Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64145BE6E54B11EF92795A6E762E951A.roa
File: 64145BE6E54B11EF92795A6E762E951A.roa (raw, json)
Hash identifier: ZUbP2gUoy8/bTzxGkKqGiKN+fkDoaTl5exvgmuUX7qA=
Subject key identifier: BC:05:24:96:0A:95:B3:1C:C7:2A:3C:55:AB:E9:5E:1F:5D:7A:A0:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64145BE6E54B11EF92795A6E762E951A.roa
Signing time: Fri 07 Feb 2025 12:02:24 +0000
ROA not before: Fri 07 Feb 2025 12:02:20 +0000
ROA not after: Wed 21 Jan 2026 12:02:20 +0000
asID: 984
IP address blocks: 45.192.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73043 (0x11d53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 12:02:20 2025 GMT
Not After : Jan 21 12:02:20 2026 GMT
Subject: CN=67a5f650-6724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:91:07:8d:10:dd:fb:58:56:31:cb:e4:4a:
f5:11:38:ab:b3:1e:ce:76:bf:e2:67:a2:32:b4:da:
c1:1e:23:54:67:6d:13:09:f4:59:48:fc:5c:c1:cd:
e5:c8:b6:d6:f1:40:f1:ad:7b:74:8d:0f:79:e5:c8:
93:2e:6c:78:b8:77:29:b2:a4:34:33:79:c9:79:8c:
12:00:75:aa:b3:ef:75:74:bc:7d:6e:cb:a3:ee:a8:
3f:89:7d:27:c5:11:60:f3:5f:8f:cd:34:05:f3:b3:
68:7e:22:92:88:4f:16:35:24:a5:13:79:5a:ba:5d:
94:6f:57:d9:ec:a8:a8:08:2f:7b:f4:ca:7f:e4:c9:
9b:6a:92:cb:2c:b1:9d:78:4a:99:cd:14:11:c5:07:
64:d9:b2:d8:f3:de:1a:cc:89:59:5b:65:fe:c3:3f:
32:28:f4:28:ab:10:c9:b2:64:0a:dd:2b:98:5a:2f:
15:0c:88:b3:11:a3:32:e2:49:51:d3:8d:28:48:8d:
12:8f:40:8c:e1:0c:03:75:00:2d:02:e7:50:0f:03:
72:ab:c0:d9:91:44:ad:95:2b:a7:13:1b:a2:95:d0:
b0:40:66:c9:c7:04:c5:f8:b6:6a:8a:ee:80:59:9b:
5c:23:88:f9:df:52:72:04:39:62:e3:4d:36:75:15:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:05:24:96:0A:95:B3:1C:C7:2A:3C:55:AB:E9:5E:1F:5D:7A:A0:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64145BE6E54B11EF92795A6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.12.0/24
Signature Algorithm: sha256WithRSAEncryption
94:63:fd:8a:7a:34:c6:df:88:b5:37:63:bb:0e:91:cf:4e:25:
75:83:fa:36:37:c6:6a:2e:58:69:b2:6d:34:dd:ad:3e:cb:61:
5b:84:3e:97:5f:40:09:de:f6:be:42:29:de:f6:04:65:f4:1e:
fa:00:45:a8:40:03:8d:2e:e1:88:7e:55:47:15:e4:ee:09:7a:
fb:46:89:f7:8c:c6:93:71:80:e6:b1:b0:f9:bc:b6:17:fc:39:
b1:b5:a4:44:1f:aa:5d:73:c6:bb:07:c1:39:11:73:ce:5e:a2:
f5:89:c3:1d:e4:40:86:76:31:a1:fa:78:e8:78:fc:ca:27:b1:
76:8e:79:64:86:8f:dd:6f:67:38:e1:6f:a8:a2:0a:61:c1:f7:
39:cf:2e:31:08:2f:d9:fb:89:aa:dc:2d:6d:40:49:2d:61:8c:
e5:ba:88:55:67:c2:f5:5e:10:20:da:87:34:bc:1e:54:c7:71:
c2:21:01:0e:41:61:22:aa:4c:30:78:c4:36:f8:ff:90:1f:fa:
fc:05:94:72:9a:7a:59:37:a1:64:b5:56:22:58:b2:2b:b4:91:
7a:18:2a:7a:af:5f:56:7f:57:9d:ec:cf:79:24:c7:b2:38:5d:
1b:30:9c:8e:a3:3a:02:79:a8:a4:a6:44:f5:8c:de:42:26:2e:
44:52:5f:94
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAR1TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjA3MTIwMjIwWhcNMjYwMTIxMTIwMjIwWjAYMRYw
FAYDVQQDEw02N2E1ZjY1MC02NzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr/WRB40Q3ftYVjHL5Er1ETirsx7Odr/iZ6IytNrBHiNUZ20TCfRZSPxc
wc3lyLbW8UDxrXt0jQ955ciTLmx4uHcpsqQ0M3nJeYwSAHWqs+91dLx9bsuj7qg/
iX0nxRFg81+PzTQF87NofiKSiE8WNSSlE3laul2Ub1fZ7KioCC979Mp/5MmbapLL
LLGdeEqZzRQRxQdk2bLY894azIlZW2X+wz8yKPQoqxDJsmQK3SuYWi8VDIizEaMy
4klR040oSI0Sj0CM4QwDdQAtAudQDwNyq8DZkUStlSunExuildCwQGbJxwTF+LZq
iu6AWZtcI4j531JyBDli4002dRWT2wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLwF
JJYKlbMcxyo8VavpXh9deqDqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NDE0NUJFNkU1NEIxMUVGOTI3OTVBNkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAMMA0GCSqGSIb3DQEBCwUA
A4IBAQCUY/2KejTG34i1N2O7DpHPTiV1g/o2N8ZqLlhpsm003a0+y2FbhD6XX0AJ
3va+Qine9gRl9B76AEWoQAONLuGIflVHFeTuCXr7Ron3jMaTcYDmsbD5vLYX/Dmx
taREH6pdc8a7B8E5EXPOXqL1icMd5ECGdjGh+njoePzKJ7F2jnlkho/db2c44W+o
ogphwfc5zy4xCC/Z+4mq3C1tQEktYYzluohVZ8L1XhAg2oc0vB5Ux3HCIQEOQWEi
qkwweMQ2+P+QH/r8BZRymnpZN6FktVYiWLIrtJF6GCp6r19Wf1ed7M95JMeyOF0b
MJyOozoCeaikpkT1jN5CJi5EUl+U
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:22 2025 by rpki-client