Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65195BF2F36211EF9C653658762E951A.roa
File: 65195BF2F36211EF9C653658762E951A.roa (raw, json)
Hash identifier: KyzIxMjPjD5cGLSRkO4iMEAj4hXGCQPe3CLvDeamc10=
Subject key identifier: 09:40:24:5F:70:F8:AB:82:76:70:E4:49:94:7C:36:DC:C7:D0:15:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E1C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65195BF2F36211EF9C653658762E951A.roa
Signing time: Tue 25 Feb 2025 10:22:20 +0000
ROA not before: Tue 25 Feb 2025 10:22:16 +0000
ROA not after: Wed 09 Apr 2025 10:22:16 +0000
asID: 63139
IP address blocks: 45.197.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77340 (0x12e1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 10:22:16 2025 GMT
Not After : Apr 9 10:22:16 2025 GMT
Subject: CN=67bd99dc-2197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:e2:55:9e:d2:cf:5a:e0:e6:f1:6a:31:01:
f8:dc:47:2b:92:7a:0d:a7:d9:74:a4:b0:dd:c0:6d:
e5:36:7e:49:6b:41:8e:24:b9:48:ac:65:4c:39:9f:
2c:8f:ae:30:67:47:b1:23:48:1b:ef:4b:36:08:33:
4f:25:39:6e:a1:6e:52:0e:3d:0c:71:73:24:ab:9f:
f6:9f:0b:0c:e9:5d:1e:95:56:1a:f0:71:a0:05:f6:
3b:72:f0:87:88:64:e4:89:e3:2e:f3:1b:21:6a:dd:
75:e8:67:77:32:7c:c7:1a:ba:0a:10:6d:e4:6f:f2:
b4:58:fc:e8:98:bf:88:82:62:11:ce:b9:b4:d1:bc:
69:96:56:75:67:25:0b:2f:57:87:c9:69:80:ce:60:
b4:ea:22:ae:2a:df:ec:09:36:08:31:62:3e:1a:f2:
38:9b:d3:44:45:49:95:c2:10:46:e9:a8:cb:24:36:
5a:d0:6d:46:da:a5:10:9c:04:23:4d:24:d5:08:76:
60:1b:98:0b:9b:9b:86:51:b7:0f:37:8d:ab:ae:3e:
74:b5:d5:73:75:b7:23:7d:0c:77:65:9f:cf:2b:99:
eb:a8:7d:9b:10:34:79:67:eb:12:f0:50:3a:21:a1:
f3:54:66:62:d1:99:61:1f:b1:30:22:a6:c2:a9:56:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:40:24:5F:70:F8:AB:82:76:70:E4:49:94:7C:36:DC:C7:D0:15:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65195BF2F36211EF9C653658762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.77.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fb:37:f0:46:87:e4:6b:42:e3:26:dd:dc:a8:55:8d:4a:76:
ef:3d:e5:cc:66:5d:72:d8:3b:54:1d:13:97:1d:b3:1b:41:ea:
68:7c:2f:93:5b:c0:a2:33:66:d5:80:f0:c6:f9:1b:fc:7c:d3:
1b:7d:d7:cd:40:fb:82:73:6a:4a:50:04:e1:9f:29:11:a3:a6:
fc:42:bd:6f:07:f6:a4:37:a2:3c:34:42:30:63:61:f9:ca:9c:
a7:79:07:3f:47:4d:20:3b:ed:b3:a4:3c:77:cb:f3:ec:2f:f4:
6b:7c:2d:c4:72:9d:2e:1b:4d:1b:98:6c:65:c1:9f:ff:9b:a3:
88:25:a6:99:08:69:b7:d1:b7:6a:ff:8f:74:2d:d9:7e:0b:a0:
49:d4:aa:0f:f1:25:4f:5b:b0:19:53:9a:40:ae:b2:30:49:21:
94:a2:5a:7a:fb:10:db:c3:50:fd:bd:d9:2f:fa:5a:35:e7:de:
a8:0d:45:f6:09:73:85:52:7a:84:9c:b2:9b:6c:b4:8c:e0:a0:
02:d5:a1:49:a5:ec:b4:fa:36:07:2b:83:88:ea:72:da:56:c8:
98:94:c1:0b:f4:35:51:9c:80:c4:67:a7:ea:7f:a3:a1:b8:6f:
b2:63:c5:29:25:6e:14:88:3d:19:9d:1b:54:23:ff:1d:f1:7f:
52:fb:f4:53
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS4cMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MTAyMjE2WhcNMjUwNDA5MTAyMjE2WjAYMRYw
FAYDVQQDEw02N2JkOTlkYy0yMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsvLiVZ7Sz1rg5vFqMQH43EcrknoNp9l0pLDdwG3lNn5Ja0GOJLlIrGVM
OZ8sj64wZ0exI0gb70s2CDNPJTluoW5SDj0McXMkq5/2nwsM6V0elVYa8HGgBfY7
cvCHiGTkieMu8xshat116Gd3MnzHGroKEG3kb/K0WPzomL+IgmIRzrm00bxpllZ1
ZyULL1eHyWmAzmC06iKuKt/sCTYIMWI+GvI4m9NERUmVwhBG6ajLJDZa0G1G2qUQ
nAQjTSTVCHZgG5gLm5uGUbcPN42rrj50tdVzdbcjfQx3ZZ/PK5nrqH2bEDR5Z+sS
8FA6IaHzVGZi0ZlhH7EwIqbCqVbLGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAlA
JF9w+KuCdnDkSZR8NtzH0BWNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NTE5NUJGMkYzNjIxMUVGOUM2NTM2NTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVNMA0GCSqGSIb3DQEBCwUA
A4IBAQBo+zfwRofka0LjJt3cqFWNSnbvPeXMZl1y2DtUHROXHbMbQepofC+TW8Ci
M2bVgPDG+Rv8fNMbfdfNQPuCc2pKUAThnykRo6b8Qr1vB/akN6I8NEIwY2H5ypyn
eQc/R00gO+2zpDx3y/PsL/RrfC3Ecp0uG00bmGxlwZ//m6OIJaaZCGm30bdq/490
Ldl+C6BJ1KoP8SVPW7AZU5pArrIwSSGUolp6+xDbw1D9vdkv+lo1596oDUX2CXOF
UnqEnLKbbLSM4KAC1aFJpey0+jYHK4OI6nLaVsiYlMEL9DVRnIDEZ6fqf6OhuG+y
Y8UpJW4UiD0ZnRtUI/8d8X9S+/RT
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:33 2025 by rpki-client