umk7pBaBhyn2RtgYsGDiiO/eVQ0za4eppIaHxoAbmrg=
Subject key identifier: 24:D1:F4:2C:7E:E1:D7:77:C5:6C:44:EB:E1:4E:C8:D7:AF:40:92:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015201
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89FDE372299311F0B35E95A4DAE4EC9C.roa
Signing time: Mon 05 May 2025 09:30:10 +0000
ROA not before: Mon 05 May 2025 09:30:06 +0000
ROA not after: Fri 14 Apr 2028 09:30:06 +0000
asID: 17561
IP address blocks: 45.199.20.0/24 maxlen: 24
45.199.21.0/24 maxlen: 24
45.199.22.0/24 maxlen: 24
45.199.23.0/24 maxlen: 24
45.199.24.0/24 maxlen: 24
45.199.25.0/24 maxlen: 24
45.199.26.0/24 maxlen: 24
45.199.27.0/24 maxlen: 24
45.199.28.0/24 maxlen: 24
45.199.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86529 (0x15201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 5 09:30:06 2025 GMT
Not After : Apr 14 09:30:06 2028 GMT
Subject: CN=68188522-6554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:cd:d7:03:5c:c9:5d:fc:b0:16:ad:78:aa:
01:12:27:4e:b8:8f:dd:e9:9e:45:e4:2a:bc:c9:f5:
fb:d2:3f:79:15:cb:8e:19:5e:dd:4d:37:51:0d:dd:
52:58:72:89:db:72:7e:7d:0a:2b:4c:dc:3b:c6:2e:
50:91:06:1d:02:4c:f2:51:50:56:90:f5:db:1f:5e:
16:03:5b:f8:97:94:31:d0:eb:46:a1:de:a6:d8:d7:
da:16:95:26:a9:8a:f6:de:43:9f:2d:8a:12:e9:ce:
82:dd:ed:65:58:41:ee:9f:6e:11:db:bd:44:20:8b:
c0:97:14:23:bb:36:aa:d5:fe:6c:2a:84:f8:a4:03:
43:85:9a:73:e4:af:93:bc:7b:d3:46:13:0b:58:0b:
90:f8:b4:ac:78:5e:d9:6d:38:0e:e0:1e:73:5e:b8:
e1:40:fb:b3:fe:97:d6:85:1e:cc:8b:b7:24:86:1b:
95:db:47:f4:fd:51:d7:d6:ea:09:c3:13:c0:9c:97:
fd:15:ab:8d:57:4e:3a:b7:b9:a9:3b:94:17:f8:36:
56:87:ed:df:4a:b6:3d:6c:27:bf:49:39:00:e2:4a:
45:fa:2c:70:d7:0b:17:db:6e:80:36:d5:4e:c0:10:
c8:74:75:f7:0c:d0:90:ce:1e:3a:f6:ff:74:26:c5:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D1:F4:2C:7E:E1:D7:77:C5:6C:44:EB:E1:4E:C8:D7:AF:40:92:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89FDE372299311F0B35E95A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.20.0-45.199.29.255
Signature Algorithm: sha256WithRSAEncryption
95:3f:7d:b5:b4:24:8b:3f:92:28:40:8e:2d:e5:74:5b:06:75:
73:4e:09:86:69:29:99:46:3f:05:8a:6d:41:73:55:c1:95:f7:
9c:b5:9d:4f:d0:ef:55:28:ed:41:84:1f:b9:f2:fd:87:33:2a:
8d:a8:41:9f:39:30:2a:47:c2:c2:ef:9b:8e:7a:85:2c:a2:31:
17:62:d6:93:8a:b0:e7:19:14:02:7a:55:aa:f2:d4:e5:f6:0e:
91:05:94:0f:a8:a3:22:95:38:df:25:43:75:de:58:d9:63:61:
d4:ba:9a:d3:12:8e:1d:25:ce:4c:33:3e:4e:26:53:bf:3f:b0:
b4:f5:4b:c9:9f:14:51:1a:a0:a1:84:e5:dd:19:df:42:e5:cc:
ad:62:fc:7f:e6:01:39:55:2c:89:88:6a:b3:8b:d4:4d:2f:52:
df:76:95:be:b3:5e:92:47:3d:bc:22:e7:36:74:13:be:ed:9c:
70:10:dc:22:ec:01:ea:20:23:61:8f:f0:43:b4:dd:73:68:d9:
84:cf:78:66:d9:07:bc:03:86:04:b8:1f:ef:12:3b:87:db:d4:
a8:85:b5:50:4f:56:67:b8:04:a8:45:2d:0b:b6:93:98:55:b4:
b7:f8:0e:f2:e2:5b:d7:a0:1d:49:fb:bd:dc:ab:76:18:2d:b2:
b5:ed:7d:3c
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAVIBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTA1MDkzMDA2WhcNMjgwNDE0MDkzMDA2WjAYMRYw
FAYDVQQDEw02ODE4ODUyMi02NTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxUPN1wNcyV38sBateKoBEidOuI/d6Z5F5Cq8yfX70j95FcuOGV7dTTdR
Dd1SWHKJ23J+fQorTNw7xi5QkQYdAkzyUVBWkPXbH14WA1v4l5Qx0OtGod6m2Nfa
FpUmqYr23kOfLYoS6c6C3e1lWEHun24R271EIIvAlxQjuzaq1f5sKoT4pANDhZpz
5K+TvHvTRhMLWAuQ+LSseF7ZbTgO4B5zXrjhQPuz/pfWhR7Mi7ckhhuV20f0/VHX
1uoJwxPAnJf9FauNV046t7mpO5QX+DZWh+3fSrY9bCe/STkA4kpF+ixw1wsX226A
NtVOwBDIdHX3DNCQzh469v90JsXSEwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCTR
9Cx+4dd3xWxE6+FOyNevQJIPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OUZERTM3MjI5OTMxMUYwQjM1RTk1QTREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItxxQDBAEtxxwwDQYJKoZI
hvcNAQELBQADggEBAJU/fbW0JIs/kihAji3ldFsGdXNOCYZpKZlGPwWKbUFzVcGV
95y1nU/Q71Uo7UGEH7ny/YczKo2oQZ85MCpHwsLvm456hSyiMRdi1pOKsOcZFAJ6
Vary1OX2DpEFlA+ooyKVON8lQ3XeWNljYdS6mtMSjh0lzkwzPk4mU78/sLT1S8mf
FFEaoKGE5d0Z30LlzK1i/H/mATlVLImIarOL1E0vUt92lb6zXpJHPbwi5zZ0E77t
nHAQ3CLsAeogI2GP8EO03XNo2YTPeGbZB7wDhgS4H+8SO4fb1KiFtVBPVme4BKhF
LQu2k5hVtLf4DvLiW9egHUn7vdyrdhgtsrXtfTw=
-----END CERTIFICATE-----
Generated at Wed May 14 06:47:18 2025 by rpki-client