Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/178C57E8E54F11EFADDACA85762E951A.roa
File: 178C57E8E54F11EFADDACA85762E951A.roa (raw, json)
Hash identifier: IRrl+5iEfRsPzhTzE32EHLdoBaBD5KBaFvI477bCKpo=
Subject key identifier: B4:CD:3F:FE:5B:98:10:7C:C8:6A:B1:EF:2A:08:5D:D3:0A:73:96:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/178C57E8E54F11EFADDACA85762E951A.roa
Signing time: Fri 07 Feb 2025 12:28:53 +0000
ROA not before: Fri 07 Feb 2025 12:28:50 +0000
ROA not after: Wed 21 Jan 2026 12:28:50 +0000
asID: 984
IP address blocks: 45.192.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73065 (0x11d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 12:28:50 2025 GMT
Not After : Jan 21 12:28:50 2026 GMT
Subject: CN=67a5fc85-3784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:89:54:bf:46:bd:df:f2:4d:9d:0f:7e:0d:2d:
9f:9b:85:aa:14:e1:98:74:0e:08:82:aa:b7:6e:99:
2e:92:a4:83:47:2b:55:8e:60:0d:4f:95:ac:fc:ad:
23:83:82:21:a2:d3:84:f5:22:fc:8e:28:21:6c:f1:
ce:c7:24:38:5a:60:e0:3d:c3:fc:2e:db:09:8b:bd:
0c:48:c9:8a:55:10:06:ee:c1:df:d4:aa:d2:11:41:
cf:b9:cb:21:4f:d0:84:b3:ce:8a:56:88:15:28:b5:
9f:58:8b:11:97:72:41:69:de:a7:b9:64:68:c6:62:
69:31:cf:79:52:66:90:c7:51:53:a1:cd:71:c2:3c:
db:9d:6e:46:1e:3b:1b:91:70:23:77:f7:6e:ce:83:
31:c1:dc:6c:af:e8:e1:a3:0c:da:5b:d5:80:83:aa:
db:b8:89:4f:a7:a8:98:3c:61:1c:1f:1d:fe:b3:a3:
7a:b4:f9:44:89:86:f5:a5:00:59:b7:5b:23:cb:9e:
22:6d:bd:8c:13:9e:12:62:55:ff:f5:b1:ca:2b:61:
ce:01:27:2a:e9:bf:42:06:a0:4e:4a:01:b2:15:79:
a0:c6:80:4b:53:48:da:52:3c:9f:be:05:c8:e0:98:
4e:ee:92:8f:2b:4a:27:2a:23:f6:8a:23:c6:e3:45:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CD:3F:FE:5B:98:10:7C:C8:6A:B1:EF:2A:08:5D:D3:0A:73:96:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/178C57E8E54F11EFADDACA85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:80:f0:27:ae:07:49:50:70:0f:ec:9d:0f:1d:3d:c8:37:f5:
9f:61:5f:0d:dc:90:83:63:d8:81:93:72:e6:54:88:ed:f0:a5:
1c:9f:8f:de:56:86:58:ca:41:09:28:af:47:86:03:1b:4d:3d:
31:b6:0f:4a:bb:11:03:4e:3a:52:50:df:87:d4:2f:f5:fc:58:
46:b9:03:84:6f:ee:11:f4:ad:d9:59:a3:21:4b:75:f2:ce:25:
27:f5:97:2a:2d:93:22:e0:08:cc:59:80:77:ce:df:ab:f3:6a:
48:71:2c:58:36:62:84:f0:23:4e:a5:79:4e:c3:01:48:32:bc:
54:b6:c7:8a:b1:0f:7f:a5:7d:3b:89:85:61:d3:f5:e8:39:cc:
e7:52:da:8b:84:4f:d2:d7:a6:0f:c3:d6:5f:60:cf:34:f8:b0:
2d:46:8d:35:ae:7b:86:a4:0d:73:47:74:45:e7:5b:c0:ae:74:
21:7f:60:be:2c:f9:83:28:2b:98:cd:db:6c:1d:3e:04:b4:01:
e0:65:e0:51:78:7f:47:ec:b2:e0:03:d5:ca:86:cb:44:23:ce:
5b:e8:87:f9:92:f2:0f:1b:88:ab:fd:44:25:a4:3a:be:a9:35:
c4:54:97:5b:5e:ae:6b:3e:44:97:78:91:0e:51:c8:2c:27:95:
63:f6:73:f5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAR1pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjA3MTIyODUwWhcNMjYwMTIxMTIyODUwWjAYMRYw
FAYDVQQDEw02N2E1ZmM4NS0zNzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9IlUv0a93/JNnQ9+DS2fm4WqFOGYdA4Igqq3bpkukqSDRytVjmANT5Ws
/K0jg4IhotOE9SL8jighbPHOxyQ4WmDgPcP8LtsJi70MSMmKVRAG7sHf1KrSEUHP
ucshT9CEs86KVogVKLWfWIsRl3JBad6nuWRoxmJpMc95UmaQx1FToc1xwjzbnW5G
HjsbkXAjd/duzoMxwdxsr+jhowzaW9WAg6rbuIlPp6iYPGEcHx3+s6N6tPlEiYb1
pQBZt1sjy54ibb2ME54SYlX/9bHKK2HOAScq6b9CBqBOSgGyFXmgxoBLU0jaUjyf
vgXI4JhO7pKPK0onKiP2iiPG40Vy0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLTN
P/5bmBB8yGqx7yoIXdMKc5buMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNzhDNTdFOEU1NEYxMUVGQUREQUNBODU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAXMA0GCSqGSIb3DQEBCwUA
A4IBAQBOgPAnrgdJUHAP7J0PHT3IN/WfYV8N3JCDY9iBk3LmVIjt8KUcn4/eVoZY
ykEJKK9HhgMbTT0xtg9KuxEDTjpSUN+H1C/1/FhGuQOEb+4R9K3ZWaMhS3XyziUn
9ZcqLZMi4AjMWYB3zt+r82pIcSxYNmKE8CNOpXlOwwFIMrxUtseKsQ9/pX07iYVh
0/XoOcznUtqLhE/S16YPw9ZfYM80+LAtRo01rnuGpA1zR3RF51vArnQhf2C+LPmD
KCuYzdtsHT4EtAHgZeBReH9H7LLgA9XKhstEI85b6If5kvIPG4ir/UQlpDq+qTXE
VJdbXq5rPkSXeJEOUcgsJ5Vj9nP1
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:29 2025 by rpki-client