Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62905376F4D011EFB35DA8B8762E951A.roa
File: 62905376F4D011EFB35DA8B8762E951A.roa (raw, json)
Hash identifier: Td2YahYbAYx+vBTEFL0Rsa1JHf1iRqqPmdmgQ16A98A=
Subject key identifier: 54:05:61:BB:7E:0B:46:F4:C5:1E:BF:3F:71:88:D2:2F:1A:1B:09:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62905376F4D011EFB35DA8B8762E951A.roa
Signing time: Thu 27 Feb 2025 06:02:12 +0000
ROA not before: Thu 27 Feb 2025 06:02:08 +0000
ROA not after: Sat 19 Feb 2028 06:02:08 +0000
asID: 17561
IP address blocks: 45.204.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80115 (0x138f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 06:02:08 2025 GMT
Not After : Feb 19 06:02:08 2028 GMT
Subject: CN=67bfffe3-8e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:4d:50:54:85:df:c9:a1:58:fb:39:1c:82:
2e:5c:f1:94:42:ea:7e:3a:c5:db:30:e0:21:01:50:
b4:70:ee:04:6c:d7:6d:bb:73:98:b3:7e:17:fc:f4:
d7:3b:94:0a:98:de:70:de:a1:3a:ca:59:39:25:92:
98:96:3b:9c:f7:33:b8:4c:21:68:49:fd:09:06:b3:
52:9a:34:fc:f0:98:35:7f:f7:db:23:f0:77:11:9c:
b2:ab:26:54:72:cf:5f:ae:24:2c:d4:e3:e0:5f:06:
18:25:6a:b1:db:17:e9:ed:92:be:7e:47:2a:6a:5f:
04:89:1b:3c:17:b3:fd:a2:98:2f:42:2a:e8:19:43:
b3:a0:65:8d:f4:bf:53:8c:b1:f7:56:9e:0b:b6:e8:
56:4e:9b:a8:79:c3:78:e0:63:b8:47:30:2e:3a:cc:
3f:e8:6a:36:3f:2b:62:92:0b:00:85:b7:3a:3b:c5:
55:c0:79:09:09:d9:2d:a7:d3:2e:d9:cd:2f:72:70:
5f:90:e3:6b:e8:7b:1e:a7:e5:2a:59:21:61:0a:58:
22:ff:f3:48:66:b3:a3:d5:e8:d1:77:e9:43:06:6a:
f8:61:ea:1e:5b:d1:a2:92:42:79:c8:90:11:68:c9:
3c:74:fc:93:d4:c1:80:30:31:d0:f6:4e:6c:57:7c:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:05:61:BB:7E:0B:46:F4:C5:1E:BF:3F:71:88:D2:2F:1A:1B:09:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62905376F4D011EFB35DA8B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:06:68:04:3d:c0:ae:c8:e0:3c:c7:ef:f0:0b:24:13:48:ba:
ad:0c:c5:00:7f:bb:0e:ea:d4:03:47:ea:de:8b:52:0d:d4:be:
56:a2:61:70:82:8b:e2:50:ab:22:4c:70:c6:cc:2b:40:64:55:
eb:9f:39:e3:10:4f:4f:98:71:db:17:e4:be:1e:bc:e8:e3:cc:
0b:6e:6b:14:05:c8:02:07:17:4c:38:c7:c8:66:90:82:8b:03:
ad:35:37:cd:14:48:9c:19:b4:b6:95:03:75:f3:30:e1:53:af:
ac:74:50:08:c4:2e:4c:5f:d6:45:2f:b1:f7:67:d9:47:08:8d:
08:ac:46:e0:75:ea:74:6c:07:90:d5:ed:34:87:cd:32:25:da:
14:7d:23:d8:79:6d:d4:42:97:70:e7:8b:e3:d0:fd:67:de:0b:
56:18:06:94:f1:98:30:49:51:b2:10:b7:16:27:69:86:ca:6f:
06:dc:4f:bf:bc:51:83:80:a6:76:c1:5d:cb:de:b9:d5:26:18:
ea:90:9a:5b:ab:f0:9b:a3:ee:ba:91:66:f9:dd:fc:cd:9f:d1:
21:08:fb:28:e0:82:f8:71:fc:3b:6d:3d:47:11:09:cb:87:92:
f3:f0:2b:aa:47:ae:93:b8:a5:85:a0:cc:be:f5:7d:3a:52:31:
43:fb:d6:2d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATjzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MDYwMjA4WhcNMjgwMjE5MDYwMjA4WjAYMRYw
FAYDVQQDEw02N2JmZmZlMy04ZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzR9NUFSF38mhWPs5HIIuXPGUQup+OsXbMOAhAVC0cO4EbNdtu3OYs34X
/PTXO5QKmN5w3qE6ylk5JZKYljuc9zO4TCFoSf0JBrNSmjT88Jg1f/fbI/B3EZyy
qyZUcs9friQs1OPgXwYYJWqx2xfp7ZK+fkcqal8EiRs8F7P9opgvQiroGUOzoGWN
9L9TjLH3Vp4LtuhWTpuoecN44GO4RzAuOsw/6Go2PytikgsAhbc6O8VVwHkJCdkt
p9Mu2c0vcnBfkONr6Hsep+UqWSFhClgi//NIZrOj1ejRd+lDBmr4YeoeW9GikkJ5
yJARaMk8dPyT1MGAMDHQ9k5sV3ydswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFQF
Ybt+C0b0xR6/P3GI0i8aGwkqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MjkwNTM3NkY0RDAxMUVGQjM1REE4Qjg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxSMA0GCSqGSIb3DQEBCwUA
A4IBAQBaBmgEPcCuyOA8x+/wCyQTSLqtDMUAf7sO6tQDR+rei1IN1L5WomFwgovi
UKsiTHDGzCtAZFXrnznjEE9PmHHbF+S+Hrzo48wLbmsUBcgCBxdMOMfIZpCCiwOt
NTfNFEicGbS2lQN18zDhU6+sdFAIxC5MX9ZFL7H3Z9lHCI0IrEbgdep0bAeQ1e00
h80yJdoUfSPYeW3UQpdw54vj0P1n3gtWGAaU8ZgwSVGyELcWJ2mGym8G3E+/vFGD
gKZ2wV3L3rnVJhjqkJpbq/Cbo+66kWb53fzNn9EhCPso4IL4cfw7bT1HEQnLh5Lz
8CuqR66TuKWFoMy+9X06UjFD+9Yt
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:15 2025 by rpki-client