Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6872730EE55E11EFB095F368762E951A.roa
File: 6872730EE55E11EFB095F368762E951A.roa (raw, json)
Hash identifier: N4Hp/KorYC6zBGw6n3wSNlLISL/JEVyOzeIRuq6A210=
Subject key identifier: E3:16:C6:25:9B:5C:6B:9E:B6:5F:BF:57:B9:F3:54:8D:85:67:96:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6872730EE55E11EFB095F368762E951A.roa
Signing time: Fri 07 Feb 2025 14:18:31 +0000
ROA not before: Fri 07 Feb 2025 14:18:28 +0000
ROA not after: Fri 21 Jan 2028 14:18:28 +0000
asID: 17561
IP address blocks: 45.196.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73192 (0x11de8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 14:18:28 2025 GMT
Not After : Jan 21 14:18:28 2028 GMT
Subject: CN=67a61637-bc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:49:76:86:c7:62:7f:27:9e:95:d7:8a:45:
3e:5e:00:a8:e0:bc:62:20:36:73:cf:69:c7:4c:51:
5d:39:76:33:25:06:60:53:7e:79:34:fe:6e:4e:34:
4a:8f:99:f6:00:ac:44:37:70:6d:2a:7f:fd:e2:65:
1f:ad:55:2c:d8:85:0b:53:2e:08:1f:5d:4d:6e:a5:
72:85:4f:f4:8f:83:b0:e6:11:42:71:02:ca:3f:d4:
b1:85:d9:25:26:76:a5:c9:9b:ae:21:24:76:0c:21:
69:41:6d:bd:33:3e:8e:7d:e9:27:df:a7:16:8c:70:
78:33:1b:b7:c7:7d:ce:b5:6d:40:01:e3:c7:66:df:
b5:cb:f9:9c:79:21:7a:06:85:68:8f:98:f0:0b:52:
de:58:07:ae:e8:20:03:2e:a0:a7:49:e0:4a:d0:96:
f3:bc:8b:60:f7:17:12:32:ee:ce:e7:62:ff:ba:bc:
17:40:4a:5b:b7:ab:b5:4b:16:89:41:9a:35:83:da:
ce:56:19:92:b0:ee:b8:ff:0d:5b:90:00:54:48:63:
56:11:79:e9:e9:bd:1f:44:db:16:96:a6:c9:9c:f3:
06:37:0a:66:5f:b2:1c:19:3a:52:b8:a3:40:24:b7:
99:df:da:97:a4:ba:96:b2:75:31:a8:29:c5:eb:d3:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:16:C6:25:9B:5C:6B:9E:B6:5F:BF:57:B9:F3:54:8D:85:67:96:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6872730EE55E11EFB095F368762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.84.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a2:42:57:ad:c8:28:bd:15:e9:6a:b8:e1:d7:95:1c:42:f2:
5f:e7:a6:22:06:00:3d:94:64:48:43:2b:ed:b1:79:ae:1c:de:
05:44:12:40:4d:eb:2d:a7:91:1b:0f:82:be:b9:29:65:cd:aa:
f9:3e:ff:55:ef:c4:ed:fd:8f:64:f2:fe:5c:a0:67:eb:42:c4:
e5:67:90:52:c2:cd:73:46:17:7f:c1:de:13:0f:92:63:7b:9d:
a6:48:cf:9b:64:13:57:11:3e:80:e0:69:12:d3:81:ae:67:26:
69:2b:5f:4f:2d:aa:08:29:4b:4d:a5:0b:f5:ca:04:eb:b5:00:
f2:00:97:1b:65:bb:8d:b4:a8:5c:71:8b:bc:07:b9:00:6e:61:
8f:90:ae:b5:34:bb:ec:75:c9:b9:c5:09:9e:d0:80:1a:63:97:
24:06:7f:6c:84:6a:7f:52:84:98:21:38:ca:b2:b0:15:52:4d:
d5:66:69:a5:1a:4e:ef:f4:5d:b2:cf:d0:65:69:53:3a:fb:b9:
81:af:c8:6e:8d:ea:86:d2:36:6b:73:7b:19:bd:41:90:0e:4d:
45:79:0c:a9:9f:f5:cc:fc:66:4c:92:53:56:d7:d2:96:a2:e8:
98:b8:03:3e:6d:c8:00:cb:81:55:63:fa:37:7f:77:ea:95:b8:
95:a8:a8:2c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAR3oMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjA3MTQxODI4WhcNMjgwMTIxMTQxODI4WjAYMRYw
FAYDVQQDEw02N2E2MTYzNy1iYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0QFJdobHYn8nnpXXikU+XgCo4LxiIDZzz2nHTFFdOXYzJQZgU355NP5u
TjRKj5n2AKxEN3BtKn/94mUfrVUs2IULUy4IH11NbqVyhU/0j4Ow5hFCcQLKP9Sx
hdklJnalyZuuISR2DCFpQW29Mz6Ofekn36cWjHB4Mxu3x33OtW1AAePHZt+1y/mc
eSF6BoVoj5jwC1LeWAeu6CADLqCnSeBK0JbzvItg9xcSMu7O52L/urwXQEpbt6u1
SxaJQZo1g9rOVhmSsO64/w1bkABUSGNWEXnp6b0fRNsWlqbJnPMGNwpmX7IcGTpS
uKNAJLeZ39qXpLqWsnUxqCnF69Pi6QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOMW
xiWbXGuetl+/V7nzVI2FZ5byMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82ODcyNzMwRUU1NUUxMUVGQjA5NUYzNjg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcRUMA0GCSqGSIb3DQEBCwUA
A4IBAQCookJXrcgovRXparjh15UcQvJf56YiBgA9lGRIQyvtsXmuHN4FRBJATest
p5EbD4K+uSllzar5Pv9V78Tt/Y9k8v5coGfrQsTlZ5BSws1zRhd/wd4TD5Jje52m
SM+bZBNXET6A4GkS04GuZyZpK19PLaoIKUtNpQv1ygTrtQDyAJcbZbuNtKhccYu8
B7kAbmGPkK61NLvsdcm5xQme0IAaY5ckBn9shGp/UoSYITjKsrAVUk3VZmmlGk7v
9F2yz9BlaVM6+7mBr8hujeqG0jZrc3sZvUGQDk1FeQypn/XM/GZMklNW19KWouiY
uAM+bcgAy4FVY/o3f3fqlbiVqKgs
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:44 2025 by rpki-client