Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/015CB8B2F80C11EFBC708045762E951A.roa
File: 015CB8B2F80C11EFBC708045762E951A.roa (raw, json)
Hash identifier: qRvSZRqhPzCQ5pC+zbKo+MQuT+nAw1odzUW8BDI43cA=
Subject key identifier: 0F:05:24:CB:23:16:9D:41:89:E0:59:A9:6E:89:E0:C0:89:07:58:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0140D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/015CB8B2F80C11EFBC708045762E951A.roa
Signing time: Mon 03 Mar 2025 08:46:32 +0000
ROA not before: Mon 03 Mar 2025 08:46:28 +0000
ROA not after: Wed 23 Apr 2025 08:46:28 +0000
asID: 203020
IP address blocks: 45.198.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82136 (0x140d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 08:46:28 2025 GMT
Not After : Apr 23 08:46:28 2025 GMT
Subject: CN=67c56c68-a658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:0b:77:e8:8e:15:e2:88:47:65:ac:7d:39:
ae:c2:2a:8b:21:fa:3b:79:be:a4:5f:c6:93:d4:7c:
04:9b:f4:5a:22:02:52:55:be:16:37:4b:7b:49:f4:
92:3e:67:fc:4b:06:14:f3:56:6d:5a:cd:ff:14:62:
01:22:1d:c0:d9:4e:03:84:20:ce:f3:d1:49:9b:31:
28:b6:a1:69:0c:e8:20:b4:42:b0:93:cb:17:5f:1d:
36:9b:d0:2c:48:f1:d4:fb:0e:c1:b5:01:68:94:c1:
ed:87:93:8d:cb:c9:72:5a:42:11:e1:10:5d:0d:e8:
e6:0c:11:7b:88:ca:2f:ea:7a:86:74:65:65:13:85:
db:fc:fc:bb:b6:fc:4d:a2:76:b9:19:25:8a:50:7d:
80:e7:35:42:8a:71:e0:4e:ca:fe:c0:e7:eb:c0:d8:
fa:89:19:86:3c:3c:fa:82:75:19:8b:a4:ed:3d:3f:
24:82:b5:f0:b1:59:99:da:d3:27:6a:c0:de:0d:8d:
de:25:df:a4:44:1d:10:b8:f6:ea:99:80:85:82:3f:
52:bf:52:4c:6f:ba:27:54:c7:9d:ee:1c:51:30:2d:
e4:48:e4:45:cc:18:43:12:17:77:52:87:f8:d7:ba:
3b:12:67:cf:ec:76:a0:5e:c4:47:3e:34:bb:25:98:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:05:24:CB:23:16:9D:41:89:E0:59:A9:6E:89:E0:C0:89:07:58:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/015CB8B2F80C11EFBC708045762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:00:e8:0e:f4:79:3b:25:a4:bc:b1:3b:93:bc:7b:bb:fc:0b:
c3:dc:90:9a:52:51:9e:41:25:78:5d:04:7b:29:89:6a:f1:67:
cf:bf:3a:60:f6:ef:22:80:f7:e9:8b:ce:34:a7:7f:8a:35:4c:
a1:2e:ec:96:31:7e:fb:98:6e:a8:d1:b1:4b:32:56:af:de:bd:
88:7b:30:ad:8d:1e:2c:0c:6d:21:83:e8:a2:50:ed:1d:aa:6d:
7e:30:99:76:86:21:18:63:22:53:f6:51:b7:0e:3d:37:b4:8c:
2f:bf:ff:09:bc:a3:c8:0b:dd:f1:8d:af:60:ae:e6:9f:ec:f3:
c1:c5:87:07:01:e1:04:7d:09:4c:7f:5a:96:01:df:f6:57:f5:
9b:7a:fd:ca:ee:fb:87:c5:4c:a8:48:d3:75:d7:88:e7:59:8e:
86:95:fc:01:d3:83:9d:91:fa:43:9d:39:4b:2e:d2:12:71:82:
6d:9a:b5:e1:45:4e:d8:75:37:53:ea:4e:d6:7e:18:0b:ff:c8:
e8:ba:00:3c:da:01:94:8f:26:d6:a9:74:68:31:bd:f1:11:c4:
3e:9e:d2:3e:19:06:5e:4a:80:a9:c6:57:34:74:10:ab:44:c5:
17:23:08:3d:7f:3e:e5:5b:f7:a9:3b:82:83:1f:18:8d:9e:8c:
57:1c:ca:cb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUDYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzAzMDg0NjI4WhcNMjUwNDIzMDg0NjI4WjAYMRYw
FAYDVQQDEw02N2M1NmM2OC1hNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy8QLd+iOFeKIR2WsfTmuwiqLIfo7eb6kX8aT1HwEm/RaIgJSVb4WN0t7
SfSSPmf8SwYU81ZtWs3/FGIBIh3A2U4DhCDO89FJmzEotqFpDOggtEKwk8sXXx02
m9AsSPHU+w7BtQFolMHth5ONy8lyWkIR4RBdDejmDBF7iMov6nqGdGVlE4Xb/Py7
tvxNona5GSWKUH2A5zVCinHgTsr+wOfrwNj6iRmGPDz6gnUZi6TtPT8kgrXwsVmZ
2tMnasDeDY3eJd+kRB0QuPbqmYCFgj9Sv1JMb7onVMed7hxRMC3kSORFzBhDEhd3
Uof417o7EmfP7HagXsRHPjS7JZgiDwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA8F
JMsjFp1BieBZqW6J4MCJB1jtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMTVDQjhCMkY4MEMxMUVGQkM3MDgwNDU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcbgMA0GCSqGSIb3DQEBCwUA
A4IBAQCbAOgO9Hk7JaS8sTuTvHu7/AvD3JCaUlGeQSV4XQR7KYlq8WfPvzpg9u8i
gPfpi840p3+KNUyhLuyWMX77mG6o0bFLMlav3r2IezCtjR4sDG0hg+iiUO0dqm1+
MJl2hiEYYyJT9lG3Dj03tIwvv/8JvKPIC93xja9gruaf7PPBxYcHAeEEfQlMf1qW
Ad/2V/Wbev3K7vuHxUyoSNN114jnWY6GlfwB04OdkfpDnTlLLtIScYJtmrXhRU7Y
dTdT6k7WfhgL/8jougA82gGUjybWqXRoMb3xEcQ+ntI+GQZeSoCpxlc0dBCrRMUX
Iwg9fz7lW/epO4KDHxiNnoxXHMrL
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:17 2025 by rpki-client