Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/248423E4F39211EFA3CA2F96762E951A.roa
File: 248423E4F39211EFA3CA2F96762E951A.roa (raw, json)
Hash identifier: 9SfmtHkOngnLR1xlZAyoRg68i0PKF80plzEhNj5F2OM=
Subject key identifier: FF:C6:CF:FD:73:06:5A:E5:59:E8:06:35:98:37:80:29:DD:08:19:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/248423E4F39211EFA3CA2F96762E951A.roa
Signing time: Tue 25 Feb 2025 16:04:08 +0000
ROA not before: Tue 25 Feb 2025 16:04:04 +0000
ROA not after: Wed 09 Apr 2025 16:04:04 +0000
asID: 63139
IP address blocks: 45.197.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77447 (0x12e87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:04:04 2025 GMT
Not After : Apr 9 16:04:04 2025 GMT
Subject: CN=67bde9f7-1ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:7f:46:1b:45:cf:13:01:e2:64:38:50:5d:
32:be:87:41:62:e4:05:38:2b:c0:70:c0:b6:64:21:
bc:d6:eb:7a:fc:09:e8:a8:71:88:c5:fd:07:23:d5:
1a:61:f1:aa:fb:d6:1f:13:6f:74:7e:0c:85:ed:49:
f3:25:5b:ef:97:63:2c:a2:5c:b4:47:fb:8c:3d:fb:
be:2d:06:01:97:62:50:c9:4a:ba:ee:2d:b4:3e:6d:
0b:81:e4:b3:2e:65:5a:ad:7f:84:ee:32:17:4b:dd:
6f:2b:7f:f2:2a:d9:b1:ce:d3:a8:61:1c:94:6f:76:
0d:8c:f1:dc:66:1b:48:67:a6:ea:0d:90:43:2f:da:
9a:21:e6:67:19:fc:f7:24:0a:b5:76:c3:b4:d5:98:
39:8a:13:34:93:51:b8:ea:c7:18:8c:f8:74:fe:d9:
e8:28:b2:d7:da:bf:99:8d:86:64:b1:62:61:12:09:
42:35:ee:c3:28:e2:93:93:45:a6:4d:84:b3:af:f4:
ad:f7:e0:bc:16:80:ec:1c:79:5d:eb:c1:29:c6:98:
25:ab:1c:79:b7:dd:bb:1c:59:9d:b9:19:c6:d9:5f:
fe:59:6d:a7:5c:3e:16:96:f4:04:6b:b0:27:90:39:
ba:52:5b:da:58:7e:6f:95:5a:e7:81:c6:d3:16:b4:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C6:CF:FD:73:06:5A:E5:59:E8:06:35:98:37:80:29:DD:08:19:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/248423E4F39211EFA3CA2F96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.111.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fd:a8:5a:c8:fa:4c:12:06:e6:9e:ba:d7:2a:88:ac:57:46:
ec:02:48:ff:35:e6:15:80:c0:5e:bb:90:ab:69:77:58:e6:c9:
ac:ed:39:e6:c7:cc:24:2b:58:3c:b4:e9:cc:bd:bc:37:f3:93:
6b:e1:20:ef:e3:70:59:99:53:7f:d9:7f:ba:56:9a:76:d7:72:
7d:d0:9f:03:28:49:ad:58:7b:4a:e1:6f:f7:4a:84:4f:06:d0:
4d:b3:5e:4b:af:77:52:c8:8c:c8:52:1e:38:19:b8:ab:4b:e8:
04:63:05:2d:e8:9c:75:64:60:0c:14:b5:ab:f7:f2:63:7a:6b:
30:44:ab:7e:d7:22:a6:e0:bb:f8:28:b0:30:a5:cd:38:78:d9:
2b:79:69:70:29:5c:46:fa:9c:9c:41:2f:77:04:54:0c:da:e2:
a6:10:73:84:52:42:84:81:40:8c:e2:48:5b:95:6b:17:3a:85:
da:0a:b8:12:90:21:3f:5e:4c:71:01:d9:d0:8e:a9:15:83:16:
4b:35:78:72:e5:07:e7:06:71:a9:5c:d3:a4:41:a5:fa:67:4f:
72:75:c5:2c:f6:75:e2:6c:8a:ba:2c:cb:a1:0f:91:84:cb:b7:
5c:71:32:40:4a:22:70:63:3e:6a:5b:1d:53:b9:10:3b:8b:af:
52:ec:db:0d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS6HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MTYwNDA0WhcNMjUwNDA5MTYwNDA0WjAYMRYw
FAYDVQQDEw02N2JkZTlmNy0xY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvpF/RhtFzxMB4mQ4UF0yvodBYuQFOCvAcMC2ZCG81ut6/AnoqHGIxf0H
I9UaYfGq+9YfE290fgyF7UnzJVvvl2Msoly0R/uMPfu+LQYBl2JQyUq67i20Pm0L
geSzLmVarX+E7jIXS91vK3/yKtmxztOoYRyUb3YNjPHcZhtIZ6bqDZBDL9qaIeZn
Gfz3JAq1dsO01Zg5ihM0k1G46scYjPh0/tnoKLLX2r+ZjYZksWJhEglCNe7DKOKT
k0WmTYSzr/St9+C8FoDsHHld68Epxpglqxx5t927HFmduRnG2V/+WW2nXD4WlvQE
a7AnkDm6UlvaWH5vlVrngcbTFrRmtQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP/G
z/1zBlrlWegGNZg3gCndCBlPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNDg0MjNFNEYzOTIxMUVGQTNDQTJGOTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVvMA0GCSqGSIb3DQEBCwUA
A4IBAQBl/ahayPpMEgbmnrrXKoisV0bsAkj/NeYVgMBeu5CraXdY5sms7Tnmx8wk
K1g8tOnMvbw385Nr4SDv43BZmVN/2X+6Vpp213J90J8DKEmtWHtK4W/3SoRPBtBN
s15Lr3dSyIzIUh44GbirS+gEYwUt6Jx1ZGAMFLWr9/JjemswRKt+1yKm4Lv4KLAw
pc04eNkreWlwKVxG+pycQS93BFQM2uKmEHOEUkKEgUCM4khblWsXOoXaCrgSkCE/
XkxxAdnQjqkVgxZLNXhy5QfnBnGpXNOkQaX6Z09ydcUs9nXibIq6LMuhD5GEy7dc
cTJASiJwYz5qWx1TuRA7i69S7NsN
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:12 2025 by rpki-client