Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/079D542EF42F11EF96D0BD4F762E951A.roa
File: 079D542EF42F11EF96D0BD4F762E951A.roa (raw, json)
Hash identifier: IYJjvpgmhN1/kmqt+OSusDbjVKD/t/x2GCXsq0BktJM=
Subject key identifier: 99:71:5A:EB:DE:09:90:30:80:44:AD:4A:BC:C3:0D:87:E2:1D:60:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013160
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/079D542EF42F11EF96D0BD4F762E951A.roa
Signing time: Wed 26 Feb 2025 10:47:10 +0000
ROA not before: Wed 26 Feb 2025 10:47:06 +0000
ROA not after: Thu 19 Feb 2026 10:47:06 +0000
asID: 328608
IP address blocks: 45.205.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78176 (0x13160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:47:06 2025 GMT
Not After : Feb 19 10:47:06 2026 GMT
Subject: CN=67bef12e-dc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:d8:7a:0b:58:34:91:de:5e:3c:42:7a:6a:
ce:1b:5a:16:35:84:bc:89:f5:fe:fe:6f:e8:3f:a0:
b1:fd:4b:0b:8d:6e:37:2d:e2:83:ae:72:41:db:9e:
7f:ea:b3:b5:e1:48:1b:09:19:7d:b1:0e:65:e3:07:
a6:68:50:d5:05:b9:7c:55:7f:23:78:55:e9:39:d5:
ee:54:1d:09:62:4f:b9:83:b9:3a:1a:d6:7d:c5:e9:
2e:91:df:f6:a8:3c:67:3e:98:d3:49:d9:33:6b:28:
7a:fe:b1:e1:25:e3:02:32:21:7b:48:c3:ba:e0:46:
fd:7d:d3:65:7f:c2:a5:ce:57:ab:4a:6a:3c:3c:75:
98:7f:6a:25:db:39:51:49:2c:de:3d:ed:61:dc:30:
f2:aa:e7:60:65:01:10:41:bd:85:04:a2:a5:67:85:
43:38:06:47:23:5a:56:cb:99:73:7e:8a:c4:ed:1b:
9c:dd:58:86:da:b9:67:89:32:ae:2c:24:cf:26:19:
5d:88:16:4f:ac:40:ef:5f:13:bc:e7:fd:95:13:79:
b6:2e:73:ae:cf:92:a6:a8:c8:c9:80:54:45:2e:2f:
40:5c:db:f1:e3:ee:7f:8d:8d:4a:9e:97:de:24:63:
a7:56:1d:86:53:09:e1:50:09:87:d2:f6:b4:ec:10:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:71:5A:EB:DE:09:90:30:80:44:AD:4A:BC:C3:0D:87:E2:1D:60:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/079D542EF42F11EF96D0BD4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.1.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a5:bc:16:b8:05:e4:ee:b1:a6:cc:b7:a3:68:4a:7f:28:c5:
7f:ae:65:b9:ee:36:b6:7d:7a:98:a5:0b:b5:8d:07:c5:a8:0e:
3a:ca:1c:10:1c:96:56:fc:66:61:ec:ce:36:37:b8:66:b2:3a:
09:4e:87:77:e9:94:03:c8:7b:f0:4a:85:d0:00:ed:f7:79:10:
38:72:30:08:ec:29:49:4c:0e:dd:77:ae:d7:f2:6a:37:d5:4a:
dc:47:55:27:bf:d4:2c:93:5c:fd:e5:09:1e:6f:e4:39:75:f3:
73:69:fe:69:25:87:e6:6d:8a:8d:c4:a3:70:df:eb:e2:3e:cc:
48:8f:22:10:50:0d:e8:36:c0:dc:3b:bf:bc:cf:9a:a8:ae:0f:
ca:b5:d6:e6:07:3c:14:05:08:fd:8c:5d:52:d4:f8:f3:48:35:
13:d5:99:d3:70:9a:20:cd:5c:81:63:0e:40:20:33:ce:18:d4:
84:56:4c:18:2b:13:2d:b2:1a:00:87:8c:50:2f:5a:6b:16:50:
b9:19:91:54:e2:44:14:f6:5a:8a:26:b4:84:f8:6c:c8:1e:4c:
1a:cb:6c:17:03:f4:12:41:a4:c3:10:80:db:f0:81:c6:dc:d6:
84:91:f6:99:a1:ba:f9:aa:de:33:99:d4:48:0a:d9:3d:67:d5:
be:68:24:ba
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATFgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTA0NzA2WhcNMjYwMjE5MTA0NzA2WjAYMRYw
FAYDVQQDEw02N2JlZjEyZS1kYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtPHYegtYNJHeXjxCemrOG1oWNYS8ifX+/m/oP6Cx/UsLjW43LeKDrnJB
255/6rO14UgbCRl9sQ5l4wemaFDVBbl8VX8jeFXpOdXuVB0JYk+5g7k6GtZ9xeku
kd/2qDxnPpjTSdkzayh6/rHhJeMCMiF7SMO64Eb9fdNlf8KlzlerSmo8PHWYf2ol
2zlRSSzePe1h3DDyqudgZQEQQb2FBKKlZ4VDOAZHI1pWy5lzforE7Ruc3ViG2rln
iTKuLCTPJhldiBZPrEDvXxO85/2VE3m2LnOuz5KmqMjJgFRFLi9AXNvx4+5/jY1K
npfeJGOnVh2GUwnhUAmH0va07BD8DwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJlx
WuveCZAwgEStSrzDDYfiHWAeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNzlENTQyRUY0MkYxMUVGOTZEMEJENEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc0BMA0GCSqGSIb3DQEBCwUA
A4IBAQARpbwWuAXk7rGmzLejaEp/KMV/rmW57ja2fXqYpQu1jQfFqA46yhwQHJZW
/GZh7M42N7hmsjoJTod36ZQDyHvwSoXQAO33eRA4cjAI7ClJTA7dd67X8mo31Urc
R1Unv9Qsk1z95Qkeb+Q5dfNzaf5pJYfmbYqNxKNw3+viPsxIjyIQUA3oNsDcO7+8
z5qorg/KtdbmBzwUBQj9jF1S1PjzSDUT1ZnTcJogzVyBYw5AIDPOGNSEVkwYKxMt
shoAh4xQL1prFlC5GZFU4kQU9lqKJrSE+GzIHkway2wXA/QSQaTDEIDb8IHG3NaE
kfaZobr5qt4zmdRICtk9Z9W+aCS6
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:57 2025 by rpki-client