Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C016CE8F42D11EFB0BD0A44762E951A.roa
File: 8C016CE8F42D11EFB0BD0A44762E951A.roa (raw, json)
Hash identifier: 3QRkO0pewfX6yXIl0gwdh3AMjqw9OSHJErrGixpGvlE=
Subject key identifier: B4:02:4E:D6:EA:17:15:EA:B6:9D:39:30:27:45:54:21:9D:F1:E8:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013134
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C016CE8F42D11EFB0BD0A44762E951A.roa
Signing time: Wed 26 Feb 2025 10:36:33 +0000
ROA not before: Wed 26 Feb 2025 10:36:29 +0000
ROA not after: Sun 20 Feb 2028 10:36:29 +0000
asID: 17561
IP address blocks: 45.203.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78132 (0x13134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:36:29 2025 GMT
Not After : Feb 20 10:36:29 2028 GMT
Subject: CN=67beeeb1-905f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c3:6b:16:9a:71:6d:1b:69:29:90:45:28:d7:
41:4f:07:d2:4e:7b:d4:d7:2b:02:3f:b4:3f:ec:9e:
28:84:eb:7b:3c:89:11:2b:8c:b7:89:80:a1:9c:8c:
80:f1:12:3e:98:66:97:38:62:d6:34:02:98:9c:03:
90:5f:8b:d8:60:50:d9:d9:eb:86:6a:f3:4f:a6:87:
07:f6:59:63:fa:77:eb:5d:3a:63:4a:cc:02:a7:62:
ae:f8:99:5d:12:a9:40:2d:eb:cf:c9:fc:5b:04:f9:
78:84:bf:c3:7a:36:c8:45:e9:be:2b:54:63:35:a1:
c4:04:3d:3e:c0:02:ff:fc:3b:62:b4:43:17:7e:35:
9f:fc:f1:b9:29:8c:50:81:73:9b:0e:1f:e5:d8:43:
ec:9a:c2:87:a5:21:88:94:44:ee:c7:56:2a:13:bd:
fd:e8:87:24:08:b3:c0:45:2b:45:aa:2f:99:95:4c:
df:1e:01:be:04:d4:47:8e:95:1d:15:9f:32:1a:28:
20:a3:aa:f5:f4:c8:ab:85:a9:b2:ad:bd:20:cb:93:
f3:44:18:c1:8f:bb:51:a7:5f:c6:00:d0:92:e5:2e:
9e:f4:8c:97:f0:05:0c:0d:d0:96:fb:ed:66:83:62:
a8:7d:2a:dc:c9:46:5d:1a:db:f8:22:35:f2:19:5b:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:02:4E:D6:EA:17:15:EA:B6:9D:39:30:27:45:54:21:9D:F1:E8:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C016CE8F42D11EFB0BD0A44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:3e:10:2f:1f:7d:44:9a:88:75:ee:32:ef:65:cc:4e:55:fc:
69:2f:4d:ea:b3:e1:74:20:b8:3e:b2:02:d7:3b:32:cf:f9:a6:
92:c3:a4:79:e8:e4:43:f0:35:ef:f1:ac:d6:eb:fd:af:7c:31:
59:66:0b:c0:6d:d6:41:72:6f:e9:39:af:98:f7:72:d7:87:20:
58:47:17:6c:01:02:fe:75:ee:a8:a7:96:3f:e5:08:27:05:b0:
49:67:8e:bd:11:3e:98:78:f2:60:3f:2e:48:13:a9:54:98:d7:
b4:e6:f3:78:93:8e:dd:1c:47:b0:09:f7:f9:67:82:45:9d:c4:
a2:40:62:7a:d5:17:9e:63:4f:dc:81:12:04:5c:11:ef:d2:9a:
92:eb:4a:b8:3e:01:1f:25:af:92:00:77:cd:7f:02:07:c1:1c:
fc:7a:3b:cd:6e:31:9b:0f:de:3d:9d:ec:3f:d1:5f:07:05:91:
1e:ce:d8:ef:00:8e:b2:16:a0:fb:1b:5d:e2:6d:08:d6:6f:e2:
07:c2:8b:23:a6:4b:c3:05:08:62:05:ff:e7:91:5a:36:ba:79:
54:f5:cc:4d:7e:3d:4e:50:83:53:d2:de:08:41:0d:4c:7a:d0:
12:89:0c:a4:ac:de:86:b8:2c:67:45:b3:9e:1d:b3:2c:61:4c:
8d:1d:0e:23
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATE0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTAzNjI5WhcNMjgwMjIwMTAzNjI5WjAYMRYw
FAYDVQQDEw02N2JlZWViMS05MDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA88NrFppxbRtpKZBFKNdBTwfSTnvU1ysCP7Q/7J4ohOt7PIkRK4y3iYCh
nIyA8RI+mGaXOGLWNAKYnAOQX4vYYFDZ2euGavNPpocH9llj+nfrXTpjSswCp2Ku
+JldEqlALevPyfxbBPl4hL/DejbIRem+K1RjNaHEBD0+wAL//DtitEMXfjWf/PG5
KYxQgXObDh/l2EPsmsKHpSGIlETux1YqE7396IckCLPARStFqi+ZlUzfHgG+BNRH
jpUdFZ8yGiggo6r19Mirhamyrb0gy5PzRBjBj7tRp1/GANCS5S6e9IyX8AUMDdCW
++1mg2KofSrcyUZdGtv4IjXyGVuOrQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLQC
TtbqFxXqtp05MCdFVCGd8ehuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QzAxNkNFOEY0MkQxMUVGQjBCRDBBNDQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcukMA0GCSqGSIb3DQEBCwUA
A4IBAQCpPhAvH31Emoh17jLvZcxOVfxpL03qs+F0ILg+sgLXOzLP+aaSw6R56ORD
8DXv8azW6/2vfDFZZgvAbdZBcm/pOa+Y93LXhyBYRxdsAQL+de6op5Y/5QgnBbBJ
Z469ET6YePJgPy5IE6lUmNe05vN4k47dHEewCff5Z4JFncSiQGJ61ReeY0/cgRIE
XBHv0pqS60q4PgEfJa+SAHfNfwIHwRz8ejvNbjGbD949new/0V8HBZEeztjvAI6y
FqD7G13ibQjWb+IHwosjpkvDBQhiBf/nkVo2unlU9cxNfj1OUINT0t4IQQ1MetAS
iQykrN6GuCxnRbOeHbMsYUyNHQ4j
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:03 2025 by rpki-client