Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/730DA662F48111EFA815878F762E951A.roa
File: 730DA662F48111EFA815878F762E951A.roa (raw, json)
Hash identifier: KgedBCRNoZeBzweqf+R5ZIndmJ714LoFlS8UgXfO6FQ=
Subject key identifier: A4:A0:07:90:6D:DA:D0:1E:D6:43:B8:25:26:3A:75:D7:E0:27:0E:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013790
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/730DA662F48111EFA815878F762E951A.roa
Signing time: Wed 26 Feb 2025 20:37:09 +0000
ROA not before: Wed 26 Feb 2025 20:37:05 +0000
ROA not after: Sat 19 Feb 2028 20:37:05 +0000
asID: 17561
IP address blocks: 45.200.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79760 (0x13790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 20:37:05 2025 GMT
Not After : Feb 19 20:37:05 2028 GMT
Subject: CN=67bf7b75-be2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:b3:9e:52:9a:89:01:c6:ce:d2:a7:fb:54:
df:76:3d:5f:95:ef:05:c4:21:41:ec:19:66:23:61:
22:8c:dc:f3:66:9a:69:dc:f1:5c:16:4e:eb:2a:3c:
2f:b8:27:9e:a3:68:99:c5:91:2e:cd:89:37:94:95:
0b:49:87:6d:d9:d4:a6:1c:b2:79:eb:9d:8c:d4:24:
c3:02:87:6b:33:b8:e0:e4:31:4d:f3:f9:a8:28:ff:
2f:fc:ea:1d:6c:4b:6d:5d:c9:0d:e3:7e:53:d4:3e:
1a:b9:15:46:23:f7:e8:3f:16:7d:c9:32:6f:0d:da:
bd:11:a1:c4:f5:bb:8f:10:3c:27:29:bb:45:06:ba:
80:4d:68:31:dd:71:59:f1:66:2a:d2:b1:ec:5f:99:
41:92:32:8e:d8:2d:4e:18:90:ca:e0:78:f0:ed:e8:
10:5a:5d:c3:bd:4b:5f:26:ab:5e:5c:88:d6:c0:7e:
f5:40:b4:d3:08:b5:14:00:ae:df:cb:d5:0d:8e:c5:
14:9f:11:27:de:2b:4d:eb:aa:5f:4e:77:d3:8e:f1:
8a:d8:96:7e:c7:34:a6:9e:cd:50:1a:ad:be:a8:55:
5a:23:48:be:29:96:95:90:04:93:b7:d1:b4:e5:56:
5c:d7:f1:01:2b:02:76:b1:91:36:9d:3e:c8:04:05:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:07:90:6D:DA:D0:1E:D6:43:B8:25:26:3A:75:D7:E0:27:0E:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/730DA662F48111EFA815878F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:39:67:98:c4:6c:18:43:9d:aa:c5:31:10:e5:4e:c8:a1:e8:
c3:f3:b3:fe:7c:8f:7c:e2:00:bd:7d:c5:12:26:73:ed:27:5a:
71:e4:2a:74:f3:f0:d7:24:40:f0:22:51:d0:d1:35:8b:61:fb:
08:db:82:29:84:ce:84:cb:e2:60:ca:03:84:4b:f6:63:36:57:
1e:7c:52:b9:df:e8:50:d2:51:4a:e5:3f:55:cc:67:f5:ea:8b:
4d:b9:23:43:6f:1f:a6:cb:d8:43:d5:38:c7:70:59:2b:2d:4e:
83:0d:57:a9:b1:b1:31:8a:36:fc:3b:69:fb:83:d5:1b:f4:da:
c6:66:68:10:1a:28:c4:19:bf:38:9b:60:85:37:6f:c6:23:cb:
df:f6:f4:33:3c:df:6a:af:82:3d:1e:c9:a1:39:c9:38:59:10:
92:97:8a:1f:88:10:d7:bc:0c:e9:cb:4b:f8:c8:0e:5e:5d:77:
51:e9:ee:fb:86:75:83:26:7a:4d:25:dc:00:a9:9b:a3:d2:cb:
7a:86:0e:e2:c4:8e:54:e9:02:22:13:bf:c9:e4:f8:11:3d:8f:
0e:6d:3c:0b:f8:a6:26:18:0c:a6:48:e1:35:c0:3b:2a:5e:5b:
c4:9d:a1:c1:32:9f:72:b8:5e:90:9d:96:e1:cf:21:5d:06:2c:
f8:45:b4:2b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATeQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MjAzNzA1WhcNMjgwMjE5MjAzNzA1WjAYMRYw
FAYDVQQDEw02N2JmN2I3NS1iZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0JmznlKaiQHGztKn+1Tfdj1fle8FxCFB7BlmI2EijNzzZppp3PFcFk7r
KjwvuCeeo2iZxZEuzYk3lJULSYdt2dSmHLJ5652M1CTDAodrM7jg5DFN8/moKP8v
/OodbEttXckN435T1D4auRVGI/foPxZ9yTJvDdq9EaHE9buPEDwnKbtFBrqATWgx
3XFZ8WYq0rHsX5lBkjKO2C1OGJDK4Hjw7egQWl3DvUtfJqteXIjWwH71QLTTCLUU
AK7fy9UNjsUUnxEn3itN66pfTnfTjvGK2JZ+xzSmns1QGq2+qFVaI0i+KZaVkAST
t9G05VZc1/EBKwJ2sZE2nT7IBAVLpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKSg
B5Bt2tAe1kO4JSY6ddfgJw66MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MzBEQTY2MkY0ODExMUVGQTgxNTg3OEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALch6MA0GCSqGSIb3DQEBCwUA
A4IBAQCyOWeYxGwYQ52qxTEQ5U7IoejD87P+fI984gC9fcUSJnPtJ1px5Cp08/DX
JEDwIlHQ0TWLYfsI24IphM6Ey+JgygOES/ZjNlcefFK53+hQ0lFK5T9VzGf16otN
uSNDbx+my9hD1TjHcFkrLU6DDVepsbExijb8O2n7g9Ub9NrGZmgQGijEGb84m2CF
N2/GI8vf9vQzPN9qr4I9HsmhOck4WRCSl4ofiBDXvAzpy0v4yA5eXXdR6e77hnWD
JnpNJdwAqZuj0st6hg7ixI5U6QIiE7/J5PgRPY8ObTwL+KYmGAymSOE1wDsqXlvE
naHBMp9yuF6QnZbhzyFdBiz4RbQr
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:39 2025 by rpki-client