Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC3C01F630A411F0821DE9ECDAE4EC9C.roa
File: DC3C01F630A411F0821DE9ECDAE4EC9C.roa (raw, json)
Hash identifier: mlAeUYIvSfNpRHsftSdv/JYNmzeaxVlQgWdg1WiLzwI=
Subject key identifier: 53:79:D1:CC:4F:E2:BD:8A:7E:5F:EE:D1:35:48:03:13:D2:78:0D:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015424
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC3C01F630A411F0821DE9ECDAE4EC9C.roa
Signing time: Wed 14 May 2025 09:21:48 +0000
ROA not before: Wed 14 May 2025 09:21:44 +0000
ROA not after: Sun 15 Jun 2025 09:21:44 +0000
asID: 147230
IP address blocks: 45.206.220.0/23 maxlen: 24
45.206.222.0/23 maxlen: 24
45.206.224.0/23 maxlen: 24
45.206.226.0/23 maxlen: 24
45.206.228.0/23 maxlen: 24
45.206.230.0/23 maxlen: 24
45.206.232.0/23 maxlen: 24
45.206.234.0/23 maxlen: 24
45.206.236.0/23 maxlen: 24
45.206.238.0/23 maxlen: 24
45.206.240.0/23 maxlen: 24
45.206.242.0/23 maxlen: 24
45.206.244.0/23 maxlen: 24
45.206.246.0/23 maxlen: 24
45.206.248.0/23 maxlen: 24
45.206.250.0/23 maxlen: 24
45.206.252.0/23 maxlen: 24
45.206.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87076 (0x15424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 09:21:44 2025 GMT
Not After : Jun 15 09:21:44 2025 GMT
Subject: CN=682460ac-df3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:8e:86:c4:75:59:ba:19:1b:4f:c9:f4:44:
74:de:25:e3:2f:02:c3:50:ab:2a:a0:27:ae:9b:3a:
0a:4f:72:fd:ff:46:52:8d:76:50:13:25:88:44:28:
f1:3a:4a:48:62:bd:1a:f3:08:d8:a7:73:c5:ea:94:
51:79:f4:86:eb:09:38:0e:23:81:44:24:2b:74:ef:
98:0f:fd:82:ff:5f:e3:db:f3:45:b6:1e:1d:ca:f5:
26:01:8a:2e:3e:ac:d9:3f:0d:cf:71:be:10:69:a6:
ad:27:b4:da:61:1d:04:af:59:9f:48:11:a7:4f:ba:
95:6d:fa:cb:c2:f2:82:70:dd:61:ef:31:01:92:ea:
f8:28:53:ae:48:28:11:33:64:86:01:fd:e2:31:0b:
43:a1:4e:d6:3b:42:18:e6:b4:56:1b:4d:db:aa:9b:
9b:cb:28:68:99:54:29:9a:f0:eb:32:47:b9:8d:88:
48:4a:15:71:49:f8:3d:d9:d2:5b:5f:6c:b7:dc:4a:
f7:39:a0:3f:d3:ec:ed:f6:84:f9:f9:d4:49:1d:f9:
d3:20:7e:45:3b:d9:3a:ad:53:d8:bd:a9:bb:0f:bb:
85:31:35:43:14:48:af:57:d0:24:f7:34:30:0e:2e:
dc:12:b5:42:35:21:06:00:4d:91:de:5c:3a:91:c9:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:79:D1:CC:4F:E2:BD:8A:7E:5F:EE:D1:35:48:03:13:D2:78:0D:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC3C01F630A411F0821DE9ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.220.0-45.206.255.255
Signature Algorithm: sha256WithRSAEncryption
b8:a5:3a:f7:8e:4e:1c:54:73:bc:92:22:66:0c:5c:f7:6c:ac:
29:7c:d4:f5:89:d9:94:7c:b7:f1:a2:dd:64:e8:ef:6c:36:9d:
08:a0:b2:f5:70:b3:f3:09:79:22:ec:dc:73:af:ad:85:56:7c:
8f:8d:d4:1c:9b:09:c5:f8:63:67:41:1d:2c:08:89:b0:aa:66:
d2:05:63:4f:8c:64:ab:c7:5b:86:f5:f6:cb:2a:92:1e:92:93:
ce:24:fe:da:cd:05:dd:70:5c:25:52:e8:62:80:a7:69:29:3c:
2f:a8:a8:52:7d:0d:2b:60:27:ec:3d:91:9f:d1:86:24:ee:ff:
9e:c5:0b:45:53:92:98:f2:89:c8:ce:4b:04:99:c9:63:45:1c:
0b:37:54:e0:4c:af:20:1e:cb:e5:36:69:60:98:2d:bb:7a:07:
cb:9f:d2:66:39:02:13:ec:25:a0:05:a5:3e:fb:5c:8a:2f:fc:
af:27:eb:fb:9b:bf:de:3e:63:2b:a5:8d:fb:61:c9:f9:32:f1:
e0:8c:fc:2e:49:78:4b:b7:d5:4f:32:8a:4c:99:74:6b:a7:2c:
d3:b9:d8:a4:13:42:4e:7d:8b:3f:be:26:2d:07:fa:22:e8:aa:
a9:81:c6:74:63:c4:70:3a:2d:b8:28:e4:8b:85:e2:ea:9c:0c:
0c:99:f9:0c
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIDAVQkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTE0MDkyMTQ0WhcNMjUwNjE1MDkyMTQ0WjAYMRYw
FAYDVQQDEw02ODI0NjBhYy1kZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxGuOhsR1WboZG0/J9ER03iXjLwLDUKsqoCeumzoKT3L9/0ZSjXZQEyWI
RCjxOkpIYr0a8wjYp3PF6pRRefSG6wk4DiOBRCQrdO+YD/2C/1/j2/NFth4dyvUm
AYouPqzZPw3Pcb4QaaatJ7TaYR0Er1mfSBGnT7qVbfrLwvKCcN1h7zEBkur4KFOu
SCgRM2SGAf3iMQtDoU7WO0IY5rRWG03bqpubyyhomVQpmvDrMke5jYhIShVxSfg9
2dJbX2y33Er3OaA/0+zt9oT5+dRJHfnTIH5FO9k6rVPYvam7D7uFMTVDFEivV9Ak
9zQwDi7cErVCNSEGAE2R3lw6kclf3QIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFFN5
0cxP4r2Kfl/u0TVIAxPSeA2fMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQzNDMDFGNjMwQTQxMUYwODIxREU5RUNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAItztwDAwAtzjANBgkqhkiG
9w0BAQsFAAOCAQEAuKU6945OHFRzvJIiZgxc92ysKXzU9YnZlHy38aLdZOjvbDad
CKCy9XCz8wl5Iuzcc6+thVZ8j43UHJsJxfhjZ0EdLAiJsKpm0gVjT4xkq8dbhvX2
yyqSHpKTziT+2s0F3XBcJVLoYoCnaSk8L6ioUn0NK2An7D2Rn9GGJO7/nsULRVOS
mPKJyM5LBJnJY0UcCzdU4EyvIB7L5TZpYJgtu3oHy5/SZjkCE+wloAWlPvtcii/8
ryfr+5u/3j5jK6WN+2HJ+TLx4Iz8Lkl4S7fVTzKKTJl0a6cs07nYpBNCTn2LP74m
LQf6IuiqqYHGdGPEcDotuCjki4Xi6pwMDJn5DA==
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:26:11 2025 by rpki-client