Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1382AA6603E611F09409577B762E951A.roa
File: 1382AA6603E611F09409577B762E951A.roa (raw, json)
Hash identifier: 9wLp4Tvc3QkTHSe0P5aOYyzlmcgr1pWDaxEFKUwCylU=
Subject key identifier: 86:42:E2:ED:49:58:89:35:A3:1B:2A:B6:DC:56:AE:3F:39:3C:72:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01469F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1382AA6603E611F09409577B762E951A.roa
Signing time: Tue 18 Mar 2025 10:45:15 +0000
ROA not before: Tue 18 Mar 2025 10:45:11 +0000
ROA not after: Sun 27 Apr 2025 10:45:11 +0000
asID: 202656
IP address blocks: 45.199.225.0/24 maxlen: 24
45.199.226.0/24 maxlen: 24
45.199.227.0/24 maxlen: 24
45.199.228.0/24 maxlen: 24
45.199.229.0/24 maxlen: 24
45.199.230.0/24 maxlen: 24
45.199.241.0/24 maxlen: 24
45.199.242.0/24 maxlen: 24
45.199.243.0/24 maxlen: 24
45.200.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83615 (0x1469f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 10:45:11 2025 GMT
Not After : Apr 27 10:45:11 2025 GMT
Subject: CN=67d94ebb-1c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:f0:25:88:a1:ce:09:27:25:54:cf:76:e5:
d2:2a:32:2e:d4:67:a0:d9:76:84:64:f0:a4:5f:15:
36:32:81:26:98:8c:3b:d4:a6:3a:81:05:3d:52:be:
9b:65:5e:7d:92:e8:5a:1d:91:99:b5:7b:40:1c:64:
bc:da:ab:21:02:9b:1a:03:a2:24:2c:f0:8c:f2:db:
3e:5e:57:8c:bf:b8:cb:82:9d:86:ac:e8:f4:d3:ba:
34:7d:8a:61:1d:4b:5c:e2:b0:37:c7:0f:17:a8:c9:
2c:5a:42:25:7d:40:5b:62:40:6a:9a:91:ea:2e:0f:
dd:a4:43:0a:8f:4c:9e:a1:9d:93:d4:bb:a2:4c:24:
44:19:fa:5c:0f:30:90:fc:ed:7a:8b:cd:21:fa:96:
59:b6:2b:b2:35:a1:47:92:29:04:57:ab:17:01:fa:
c4:17:63:13:85:3b:f7:f2:86:4e:a4:19:27:30:17:
c6:17:7f:d9:a8:b2:6d:eb:b1:2b:df:ad:98:50:d6:
eb:bc:af:62:0c:93:e9:77:44:c1:30:f1:37:0f:37:
f2:8a:99:cc:de:fa:a1:9b:2a:11:9b:9f:a0:d3:a6:
e4:37:ba:3c:99:76:b1:42:ab:69:b1:14:20:46:bb:
c4:15:11:35:4a:61:d9:7c:3e:ff:af:ad:f4:fa:14:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:42:E2:ED:49:58:89:35:A3:1B:2A:B6:DC:56:AE:3F:39:3C:72:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1382AA6603E611F09409577B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.225.0-45.199.230.255
45.199.241.0-45.199.243.255
45.200.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3b:7b:00:0e:b5:6f:f4:87:4a:a7:0b:5f:79:70:14:34:a0:
d6:ee:14:b5:56:dd:df:1b:71:c5:07:c1:19:af:c4:31:52:77:
f5:c9:0b:3f:30:fe:b2:cf:2e:1b:f2:be:9c:d0:5a:f9:b2:64:
34:70:4c:0b:6f:a4:53:d3:29:3a:09:bd:cd:24:f1:65:51:d8:
3d:2a:48:e6:1a:0c:54:27:3d:dc:1c:37:a1:c5:54:52:b2:cd:
72:3a:ed:7f:47:3f:b5:01:cd:69:11:d6:8f:c1:cc:0b:04:a0:
2b:37:8a:34:94:cb:04:b7:11:64:1c:06:fb:0a:b3:cc:bb:fd:
14:98:f9:d6:e9:8f:27:eb:1e:5b:ce:2d:73:9d:a8:b0:05:f3:
5a:00:2e:cc:cc:8e:da:8e:c9:52:47:19:f3:dd:09:37:f3:8a:
bb:2a:30:47:0d:89:00:fd:ec:78:ab:ba:2f:02:ad:97:0c:c2:
81:99:45:af:c9:52:94:87:f8:ac:6d:ba:ad:78:3b:01:60:23:
e6:e4:7c:f8:56:38:54:8e:ee:17:f9:49:6b:7b:d1:92:10:f8:
97:97:00:8b:d8:5d:61:ae:f3:cc:f0:4d:b4:2e:f3:fc:94:e3:
a2:1e:31:0d:86:d1:e4:e7:a1:54:de:87:30:94:e3:7e:b7:a0:
8b:82:92:58
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAUafMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE4MTA0NTExWhcNMjUwNDI3MTA0NTExWjAYMRYw
FAYDVQQDEw02N2Q5NGViYi0xYzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5+PwJYihzgknJVTPduXSKjIu1Geg2XaEZPCkXxU2MoEmmIw71KY6gQU9
Ur6bZV59kuhaHZGZtXtAHGS82qshApsaA6IkLPCM8ts+XleMv7jLgp2GrOj007o0
fYphHUtc4rA3xw8XqMksWkIlfUBbYkBqmpHqLg/dpEMKj0yeoZ2T1LuiTCREGfpc
DzCQ/O16i80h+pZZtiuyNaFHkikEV6sXAfrEF2MThTv38oZOpBknMBfGF3/ZqLJt
67Er362YUNbrvK9iDJPpd0TBMPE3DzfyipnM3vqhmyoRm5+g06bkN7o8mXaxQqtp
sRQgRrvEFRE1SmHZfD7/r630+hTCvwIDAQABo4ICvjCCArowHQYDVR0OBBYEFIZC
4u1JWIk1oxsqttxWrj85PHKxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMzgyQUE2NjAzRTYxMUYwOTQwOTU3N0I3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAAtx+EDBAAtx+YwDAMEAC3H
8QMEAi3H8AMEAC3IrzANBgkqhkiG9w0BAQsFAAOCAQEAizt7AA61b/SHSqcLX3lw
FDSg1u4UtVbd3xtxxQfBGa/EMVJ39ckLPzD+ss8uG/K+nNBa+bJkNHBMC2+kU9Mp
Ogm9zSTxZVHYPSpI5hoMVCc93Bw3ocVUUrLNcjrtf0c/tQHNaRHWj8HMCwSgKzeK
NJTLBLcRZBwG+wqzzLv9FJj51umPJ+seW84tc52osAXzWgAuzMyO2o7JUkcZ890J
N/OKuyowRw2JAP3seKu6LwKtlwzCgZlFr8lSlIf4rG26rXg7AWAj5uR8+FY4VI7u
F/lJa3vRkhD4l5cAi9hdYa7zzPBNtC7z/JTjoh4xDYbR5OehVN6HMJTjfregi4KS
WA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:03 2025 by rpki-client