Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5802BD14FB3211EF85179499762E951A.roa
File: 5802BD14FB3211EF85179499762E951A.roa (raw, json)
Hash identifier: sryk1N8aUs4F1cXmG3G/7N8J3g5cv0HP0i549lO/uEg=
Subject key identifier: 1C:C8:F2:81:E4:49:A0:B2:33:55:2B:B7:0B:25:87:63:C7:1A:42:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5802BD14FB3211EF85179499762E951A.roa
Signing time: Fri 07 Mar 2025 08:58:32 +0000
ROA not before: Fri 07 Mar 2025 08:58:27 +0000
ROA not after: Mon 14 Apr 2025 08:58:27 +0000
asID: 395793
IP address blocks: 45.198.228.0/24 maxlen: 24
45.198.229.0/24 maxlen: 24
45.198.230.0/24 maxlen: 24
45.198.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82934 (0x143f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 08:58:27 2025 GMT
Not After : Apr 14 08:58:27 2025 GMT
Subject: CN=67cab537-87ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:ab:58:93:5a:a5:26:06:b5:1e:c1:75:2f:
d8:c2:b5:bb:1c:f4:3c:85:7a:50:d3:1b:99:4f:90:
3c:06:71:d5:87:f4:e1:5d:e4:07:5e:38:60:2f:5b:
a1:89:5f:d2:c9:a8:f1:91:52:db:ec:88:1c:bc:74:
7c:79:2b:4c:cc:70:67:40:89:66:97:a2:e6:95:d9:
a0:52:4c:68:b9:37:de:7a:87:c2:65:95:83:18:d7:
09:97:71:47:b9:10:f3:98:6e:7e:a2:0f:2c:f6:d1:
9c:61:bf:1d:eb:87:b9:bf:92:31:ac:c4:7b:6a:07:
d5:34:cd:3a:a6:ec:01:7e:f8:16:9e:67:fa:fd:44:
c0:f1:ed:4b:f8:99:17:27:ef:b3:4f:71:cd:99:76:
21:2e:f6:23:aa:bb:b1:7a:e5:2c:c7:c4:cf:c1:cc:
5d:3f:3f:42:18:03:57:07:9a:19:41:26:64:3d:31:
97:23:f7:f8:cd:d8:82:d3:53:36:4d:e4:55:7b:ee:
75:98:a7:03:3d:ca:72:55:ef:1d:da:39:9e:b0:a2:
7e:af:f0:bd:4c:73:1a:9b:7f:80:8c:d9:cc:0a:9c:
ec:91:74:5c:42:4d:99:15:cd:95:40:4b:86:40:eb:
b9:33:49:80:0e:9f:b6:ee:5f:dc:6d:85:87:18:c5:
7c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C8:F2:81:E4:49:A0:B2:33:55:2B:B7:0B:25:87:63:C7:1A:42:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5802BD14FB3211EF85179499762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.228.0/22
Signature Algorithm: sha256WithRSAEncryption
44:87:93:b2:ee:5d:dd:12:fe:ef:bb:0d:2b:3e:b0:70:39:61:
02:03:24:39:b3:f4:42:5f:5d:15:a3:18:13:c8:45:69:31:d3:
31:19:ff:f4:fe:8d:1f:e1:70:fa:31:15:8c:fd:2d:0b:ec:3f:
70:88:33:c1:c4:f7:ed:c1:9c:bb:42:b7:3f:9a:a5:19:c6:7b:
17:b0:d8:ed:42:c9:b0:eb:7a:e8:e7:b7:9f:53:1d:bb:ef:c4:
8d:b8:35:ca:04:8f:db:89:ab:3b:a6:27:c1:91:c1:40:23:fc:
0b:21:07:49:6f:8e:2a:e8:13:30:db:cb:49:aa:fc:b9:0e:67:
96:20:b6:bb:9c:1c:23:a1:49:c7:1d:94:98:86:55:35:74:7a:
f7:71:6f:b6:cd:41:87:94:f8:4d:09:5d:23:73:fe:3f:90:07:
2d:88:4a:c3:d4:7f:1d:02:8c:11:ed:c7:38:4b:8b:6d:21:5e:
00:f1:7e:66:a7:f5:a6:1a:08:36:0f:43:3f:36:87:0e:ac:1b:
e7:82:c9:b7:56:91:a1:05:97:a4:78:c6:b2:05:08:2b:56:55:
fc:40:d7:1f:50:d1:e1:f0:e4:da:43:3c:ab:3c:e5:b6:53:2f:
13:4e:29:74:42:29:91:c4:8b:45:ef:10:f4:fd:d3:4a:85:2e:
76:0c:76:a0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUP2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA3MDg1ODI3WhcNMjUwNDE0MDg1ODI3WjAYMRYw
FAYDVQQDEw02N2NhYjUzNy04N2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyqurWJNapSYGtR7BdS/YwrW7HPQ8hXpQ0xuZT5A8BnHVh/ThXeQHXjhg
L1uhiV/SyajxkVLb7IgcvHR8eStMzHBnQIlml6LmldmgUkxouTfeeofCZZWDGNcJ
l3FHuRDzmG5+og8s9tGcYb8d64e5v5IxrMR7agfVNM06puwBfvgWnmf6/UTA8e1L
+JkXJ++zT3HNmXYhLvYjqruxeuUsx8TPwcxdPz9CGANXB5oZQSZkPTGXI/f4zdiC
01M2TeRVe+51mKcDPcpyVe8d2jmesKJ+r/C9THMam3+AjNnMCpzskXRcQk2ZFc2V
QEuGQOu5M0mADp+27l/cbYWHGMV86wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBzI
8oHkSaCyM1Urtwslh2PHGkKjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81ODAyQkQxNEZCMzIxMUVGODUxNzk0OTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcbkMA0GCSqGSIb3DQEBCwUA
A4IBAQBEh5Oy7l3dEv7vuw0rPrBwOWECAyQ5s/RCX10VoxgTyEVpMdMxGf/0/o0f
4XD6MRWM/S0L7D9wiDPBxPftwZy7Qrc/mqUZxnsXsNjtQsmw63ro57efUx2778SN
uDXKBI/bias7pifBkcFAI/wLIQdJb44q6BMw28tJqvy5DmeWILa7nBwjoUnHHZSY
hlU1dHr3cW+2zUGHlPhNCV0jc/4/kActiErD1H8dAowR7cc4S4ttIV4A8X5mp/Wm
Ggg2D0M/NocOrBvngsm3VpGhBZekeMayBQgrVlX8QNcfUNHh8OTaQzyrPOW2Uy8T
Til0QimRxItF7xD0/dNKhS52DHag
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:31 2025 by rpki-client