Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7606F4E213C411F0924335AF762E951A.roa
File: 7606F4E213C411F0924335AF762E951A.roa (raw, json)
Hash identifier: 7Q3z+aCRmNqYOBgw69iPNVIiFTqyUM+JKycdLTvsqCA=
Subject key identifier: 1C:D1:1A:02:D6:B2:79:BC:64:AD:EF:D2:B8:A2:2C:5A:4C:4A:AE:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7606F4E213C411F0924335AF762E951A.roa
Signing time: Mon 07 Apr 2025 15:24:56 +0000
ROA not before: Mon 07 Apr 2025 15:24:52 +0000
ROA not after: Sun 11 May 2025 15:24:52 +0000
asID: 60223
IP address blocks: 45.196.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84614 (0x14a86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 15:24:52 2025 GMT
Not After : May 11 15:24:52 2025 GMT
Subject: CN=67f3ee48-402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d9:d8:49:9b:82:c6:08:e3:01:61:af:e5:a1:
e9:12:4f:a8:8a:73:80:49:37:70:55:f9:2d:a2:23:
cc:fe:31:3b:56:ff:c0:ae:b9:da:35:b5:d2:46:fb:
1d:f2:4c:66:f3:5f:31:aa:aa:ca:e1:03:85:9b:cc:
0f:a7:b4:30:c9:92:d8:f3:3a:ef:ad:08:8a:f2:f4:
73:e0:a5:7c:5d:d9:d9:b5:33:1d:e1:48:81:80:23:
e3:fd:04:0f:75:09:45:43:97:3a:d9:e7:c7:1c:43:
35:23:bc:bd:f4:4b:45:82:bd:de:29:15:6d:f5:96:
c7:1f:e5:66:86:6c:5d:1a:48:05:2d:ce:e1:f3:c4:
bb:f3:99:cd:18:f6:03:95:2f:2d:c5:57:28:1d:48:
4b:53:46:e3:cf:f2:9e:c5:5b:69:c8:29:5d:41:76:
a8:eb:d7:f3:1d:85:93:95:96:3f:38:cb:99:d2:ed:
74:0e:8d:ab:39:62:c9:30:1e:ea:86:c2:46:f4:6e:
e1:98:e4:16:37:f1:cc:93:ec:e2:50:8e:e7:60:35:
a5:47:d8:8b:fd:09:18:2a:b6:d5:fc:a8:78:98:30:
77:dd:7b:0d:9e:b8:a5:c4:fc:fa:e5:8d:c5:3c:01:
76:42:72:a3:22:68:0e:66:be:29:f6:59:8f:1c:64:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:1A:02:D6:B2:79:BC:64:AD:EF:D2:B8:A2:2C:5A:4C:4A:AE:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7606F4E213C411F0924335AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.197.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5c:2d:83:02:8a:70:c8:c9:8a:b2:75:8e:26:22:60:c1:e1:
74:b1:b0:52:d9:fc:11:c2:98:66:1c:67:40:b4:de:21:75:cd:
bf:da:13:25:8d:79:0a:5d:40:29:30:be:26:15:36:be:a1:d6:
16:92:f4:ef:fb:71:d4:7c:a5:03:6b:64:bc:3d:f7:82:ff:80:
62:26:1e:36:f8:21:2a:f5:78:41:a0:b2:1c:fe:ce:b0:a0:48:
33:99:76:8a:42:fe:f2:1b:6f:5c:aa:46:cb:bc:54:b9:8b:f9:
46:9f:e8:1b:a9:1e:f0:d9:c6:a3:58:0e:77:df:8b:bf:6c:22:
bc:3d:26:4a:73:7b:c2:37:4f:30:89:fc:6a:00:3f:ce:b2:a7:
cb:66:93:cf:53:6c:25:40:a7:17:4b:c6:9e:63:ab:98:7e:05:
f7:49:c3:30:51:44:dd:a7:b8:92:30:78:ac:80:af:43:59:f5:
91:46:92:ac:41:c0:db:35:f4:90:30:6b:a1:27:2e:4d:91:4c:
67:9b:35:f3:70:5d:92:b4:8f:03:c8:7a:c9:84:b6:05:1a:7f:
97:da:75:5a:c8:ae:42:4c:22:fc:01:be:e3:6e:8e:d8:25:b9:
d2:22:82:2a:2a:35:fb:b9:f2:bb:8f:60:c3:11:af:89:0c:96:
3c:50:ac:ba
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUqGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA3MTUyNDUyWhcNMjUwNTExMTUyNDUyWjAYMRYw
FAYDVQQDEw02N2YzZWU0OC00MDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0dnYSZuCxgjjAWGv5aHpEk+oinOASTdwVfktoiPM/jE7Vv/ArrnaNbXS
Rvsd8kxm818xqqrK4QOFm8wPp7QwyZLY8zrvrQiK8vRz4KV8XdnZtTMd4UiBgCPj
/QQPdQlFQ5c62efHHEM1I7y99EtFgr3eKRVt9ZbHH+VmhmxdGkgFLc7h88S785nN
GPYDlS8txVcoHUhLU0bjz/KexVtpyCldQXao69fzHYWTlZY/OMuZ0u10Do2rOWLJ
MB7qhsJG9G7hmOQWN/HMk+ziUI7nYDWlR9iL/QkYKrbV/Kh4mDB33XsNnrilxPz6
5Y3FPAF2QnKjImgOZr4p9lmPHGSRLwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBzR
GgLWsnm8ZK3v0riiLFpMSq7OMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NjA2RjRFMjEzQzQxMUYwOTI0MzM1QUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTFMA0GCSqGSIb3DQEBCwUA
A4IBAQCLXC2DAopwyMmKsnWOJiJgweF0sbBS2fwRwphmHGdAtN4hdc2/2hMljXkK
XUApML4mFTa+odYWkvTv+3HUfKUDa2S8PfeC/4BiJh42+CEq9XhBoLIc/s6woEgz
mXaKQv7yG29cqkbLvFS5i/lGn+gbqR7w2cajWA5334u/bCK8PSZKc3vCN08wifxq
AD/OsqfLZpPPU2wlQKcXS8aeY6uYfgX3ScMwUUTdp7iSMHisgK9DWfWRRpKsQcDb
NfSQMGuhJy5NkUxnmzXzcF2StI8DyHrJhLYFGn+X2nVayK5CTCL8Ab7jbo7YJbnS
IoIqKjX7ufK7j2DDEa+JDJY8UKy6
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:56:58 2025 by rpki-client