Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CD0D216F47011EFBA533E97762E951A.roa
File: 7CD0D216F47011EFBA533E97762E951A.roa (raw, json)
Hash identifier: pZUMcX25Pn/oXazZO+sxNWOpTPkO+lHfPleaeBic3ko=
Subject key identifier: 7F:1B:57:E1:17:49:18:AB:41:80:01:4A:FD:66:08:A1:21:ED:C6:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013679
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CD0D216F47011EFBA533E97762E951A.roa
Signing time: Wed 26 Feb 2025 18:35:44 +0000
ROA not before: Wed 26 Feb 2025 18:35:40 +0000
ROA not after: Thu 19 Feb 2026 18:35:40 +0000
asID: 984
IP address blocks: 45.201.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79481 (0x13679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:35:40 2025 GMT
Not After : Feb 19 18:35:40 2026 GMT
Subject: CN=67bf5f00-5a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:2c:a6:d8:b8:f9:fa:ee:cd:f5:9f:89:c1:
ab:a1:97:0c:d6:04:27:cb:07:78:e4:39:c0:a0:60:
12:d4:57:c8:44:23:ae:ed:c8:4e:04:94:d6:7e:2c:
3e:c3:61:95:bb:5d:6a:b7:ae:2f:cf:d6:5e:9e:df:
62:de:fb:19:79:9a:c9:b2:84:5b:87:99:c5:7a:2e:
06:e9:0c:65:6b:cd:9c:d9:87:6e:4a:18:08:88:9d:
e1:0a:e3:fb:bf:6b:8b:0d:b6:89:db:d1:3f:14:c5:
32:4e:66:d4:a2:53:50:49:1e:1d:e3:ff:9a:e7:bb:
44:51:8e:be:8a:1f:7b:99:71:4c:e0:5d:bc:1b:46:
fa:ce:5b:2c:2b:cc:14:79:b5:21:8a:f8:32:f0:95:
2b:ad:14:2e:e5:be:b8:be:c2:ae:14:b8:45:fa:d2:
dd:fc:92:84:e5:26:60:77:e3:a7:90:ca:53:5d:fc:
53:4a:15:5c:53:fc:5d:32:21:3b:f3:b6:61:5a:52:
23:34:75:aa:af:2c:e8:c6:e7:4c:8d:0a:3a:62:9d:
a5:24:00:c0:1c:b7:29:56:c3:f1:bb:bf:95:4f:93:
91:dd:60:82:ce:8b:7e:a1:44:45:75:82:ca:af:93:
9b:e6:70:4b:82:1e:43:61:c2:4b:ab:7e:b2:ed:c8:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1B:57:E1:17:49:18:AB:41:80:01:4A:FD:66:08:A1:21:ED:C6:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CD0D216F47011EFBA533E97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.74.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f8:02:91:78:6b:21:ed:53:7b:09:82:6b:fe:2c:20:f4:32:
9e:ad:73:63:5a:28:af:9e:e6:12:37:7e:72:16:a1:6d:7f:ab:
21:83:fa:ef:44:96:cf:57:fa:53:de:91:4a:c2:fe:30:6e:7c:
6c:48:80:e5:8b:35:ae:a6:c5:e9:30:34:ea:fa:54:50:9d:c1:
60:96:e5:b1:21:af:5c:30:4a:f4:7a:36:00:b4:45:9c:53:ba:
31:53:85:06:c0:74:01:dd:30:67:68:3a:ce:91:17:e1:bb:83:
71:91:0c:5b:fe:10:97:18:17:f9:0f:f3:3f:ef:73:25:ee:93:
d7:e7:30:6e:10:14:7b:c9:75:3f:c4:5e:d9:1c:d0:1c:92:12:
a6:62:5c:5c:3b:d9:5a:b3:66:96:99:20:1b:ad:31:03:5c:aa:
c6:6a:51:3a:00:2d:55:b9:12:07:63:08:8b:3d:e9:72:ce:f8:
57:1e:3b:b0:95:45:0a:23:0e:63:c7:b9:1a:97:0f:1a:2f:8e:
1b:2f:4b:2c:5f:9c:9e:b1:5f:33:97:6d:59:ca:c3:75:39:bd:
33:51:41:86:98:fb:a1:ef:96:3d:06:6f:46:62:a7:5b:49:a4:
ef:50:d5:2c:69:a4:65:dc:bb:18:05:17:0f:c9:f0:cd:4a:59:
fe:8f:63:fd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATZ5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTgzNTQwWhcNMjYwMjE5MTgzNTQwWjAYMRYw
FAYDVQQDEw02N2JmNWYwMC01YTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Hkspti4+fruzfWficGroZcM1gQnywd45DnAoGAS1FfIRCOu7chOBJTW
fiw+w2GVu11qt64vz9Zent9i3vsZeZrJsoRbh5nFei4G6Qxla82c2YduShgIiJ3h
CuP7v2uLDbaJ29E/FMUyTmbUolNQSR4d4/+a57tEUY6+ih97mXFM4F28G0b6zlss
K8wUebUhivgy8JUrrRQu5b64vsKuFLhF+tLd/JKE5SZgd+OnkMpTXfxTShVcU/xd
MiE787ZhWlIjNHWqryzoxudMjQo6Yp2lJADAHLcpVsPxu7+VT5OR3WCCzot+oURF
dYLKr5Ob5nBLgh5DYcJLq36y7chSYwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH8b
V+EXSRirQYABSv1mCKEh7casMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83Q0QwRDIxNkY0NzAxMUVGQkE1MzNFOTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALclKMA0GCSqGSIb3DQEBCwUA
A4IBAQCr+AKReGsh7VN7CYJr/iwg9DKerXNjWiivnuYSN35yFqFtf6shg/rvRJbP
V/pT3pFKwv4wbnxsSIDlizWupsXpMDTq+lRQncFgluWxIa9cMEr0ejYAtEWcU7ox
U4UGwHQB3TBnaDrOkRfhu4NxkQxb/hCXGBf5D/M/73Ml7pPX5zBuEBR7yXU/xF7Z
HNAckhKmYlxcO9las2aWmSAbrTEDXKrGalE6AC1VuRIHYwiLPelyzvhXHjuwlUUK
Iw5jx7kalw8aL44bL0ssX5yesV8zl21ZysN1Ob0zUUGGmPuh75Y9Bm9GYqdbSaTv
UNUsaaRl3LsYBRcPyfDNSln+j2P9
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:33 2025 by rpki-client