Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B33A330687911F0839C23DDDAE4EC9C.roa
File: 6B33A330687911F0839C23DDDAE4EC9C.roa (raw, json)
Hash identifier: bcyT6HXgoY/ey6LGMHBIAvndsgep+UumW2widdIrk/4=
Subject key identifier: A4:28:EB:C7:08:C0:76:6D:82:34:B9:20:09:F2:D8:50:85:D0:DE:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016739
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B33A330687911F0839C23DDDAE4EC9C.roa
Signing time: Thu 24 Jul 2025 10:31:55 +0000
ROA not before: Thu 24 Jul 2025 10:31:50 +0000
ROA not after: Sat 30 Aug 2025 10:31:50 +0000
asID: 400046
IP address blocks: 45.194.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91961 (0x16739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 10:31:50 2025 GMT
Not After : Aug 30 10:31:50 2025 GMT
Subject: CN=68820b9b-d55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:91:9e:c1:42:2c:9f:91:84:16:d3:3f:68:
6b:b1:a6:b0:7a:2b:f6:8a:01:3d:f1:e0:ff:a3:c3:
41:4f:4b:03:8d:14:ad:0d:6d:ab:84:21:bd:75:6d:
03:a7:93:f2:9b:87:2b:7c:b2:93:32:c0:af:16:b3:
a9:99:8b:06:e6:12:68:bd:35:09:9e:a9:d3:29:97:
94:6a:2a:64:2f:a7:86:ad:f6:a7:6f:6e:08:b5:96:
35:8d:f8:2e:5c:9b:2b:3d:d8:38:3f:fe:fe:3e:4a:
74:b7:d9:d8:fe:f3:a7:03:b9:35:ba:ca:b7:3d:21:
b8:46:a6:45:d6:9e:c1:d0:30:29:57:6e:fd:5d:fd:
91:b1:a7:0d:1e:13:3d:ea:0c:13:d3:d3:fe:c4:7e:
20:e9:07:e2:5e:29:e7:d8:18:f8:fa:92:e0:fa:59:
5e:35:ba:49:9e:f9:4e:e9:b5:0d:c3:b1:79:df:df:
b3:90:c7:37:75:61:b0:f4:37:87:d9:d2:b8:f2:ca:
37:14:79:34:11:ee:23:76:b6:c8:c3:fa:ad:33:d0:
72:fe:ed:65:27:99:9d:47:9c:e4:32:ec:6f:da:cc:
b7:ba:10:5e:3e:e1:2b:90:3f:4c:f2:22:69:3f:4f:
74:ea:40:0d:39:37:f0:46:50:c5:e7:22:17:35:40:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:28:EB:C7:08:C0:76:6D:82:34:B9:20:09:F2:D8:50:85:D0:DE:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B33A330687911F0839C23DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.41.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:83:03:17:75:c9:4e:a6:de:ba:dd:c4:93:d5:8b:be:37:c7:
4a:25:ae:2e:9e:90:0e:b8:1d:b3:0a:d5:52:c1:44:80:c9:c8:
2a:4b:f6:09:93:2c:15:a1:5a:84:3f:90:68:6d:3c:1c:b1:88:
50:33:7a:a8:d0:21:eb:19:80:a6:58:b7:c9:01:ce:e1:78:88:
d1:bd:f9:b2:6d:7d:8c:f5:5c:be:8e:cd:2c:db:45:4a:b2:3e:
15:de:f2:16:df:98:02:b2:6b:df:2b:c6:e2:ae:11:70:16:50:
21:98:51:eb:8f:d7:87:a0:a8:71:e8:7b:a8:8e:3d:22:c3:3a:
b6:e3:17:6e:cc:49:3d:dd:45:ad:8e:d2:c4:1c:e6:38:4c:75:
15:49:20:8c:4e:1a:fb:8f:43:a8:08:91:b8:00:a8:f5:ae:59:
bf:9d:de:ad:38:c2:c0:bf:90:4a:4d:ee:2d:88:c3:f1:a5:09:
6f:67:d9:3e:ab:70:2f:12:88:99:52:05:ee:55:a7:60:f4:80:
59:8d:be:59:41:91:99:b1:2e:ff:cd:66:b8:96:15:b7:ac:ce:
48:5f:92:98:33:4f:18:a6:10:5f:ec:21:28:73:cb:6b:d8:ca:
3f:ba:08:9c:b3:f2:2b:d1:ec:e0:70:7b:2b:d5:94:07:ad:85:
9f:11:ec:12
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWc5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzI0MTAzMTUwWhcNMjUwODMwMTAzMTUwWjAYMRYw
FAYDVQQDEw02ODgyMGI5Yi1kNTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzEqRnsFCLJ+RhBbTP2hrsaaweiv2igE98eD/o8NBT0sDjRStDW2rhCG9
dW0Dp5Pym4crfLKTMsCvFrOpmYsG5hJovTUJnqnTKZeUaipkL6eGrfanb24ItZY1
jfguXJsrPdg4P/7+Pkp0t9nY/vOnA7k1usq3PSG4RqZF1p7B0DApV279Xf2RsacN
HhM96gwT09P+xH4g6QfiXinn2Bj4+pLg+lleNbpJnvlO6bUNw7F539+zkMc3dWGw
9DeH2dK48so3FHk0Ee4jdrbIw/qtM9By/u1lJ5mdR5zkMuxv2sy3uhBePuErkD9M
8iJpP0906kANOTfwRlDF5yIXNUDYWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKQo
68cIwHZtgjS5IAny2FCF0N6uMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QjMzQTMzMDY4NzkxMUYwODM5QzIzREREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIpMA0GCSqGSIb3DQEBCwUA
A4IBAQCygwMXdclOpt663cST1Yu+N8dKJa4unpAOuB2zCtVSwUSAycgqS/YJkywV
oVqEP5BobTwcsYhQM3qo0CHrGYCmWLfJAc7heIjRvfmybX2M9Vy+js0s20VKsj4V
3vIW35gCsmvfK8birhFwFlAhmFHrj9eHoKhx6Huojj0iwzq24xduzEk93UWtjtLE
HOY4THUVSSCMThr7j0OoCJG4AKj1rlm/nd6tOMLAv5BKTe4tiMPxpQlvZ9k+q3Av
EoiZUgXuVadg9IBZjb5ZQZGZsS7/zWa4lhW3rM5IX5KYM08YphBf7CEoc8tr2Mo/
ugics/Ir0ezgcHsr1ZQHrYWfEewS
-----END CERTIFICATE-----
Generated at Sat Jul 26 01:19:10 2025 by rpki-client