Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1393F322F41C11EF9A92604A762E951A.roa
File: 1393F322F41C11EF9A92604A762E951A.roa (raw, json)
Hash identifier: nFOApLlywMhv0PVbxGgN9Ra5MUizjMbg5GXvGb2WiP4=
Subject key identifier: 28:01:EF:75:58:3B:DE:19:A0:10:FC:B1:A1:1E:C8:E6:D1:58:5B:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012FF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1393F322F41C11EF9A92604A762E951A.roa
Signing time: Wed 26 Feb 2025 08:31:30 +0000
ROA not before: Wed 26 Feb 2025 08:31:26 +0000
ROA not after: Sat 19 Feb 2028 08:31:26 +0000
asID: 17561
IP address blocks: 45.197.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77810 (0x12ff2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 08:31:26 2025 GMT
Not After : Feb 19 08:31:26 2028 GMT
Subject: CN=67bed162-21a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:b3:f5:2c:ba:e6:36:c5:81:ed:a8:4d:84:
a0:18:c5:d3:57:52:4d:7e:ac:32:bf:2a:73:bb:e0:
e5:5c:43:2b:4c:51:3e:9e:af:65:1a:77:5d:84:09:
93:fa:40:b5:0d:b9:91:3e:3a:8a:be:a8:15:7b:3a:
3e:90:cc:50:9f:dd:b7:6e:c4:2f:fe:b5:5d:7c:bb:
ab:d4:30:98:fe:cf:c9:8d:4d:78:c9:c9:76:7f:53:
1d:6e:1f:d9:36:27:ac:81:14:e5:b6:7e:cb:ae:7b:
f5:11:5a:76:e2:4d:b2:40:bc:56:c9:0e:33:7a:a3:
8a:6d:2b:06:50:6f:c2:35:7b:9e:bd:41:ed:f4:3b:
f8:ce:75:9a:b4:82:f8:21:1f:a3:5e:bb:0c:cd:90:
54:18:1d:2c:e2:44:f8:ca:c8:e0:1b:38:0b:37:c9:
e0:50:ab:e8:73:d3:2e:35:87:fa:a6:84:c0:c7:59:
c0:32:d4:14:fe:35:49:52:d2:4e:3d:a9:5e:91:5f:
73:ca:a0:79:09:f6:ad:2b:01:16:73:2f:9e:7f:c2:
a2:9a:c4:3f:d2:ab:f0:15:fd:03:03:e8:53:e9:74:
c0:ec:af:4f:99:e2:04:67:43:38:e3:cb:59:75:19:
75:98:56:cc:29:5c:0e:51:51:94:30:d6:ff:48:cc:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:EF:75:58:3B:DE:19:A0:10:FC:B1:A1:1E:C8:E6:D1:58:5B:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1393F322F41C11EF9A92604A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:02:ea:d1:a1:14:d8:3f:7b:37:00:1f:e5:f7:a9:76:23:f3:
c1:40:32:4c:8d:44:32:ba:89:ca:72:74:d2:69:96:1f:49:bc:
99:6c:66:51:02:ff:82:7d:bf:f3:bb:9c:1b:56:ac:3c:2c:e2:
0a:b8:1d:1d:70:cd:44:54:a9:f8:63:d5:82:ac:34:7c:ed:6a:
4a:b4:39:7f:71:02:63:2e:83:68:0d:62:ef:54:6f:37:e1:02:
24:14:11:38:ef:2b:87:e3:b5:ce:67:e2:5b:2a:21:b3:ae:e6:
8c:43:78:10:f5:0e:ac:93:3f:a4:67:2c:89:01:ff:25:ec:94:
6d:10:5a:7d:0c:b8:46:68:0f:aa:e5:e4:f3:2a:b1:7b:09:64:
e1:4b:8e:b4:4c:62:8c:e8:e9:dd:69:04:af:ba:32:fa:e6:3a:
38:a9:b5:39:a1:4f:c6:3c:b4:91:52:23:1b:3f:da:69:4d:5c:
1e:5f:27:bc:f6:c7:fa:28:43:11:aa:a2:38:7b:7d:03:8f:b0:
3d:39:44:de:08:a9:f0:23:85:35:a3:ef:bb:67:e7:32:91:9d:
b9:ab:55:9e:4a:36:64:5c:12:f5:c7:3a:e6:44:de:eb:70:1d:
45:23:88:58:e0:38:d7:ac:3c:f7:17:bd:43:77:c2:92:cf:50:
77:36:38:be
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS/yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MDgzMTI2WhcNMjgwMjE5MDgzMTI2WjAYMRYw
FAYDVQQDEw02N2JlZDE2Mi0yMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxlSz9Sy65jbFge2oTYSgGMXTV1JNfqwyvypzu+DlXEMrTFE+nq9lGndd
hAmT+kC1DbmRPjqKvqgVezo+kMxQn923bsQv/rVdfLur1DCY/s/JjU14ycl2f1Md
bh/ZNiesgRTltn7Lrnv1EVp24k2yQLxWyQ4zeqOKbSsGUG/CNXuevUHt9Dv4znWa
tIL4IR+jXrsMzZBUGB0s4kT4ysjgGzgLN8ngUKvoc9MuNYf6poTAx1nAMtQU/jVJ
UtJOPalekV9zyqB5CfatKwEWcy+ef8KimsQ/0qvwFf0DA+hT6XTA7K9PmeIEZ0M4
48tZdRl1mFbMKVwOUVGUMNb/SMyFlwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCgB
73VYO94ZoBD8saEeyObRWFvMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMzkzRjMyMkY0MUMxMUVGOUE5MjYwNEE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcU2MA0GCSqGSIb3DQEBCwUA
A4IBAQAdAurRoRTYP3s3AB/l96l2I/PBQDJMjUQyuonKcnTSaZYfSbyZbGZRAv+C
fb/zu5wbVqw8LOIKuB0dcM1EVKn4Y9WCrDR87WpKtDl/cQJjLoNoDWLvVG834QIk
FBE47yuH47XOZ+JbKiGzruaMQ3gQ9Q6skz+kZyyJAf8l7JRtEFp9DLhGaA+q5eTz
KrF7CWThS460TGKM6OndaQSvujL65jo4qbU5oU/GPLSRUiMbP9ppTVweXye89sf6
KEMRqqI4e30Dj7A9OUTeCKnwI4U1o++7Z+cykZ25q1WeSjZkXBL1xzrmRN7rcB1F
I4hY4DjXrDz3F71Dd8KSz1B3Nji+
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:46 2025 by rpki-client