Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7963EF52F39211EFA59B7D98762E951A.roa
File: 7963EF52F39211EFA59B7D98762E951A.roa (raw, json)
Hash identifier: OuVlyg005yp6SLXFqQBeinOb+lXosSU9ecYaRL+eb98=
Subject key identifier: 36:95:AD:0D:96:AA:D2:7D:60:0C:75:5F:16:B6:33:7F:EC:8D:81:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7963EF52F39211EFA59B7D98762E951A.roa
Signing time: Tue 25 Feb 2025 16:06:30 +0000
ROA not before: Tue 25 Feb 2025 16:06:26 +0000
ROA not after: Wed 09 Apr 2025 16:06:26 +0000
asID: 63139
IP address blocks: 45.197.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77449 (0x12e89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 16:06:26 2025 GMT
Not After : Apr 9 16:06:26 2025 GMT
Subject: CN=67bdea86-b065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:55:97:ca:87:f1:db:67:bc:21:30:7b:5b:
80:eb:dc:c4:2d:93:2f:c4:a1:94:57:cb:04:76:a2:
10:3b:c5:7e:16:0d:bf:b3:7e:16:50:2b:0f:91:93:
13:2f:8d:7e:ff:c7:96:6a:fd:31:5e:41:71:3b:44:
a5:9c:3a:52:22:5d:42:ee:6d:48:b9:41:d5:49:23:
d5:8e:17:71:7c:0a:28:49:98:aa:06:76:84:4e:81:
10:5b:6a:de:9d:03:05:e6:09:3c:e5:47:aa:01:f7:
a0:c5:0a:e1:b2:13:10:59:17:d4:ce:01:84:18:a4:
75:99:45:95:71:ab:2f:c4:47:a5:27:c6:26:c5:de:
14:4b:03:f2:95:17:26:03:b1:23:95:9c:20:54:52:
df:1b:bc:cf:a9:9b:51:44:4a:60:21:ff:36:df:15:
ef:84:73:70:70:13:aa:2c:03:5a:81:ac:ef:13:5d:
07:4d:42:e2:4a:81:8b:91:36:2c:b3:08:45:bd:7e:
a7:48:b8:e9:44:1e:7d:17:6c:55:12:e9:f5:24:eb:
d9:ca:fe:f1:d8:5d:69:ce:e3:f1:07:e5:35:62:f3:
21:c9:c6:01:0e:40:8c:08:e0:c7:07:c2:a5:c1:94:
e1:7c:61:20:bc:3e:65:e0:f1:38:cb:b2:06:91:11:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:95:AD:0D:96:AA:D2:7D:60:0C:75:5F:16:B6:33:7F:EC:8D:81:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7963EF52F39211EFA59B7D98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.112.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3b:ca:bd:43:86:64:04:14:b1:02:05:c4:5e:a2:f4:f8:6d:
b0:1c:69:01:d6:ab:da:09:aa:92:54:22:50:9c:77:bf:d4:fd:
bd:54:ef:4a:f2:11:4f:47:08:be:df:d7:d7:9e:e2:f5:b6:06:
31:50:b4:b6:c9:19:88:d7:ef:0b:ce:11:e5:3b:8b:9b:0a:1b:
48:53:97:15:3c:89:f8:43:22:87:fe:f1:67:c5:f5:14:ae:76:
3f:e4:3a:59:8e:99:f4:b7:8b:ce:2a:82:53:b5:d8:9f:59:2a:
ff:96:36:cf:a6:45:2e:38:ef:73:8a:15:49:d7:3c:12:0a:54:
d0:d2:13:a9:d1:a7:4e:65:1f:4d:6b:1e:48:94:86:61:ce:01:
a3:08:c5:84:ff:ee:12:77:bb:87:5b:2f:fe:cb:71:49:98:bf:
7d:5f:94:d8:d5:56:02:f5:52:d1:3f:c4:44:9c:4c:04:76:94:
94:a3:80:42:c9:64:3d:dd:cf:a5:c3:d3:94:b4:50:dd:a8:62:
17:ce:c0:2f:ea:43:c0:e7:fd:e4:46:b8:3d:f2:4c:82:08:66:
01:fa:ea:49:93:31:5d:f3:a2:cd:69:ff:94:5b:78:d8:81:fd:
06:01:5b:e5:d3:da:88:b5:bd:ba:cc:89:0a:3a:53:15:cd:1f:
74:5c:88:fb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS6JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MTYwNjI2WhcNMjUwNDA5MTYwNjI2WjAYMRYw
FAYDVQQDEw02N2JkZWE4Ni1iMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtJZVl8qH8dtnvCEwe1uA69zELZMvxKGUV8sEdqIQO8V+Fg2/s34WUCsP
kZMTL41+/8eWav0xXkFxO0SlnDpSIl1C7m1IuUHVSSPVjhdxfAooSZiqBnaEToEQ
W2renQMF5gk85UeqAfegxQrhshMQWRfUzgGEGKR1mUWVcasvxEelJ8Ymxd4USwPy
lRcmA7EjlZwgVFLfG7zPqZtRREpgIf823xXvhHNwcBOqLANagazvE10HTULiSoGL
kTYsswhFvX6nSLjpRB59F2xVEun1JOvZyv7x2F1pzuPxB+U1YvMhycYBDkCMCODH
B8KlwZThfGEgvD5l4PE4y7IGkRFhswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDaV
rQ2WqtJ9YAx1Xxa2M3/sjYHzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83OTYzRUY1MkYzOTIxMUVGQTU5QjdEOTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVwMA0GCSqGSIb3DQEBCwUA
A4IBAQAmO8q9Q4ZkBBSxAgXEXqL0+G2wHGkB1qvaCaqSVCJQnHe/1P29VO9K8hFP
Rwi+39fXnuL1tgYxULS2yRmI1+8LzhHlO4ubChtIU5cVPIn4QyKH/vFnxfUUrnY/
5DpZjpn0t4vOKoJTtdifWSr/ljbPpkUuOO9zihVJ1zwSClTQ0hOp0adOZR9Nax5I
lIZhzgGjCMWE/+4Sd7uHWy/+y3FJmL99X5TY1VYC9VLRP8REnEwEdpSUo4BCyWQ9
3c+lw9OUtFDdqGIXzsAv6kPA5/3kRrg98kyCCGYB+upJkzFd86LNaf+UW3jYgf0G
AVvl09qItb26zIkKOlMVzR90XIj7
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:09 2025 by rpki-client