Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70AE151030A311F086191BE1DAE4EC9C.roa
File: 70AE151030A311F086191BE1DAE4EC9C.roa (raw, json)
Hash identifier: kLoOhuP6n2oTJ5yeqo2X/2vlDqauQuZwIQVt364KH84=
Subject key identifier: A3:9E:F2:73:DD:D6:8E:F0:4C:D1:B5:5F:70:D2:EE:D7:CF:97:1B:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015420
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70AE151030A311F086191BE1DAE4EC9C.roa
Signing time: Wed 14 May 2025 09:11:38 +0000
ROA not before: Wed 14 May 2025 09:11:34 +0000
ROA not after: Fri 20 Jun 2025 09:11:34 +0000
asID: 174
IP address blocks: 45.195.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87072 (0x15420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 09:11:34 2025 GMT
Not After : Jun 20 09:11:34 2025 GMT
Subject: CN=68245e4a-b1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:03:1e:58:fa:cb:5c:3d:7c:17:5d:f5:89:bf:
3f:b2:2c:f6:6b:1f:14:05:09:da:5d:9d:46:dc:3e:
cd:ed:ba:dd:9f:f5:b3:78:82:03:9b:9d:f8:19:15:
54:38:a3:de:a2:a2:85:fa:ba:09:3b:3b:ac:22:25:
1e:76:b8:bf:a4:95:05:f4:13:01:06:3e:00:a8:4a:
76:31:df:3e:99:35:38:91:c6:e8:6c:0e:04:87:0f:
3f:73:c1:16:7f:b2:16:69:83:30:67:43:e2:4c:81:
5c:02:c5:6d:6f:25:24:eb:9d:45:27:84:9a:21:2f:
a0:0e:92:c1:4d:6b:ac:6e:2f:fa:32:48:a3:36:21:
98:9e:65:15:9d:58:94:6c:0b:64:52:12:3b:32:2c:
bd:13:a6:95:f6:0c:a8:83:14:dc:64:9d:8d:a0:0f:
34:dd:65:13:c6:0d:18:73:c4:91:d6:5b:2c:39:04:
4b:ad:ca:5f:ca:6c:ba:1f:ab:63:76:a0:28:cc:2d:
e2:91:4f:f1:88:6e:48:f0:e9:cd:bd:f1:2a:42:6a:
ce:ee:b7:ed:93:cf:e6:4c:06:3e:66:13:98:ec:b6:
1f:70:9e:26:de:8d:49:7a:91:7f:24:14:14:b3:0b:
2d:d3:69:8a:cc:a5:d0:18:28:ab:9c:cf:67:15:9d:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9E:F2:73:DD:D6:8E:F0:4C:D1:B5:5F:70:D2:EE:D7:CF:97:1B:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70AE151030A311F086191BE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.244.0/23
Signature Algorithm: sha256WithRSAEncryption
41:d3:75:8c:97:94:3c:56:e4:da:7b:03:9a:0b:85:93:87:19:
4e:9d:96:fc:31:2f:33:c8:94:fb:df:8d:62:9b:71:f9:5d:59:
5f:4c:48:2b:45:94:61:b8:ee:54:8f:98:1f:7b:e3:08:15:78:
7b:e7:c1:14:c5:ca:29:01:2d:80:1f:77:c2:f0:53:8f:04:6f:
89:8d:ac:d8:7a:bc:ef:af:94:64:8d:c5:d5:cd:c4:82:f6:cd:
fb:66:4e:62:93:82:29:fb:bc:5c:ef:c9:58:35:dd:8b:0a:d2:
02:ce:a5:c6:65:a3:92:c2:f4:01:59:a3:a7:73:16:13:ad:8a:
5d:71:73:70:9b:53:bd:65:8a:e8:5a:71:cf:91:52:67:b3:57:
2e:e8:28:6d:b6:96:71:b3:68:6c:39:1c:af:c8:6b:41:1e:c0:
10:59:f7:be:01:85:9a:cd:4e:14:35:0e:fb:eb:f9:bd:ce:8e:
58:dd:da:9b:32:f7:b2:9a:75:cb:59:5d:0e:0b:50:f1:b7:81:
76:96:f7:5b:c3:8a:bb:a9:2b:cf:b8:ea:f1:8a:de:94:16:b1:
eb:6c:3b:85:49:6d:17:12:1d:21:55:67:71:91:41:93:4a:32:
6a:89:19:6f:a3:d7:31:af:cf:87:14:73:f5:eb:b6:e2:44:d1:
11:a8:9f:9e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVQgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTE0MDkxMTM0WhcNMjUwNjIwMDkxMTM0WjAYMRYw
FAYDVQQDEw02ODI0NWU0YS1iMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6gMeWPrLXD18F131ib8/siz2ax8UBQnaXZ1G3D7N7brdn/WzeIIDm534
GRVUOKPeoqKF+roJOzusIiUedri/pJUF9BMBBj4AqEp2Md8+mTU4kcbobA4Ehw8/
c8EWf7IWaYMwZ0PiTIFcAsVtbyUk651FJ4SaIS+gDpLBTWusbi/6MkijNiGYnmUV
nViUbAtkUhI7Miy9E6aV9gyogxTcZJ2NoA803WUTxg0Yc8SR1lssOQRLrcpfymy6
H6tjdqAozC3ikU/xiG5I8OnNvfEqQmrO7rftk8/mTAY+ZhOY7LYfcJ4m3o1JepF/
JBQUswst02mKzKXQGCirnM9nFZ2ijQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKOe
8nPd1o7wTNG1X3DS7tfPlxvYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MEFFMTUxMDMwQTMxMUYwODYxOTFCRTFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcP0MA0GCSqGSIb3DQEBCwUA
A4IBAQBB03WMl5Q8VuTaewOaC4WThxlOnZb8MS8zyJT7341im3H5XVlfTEgrRZRh
uO5Uj5gfe+MIFXh758EUxcopAS2AH3fC8FOPBG+JjazYerzvr5RkjcXVzcSC9s37
Zk5ik4Ip+7xc78lYNd2LCtICzqXGZaOSwvQBWaOncxYTrYpdcXNwm1O9ZYroWnHP
kVJns1cu6ChttpZxs2hsORyvyGtBHsAQWfe+AYWazU4UNQ776/m9zo5Y3dqbMvey
mnXLWV0OC1Dxt4F2lvdbw4q7qSvPuOrxit6UFrHrbDuFSW0XEh0hVWdxkUGTSjJq
iRlvo9cxr8+HFHP167biRNERqJ+e
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:41:04 2025 by rpki-client