Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7530369EF36411EFB1FF4364762E951A.roa
File: 7530369EF36411EFB1FF4364762E951A.roa (raw, json)
Hash identifier: u22Zv5/71kAlcNzech+bbRpMJM1NBrOCd2pVMjLcHaI=
Subject key identifier: 43:56:2C:32:26:0D:96:1C:1D:06:74:72:0B:63:C8:71:C6:B8:21:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7530369EF36411EFB1FF4364762E951A.roa
Signing time: Tue 25 Feb 2025 10:37:06 +0000
ROA not before: Tue 25 Feb 2025 10:37:02 +0000
ROA not after: Wed 09 Apr 2025 10:37:02 +0000
asID: 63139
IP address blocks: 45.197.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77352 (0x12e28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 10:37:02 2025 GMT
Not After : Apr 9 10:37:02 2025 GMT
Subject: CN=67bd9d52-d9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:c0:3a:e5:f2:a4:91:35:0f:4e:18:f9:01:
66:fc:14:1d:9b:6f:2c:bd:97:7f:7f:ab:3e:d5:f4:
d1:e8:2e:21:71:30:6b:e1:db:85:8d:df:df:5f:fe:
f9:19:8a:75:a4:e2:3f:19:1c:c5:88:db:6f:a1:03:
75:c1:3d:b4:74:de:68:66:7b:60:9c:1c:03:2c:23:
2a:92:83:c8:ef:2a:48:fd:4a:ef:ab:aa:dd:f4:3b:
72:c0:0c:29:a8:b7:6b:86:09:a9:03:ab:a5:3e:0c:
b6:02:1f:ee:6c:13:15:15:23:38:56:80:d1:b6:e1:
54:3f:b1:3f:d1:d9:6c:c7:2f:99:b5:ee:83:7a:16:
cd:48:1b:2c:ff:0c:d2:e2:05:30:87:8e:ba:74:c8:
aa:c5:af:86:ce:15:8e:7a:30:d6:d9:27:f5:cc:9a:
ff:63:46:1f:43:ac:bb:f7:60:6c:4f:1b:0c:2e:b1:
3f:ba:00:3f:16:00:9b:64:95:a4:1a:e9:29:dd:a2:
4b:56:42:b4:5e:d6:16:42:1d:70:ab:5b:5f:74:f9:
51:0c:79:25:b9:89:66:92:4f:21:4a:aa:96:42:d7:
d8:86:77:df:3c:93:38:51:9e:02:b6:99:20:f2:c7:
6d:6c:e8:0c:8b:21:c3:eb:6d:66:36:5d:eb:3c:42:
55:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:56:2C:32:26:0D:96:1C:1D:06:74:72:0B:63:C8:71:C6:B8:21:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7530369EF36411EFB1FF4364762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.82.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:8c:47:2e:f5:32:62:b5:ae:b9:71:2e:29:d1:1a:1b:91:9a:
fb:f2:4a:0f:7a:4e:17:9d:78:91:29:c9:3b:93:4c:45:af:e2:
78:52:b6:cd:b8:8f:b4:d9:80:85:8d:9f:c4:ee:cd:26:06:e5:
6b:b0:fd:60:23:67:5e:9c:d3:03:76:6a:34:91:92:80:8c:8e:
0a:71:c8:79:fb:df:ee:4c:64:d6:36:4d:e8:1b:4b:a2:55:25:
57:f4:3e:57:9c:cb:8b:a5:2d:f4:73:a5:95:83:dd:c7:1f:4c:
fa:5c:cf:5b:0f:3d:bd:de:18:7b:ee:fa:df:4e:44:22:41:ab:
ff:8a:34:18:ad:43:fe:12:ad:ae:44:c1:09:01:67:33:df:f5:
f3:6f:e5:ce:1a:ba:9d:cd:5a:76:8f:c6:81:91:7d:ae:03:7d:
a4:ef:44:29:0d:e6:c6:8d:4e:42:1c:37:fa:f7:18:11:34:fc:
2c:91:d4:0d:73:60:7d:28:54:48:82:49:46:ba:a1:4e:66:f7:
c3:cf:09:cf:f2:9c:9e:22:c7:af:52:76:90:45:dd:e2:56:9b:
b6:16:e0:58:e2:4f:b5:b1:80:00:b3:5e:d3:d3:ed:fa:cd:10:
7d:33:a2:cd:de:d0:04:80:8c:85:c2:67:c0:49:56:47:80:96:
03:2b:89:31
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS4oMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MTAzNzAyWhcNMjUwNDA5MTAzNzAyWjAYMRYw
FAYDVQQDEw02N2JkOWQ1Mi1kOWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsmbAOuXypJE1D04Y+QFm/BQdm28svZd/f6s+1fTR6C4hcTBr4duFjd/f
X/75GYp1pOI/GRzFiNtvoQN1wT20dN5oZntgnBwDLCMqkoPI7ypI/Urvq6rd9Dty
wAwpqLdrhgmpA6ulPgy2Ah/ubBMVFSM4VoDRtuFUP7E/0dlsxy+Zte6DehbNSBss
/wzS4gUwh466dMiqxa+GzhWOejDW2Sf1zJr/Y0YfQ6y792BsTxsMLrE/ugA/FgCb
ZJWkGukp3aJLVkK0XtYWQh1wq1tfdPlRDHkluYlmkk8hSqqWQtfYhnffPJM4UZ4C
tpkg8sdtbOgMiyHD621mNl3rPEJVWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFENW
LDImDZYcHQZ0cgtjyHHGuCHXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NTMwMzY5RUYzNjQxMUVGQjFGRjQzNjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVSMA0GCSqGSIb3DQEBCwUA
A4IBAQC4jEcu9TJita65cS4p0RobkZr78koPek4XnXiRKck7k0xFr+J4UrbNuI+0
2YCFjZ/E7s0mBuVrsP1gI2denNMDdmo0kZKAjI4Kcch5+9/uTGTWNk3oG0uiVSVX
9D5XnMuLpS30c6WVg93HH0z6XM9bDz293hh77vrfTkQiQav/ijQYrUP+Eq2uRMEJ
AWcz3/Xzb+XOGrqdzVp2j8aBkX2uA32k70QpDebGjU5CHDf69xgRNPwskdQNc2B9
KFRIgklGuqFOZvfDzwnP8pyeIsevUnaQRd3iVpu2FuBY4k+1sYAAs17T0+36zRB9
M6LN3tAEgIyFwmfASVZHgJYDK4kx
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:42 2025 by rpki-client