Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/448DDA88114011F092A6057F762E951A.roa
File: 448DDA88114011F092A6057F762E951A.roa (raw, json)
Hash identifier: JlOJxebhfag1QopCeUFy6mYJZqL1dLSiRSM3cnFRZKQ=
Subject key identifier: AC:29:E3:F9:6D:A3:FA:BC:A8:D9:05:40:D5:B1:B5:8D:23:17:A1:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/448DDA88114011F092A6057F762E951A.roa
Signing time: Fri 04 Apr 2025 10:33:37 +0000
ROA not before: Fri 04 Apr 2025 10:33:33 +0000
ROA not after: Sun 13 Apr 2025 10:33:33 +0000
asID: 272149
IP address blocks: 45.192.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84495 (0x14a0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 4 10:33:33 2025 GMT
Not After : Apr 13 10:33:33 2025 GMT
Subject: CN=67efb581-d08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:42:30:41:54:8c:0d:4e:e5:4a:71:70:f4:
4f:cc:eb:5a:9f:a8:50:0c:95:86:1b:34:1f:24:d6:
0d:c4:41:29:10:a7:1b:af:90:c5:1f:58:63:a3:6f:
05:e3:0b:9e:dd:da:06:cd:75:42:55:6a:c1:8a:7a:
28:cd:40:88:7c:36:bd:e0:fb:d3:f6:2f:96:43:fa:
8c:16:d4:10:dd:a6:1f:a9:8e:98:10:08:27:22:6b:
51:a6:45:be:6a:2e:31:70:1c:c9:39:73:71:8f:64:
63:3d:c0:02:96:59:5b:49:cf:53:b8:69:72:00:a1:
0e:b0:fd:6a:8c:ab:59:16:0f:2f:cf:5d:cd:6a:a9:
f3:be:c5:24:6c:d8:32:e1:4f:2f:1e:d0:33:c7:ad:
d9:8c:14:27:69:a8:5e:a3:80:f2:ab:ec:10:ae:95:
2c:78:e3:d6:84:07:dc:ec:c5:33:b7:87:07:3b:a3:
d9:75:28:58:df:60:17:bf:1f:49:86:04:58:32:38:
2f:11:5f:77:94:9c:a1:8f:01:39:bd:af:45:fe:fe:
0d:a3:f1:b0:d2:a7:17:43:ae:60:59:0a:b7:47:34:
13:ef:6f:4d:4d:45:c8:3c:18:03:60:06:79:5c:2e:
2d:80:f1:89:e1:ab:7a:6b:ff:ed:6a:66:05:2a:33:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:29:E3:F9:6D:A3:FA:BC:A8:D9:05:40:D5:B1:B5:8D:23:17:A1:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/448DDA88114011F092A6057F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.250.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3d:ae:04:05:59:4c:0d:7c:b1:9e:94:c8:21:0e:ab:a8:46:
5e:ee:9f:86:f5:8a:75:d7:2d:d9:7d:0b:a7:3d:e0:77:fa:81:
96:ff:5b:0a:08:16:7b:ad:ce:b8:20:88:06:28:8d:76:29:72:
bc:13:f2:0b:51:fd:96:a0:22:67:97:ba:cb:e5:6b:17:6a:98:
f3:e7:74:cf:07:e9:04:13:27:e3:23:ba:08:09:4d:44:67:74:
a7:74:27:fc:a2:0a:b5:7e:c0:d9:30:6d:87:01:3a:dd:88:c5:
9d:0b:ae:29:0f:eb:75:85:4c:d0:c3:33:64:c5:63:74:05:d5:
22:e7:c3:a7:4c:03:05:74:b8:82:99:17:12:cf:a8:c3:cb:8b:
c9:60:d4:57:bd:36:6d:03:8f:b2:c6:e7:3b:d8:81:f2:39:7f:
38:32:ab:f0:07:91:f8:60:77:49:95:53:35:54:9f:d0:de:34:
57:f2:dc:64:79:4e:7d:18:d2:3a:65:60:27:db:b8:72:ec:e6:
5c:74:e9:a5:71:ef:f2:26:28:33:a0:78:0e:2a:6b:a1:ee:2f:
d3:65:da:82:c1:d0:a2:a5:08:67:e3:b3:b8:96:3c:31:be:5d:
18:aa:65:69:09:60:be:c8:5d:63:a1:07:32:1b:6a:4e:e7:68:
95:22:01:2f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUoPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA0MTAzMzMzWhcNMjUwNDEzMTAzMzMzWjAYMRYw
FAYDVQQDEw02N2VmYjU4MS1kMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqTVCMEFUjA1O5UpxcPRPzOtan6hQDJWGGzQfJNYNxEEpEKcbr5DFH1hj
o28F4wue3doGzXVCVWrBinoozUCIfDa94PvT9i+WQ/qMFtQQ3aYfqY6YEAgnImtR
pkW+ai4xcBzJOXNxj2RjPcAClllbSc9TuGlyAKEOsP1qjKtZFg8vz13NaqnzvsUk
bNgy4U8vHtAzx63ZjBQnaaheo4Dyq+wQrpUseOPWhAfc7MUzt4cHO6PZdShY32AX
vx9JhgRYMjgvEV93lJyhjwE5va9F/v4No/Gw0qcXQ65gWQq3RzQT729NTUXIPBgD
YAZ5XC4tgPGJ4at6a//tamYFKjNDpQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKwp
4/lto/q8qNkFQNWxtY0jF6G3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NDhEREE4ODExNDAxMUYwOTJBNjA1N0Y3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcD6MA0GCSqGSIb3DQEBCwUA
A4IBAQCrPa4EBVlMDXyxnpTIIQ6rqEZe7p+G9Yp11y3ZfQunPeB3+oGW/1sKCBZ7
rc64IIgGKI12KXK8E/ILUf2WoCJnl7rL5WsXapjz53TPB+kEEyfjI7oICU1EZ3Sn
dCf8ogq1fsDZMG2HATrdiMWdC64pD+t1hUzQwzNkxWN0BdUi58OnTAMFdLiCmRcS
z6jDy4vJYNRXvTZtA4+yxuc72IHyOX84MqvwB5H4YHdJlVM1VJ/Q3jRX8txkeU59
GNI6ZWAn27hy7OZcdOmlce/yJigzoHgOKmuh7i/TZdqCwdCipQhn47O4ljwxvl0Y
qmVpCWC+yF1joQcyG2pO52iVIgEv
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:46 2025 by rpki-client