Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07CBD11EF43411EFAA318571762E951A.roa
File: 07CBD11EF43411EFAA318571762E951A.roa (raw, json)
Hash identifier: 6QkVb9IW5AsOqxRAVvscNEKP3w1p/sA7ixFUPLt2w3U=
Subject key identifier: 03:F3:00:97:BD:8D:77:45:FF:20:3E:69:53:B0:43:E6:B9:F7:AF:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07CBD11EF43411EFAA318571762E951A.roa
Signing time: Wed 26 Feb 2025 11:22:58 +0000
ROA not before: Wed 26 Feb 2025 11:22:54 +0000
ROA not after: Thu 19 Feb 2026 11:22:54 +0000
asID: 328608
IP address blocks: 45.205.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78270 (0x131be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:22:54 2025 GMT
Not After : Feb 19 11:22:54 2026 GMT
Subject: CN=67bef992-9d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:89:91:97:b2:c0:bc:52:98:3d:4e:94:cb:
0c:13:19:b8:86:33:67:7d:78:f3:dd:08:4e:e1:3f:
38:bb:63:4b:eb:ac:a9:e6:7f:bc:bc:85:da:d0:ab:
c9:ed:f4:94:63:f8:a8:c9:42:7c:87:29:78:8e:23:
6d:c5:1e:22:cb:1c:b7:ab:10:cb:c6:0e:e1:e0:af:
ba:b3:01:99:8d:3e:70:6b:34:ec:bf:24:e2:b4:4f:
f6:28:75:46:0b:b8:aa:81:08:e1:27:2e:52:6e:69:
0a:ae:e0:52:14:c8:0e:da:48:0e:40:2b:26:ba:72:
c3:5f:be:7a:07:30:5a:03:de:ca:0e:1f:a3:b6:a8:
fd:5f:e4:59:c5:46:c5:52:e5:40:e0:28:6b:8d:aa:
e6:42:78:4c:9d:cd:d6:b2:86:6d:bd:5b:88:39:4f:
27:ab:31:ab:b2:c6:80:69:69:63:b2:a0:28:1f:0c:
9d:fd:c4:fb:2a:fd:51:27:f8:f8:06:f5:11:47:77:
92:af:c8:2e:a2:23:b7:65:7f:1e:fc:9e:86:f0:b8:
0c:26:34:70:ea:92:e2:3f:ac:c7:23:e5:8c:26:db:
9e:58:ef:d7:8c:8c:ca:a4:da:98:67:ce:5c:f2:c9:
31:22:6a:e4:c9:c2:a9:a6:12:cf:c8:95:0a:ba:4f:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:00:97:BD:8D:77:45:FF:20:3E:69:53:B0:43:E6:B9:F7:AF:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07CBD11EF43411EFAA318571762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.142.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ff:7f:0c:fe:95:be:e3:20:c3:5b:e0:d1:c7:c4:50:49:25:
4d:2b:53:95:7a:b5:ab:d6:2f:63:8a:83:1b:dc:94:b0:c8:8e:
9b:ad:b5:de:65:c5:9a:52:1b:bc:82:16:ce:c3:31:97:3a:1f:
49:29:93:fd:c2:32:03:af:2f:73:cb:31:2b:ef:7d:12:0a:e9:
ba:cd:21:3a:a3:c9:6c:1e:ff:f6:f3:36:78:c0:40:c0:f1:12:
93:d1:d2:41:42:e4:7c:71:2b:2e:f3:74:e7:92:6d:4b:31:40:
37:1d:1a:d7:d9:67:85:c1:c9:46:cc:81:3c:40:1e:38:62:47:
f1:60:8e:01:01:ff:45:b6:2c:91:a8:a6:ae:ab:83:9a:ee:30:
5c:f6:a2:27:20:8d:c4:bb:08:0c:97:f3:be:98:27:22:8b:62:
c3:c3:e5:13:dc:26:db:d0:ef:b9:4d:5e:35:0a:15:48:b8:5a:
a7:71:c8:f7:86:bd:32:d2:83:56:31:6b:8a:91:30:8f:8f:be:
24:c9:7e:22:bc:84:34:9b:c8:50:a4:df:6b:14:16:47:ef:f3:
67:e8:89:85:01:19:f3:86:79:d0:08:0f:ae:2a:78:39:b3:de:
db:73:b7:4d:32:3b:a9:b7:52:8c:59:1b:e5:32:c0:07:18:65:
d1:66:62:ac
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATG+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTEyMjU0WhcNMjYwMjE5MTEyMjU0WjAYMRYw
FAYDVQQDEw02N2JlZjk5Mi05ZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuA+JkZeywLxSmD1OlMsMExm4hjNnfXjz3QhO4T84u2NL66yp5n+8vIXa
0KvJ7fSUY/ioyUJ8hyl4jiNtxR4iyxy3qxDLxg7h4K+6swGZjT5wazTsvyTitE/2
KHVGC7iqgQjhJy5SbmkKruBSFMgO2kgOQCsmunLDX756BzBaA97KDh+jtqj9X+RZ
xUbFUuVA4ChrjarmQnhMnc3WsoZtvVuIOU8nqzGrssaAaWljsqAoHwyd/cT7Kv1R
J/j4BvURR3eSr8guoiO3ZX8e/J6G8LgMJjRw6pLiP6zHI+WMJtueWO/XjIzKpNqY
Z85c8skxImrkycKpphLPyJUKuk+TpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAPz
AJe9jXdF/yA+aVOwQ+a596/IMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wN0NCRDExRUY0MzQxMUVGQUEzMTg1NzE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc2OMA0GCSqGSIb3DQEBCwUA
A4IBAQB1/38M/pW+4yDDW+DRx8RQSSVNK1OVerWr1i9jioMb3JSwyI6brbXeZcWa
Uhu8ghbOwzGXOh9JKZP9wjIDry9zyzEr730SCum6zSE6o8lsHv/28zZ4wEDA8RKT
0dJBQuR8cSsu83Tnkm1LMUA3HRrX2WeFwclGzIE8QB44YkfxYI4BAf9FtiyRqKau
q4Oa7jBc9qInII3EuwgMl/O+mCcii2LDw+UT3Cbb0O+5TV41ChVIuFqnccj3hr0y
0oNWMWuKkTCPj74kyX4ivIQ0m8hQpN9rFBZH7/Nn6ImFARnzhnnQCA+uKng5s97b
c7dNMjupt1KMWRvlMsAHGGXRZmKs
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:42 2025 by rpki-client