Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C6FB4000A2111F0AADADFA0762E951A.roa
File: 8C6FB4000A2111F0AADADFA0762E951A.roa (raw, json)
Hash identifier: 0f6SnwmHs8veW/RctV63XEZZi0wH+T8ebothj/3C6aM=
Subject key identifier: 3E:99:A1:6E:E1:2F:34:50:7F:B8:87:26:7F:38:21:F4:C0:0E:10:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01484E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C6FB4000A2111F0AADADFA0762E951A.roa
Signing time: Wed 26 Mar 2025 09:06:05 +0000
ROA not before: Wed 26 Mar 2025 09:06:01 +0000
ROA not after: Fri 02 May 2025 09:06:01 +0000
asID: 20473
IP address blocks: 45.192.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84046 (0x1484e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 09:06:01 2025 GMT
Not After : May 2 09:06:01 2025 GMT
Subject: CN=67e3c37d-4221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:fc:cb:81:4d:a1:41:f7:2a:fa:bb:e3:e8:ec:
c3:ab:54:cd:0b:69:7e:41:d0:40:b5:70:fa:5f:a8:
55:8c:2e:84:81:7f:1e:61:92:46:43:ad:38:49:c4:
f8:cb:53:f0:8c:ed:15:1d:83:fc:57:4a:88:77:9b:
4e:15:bb:2f:4c:ad:e7:be:4a:d4:8a:41:54:61:c6:
7a:08:92:6a:7c:b8:5b:57:e0:b9:0e:45:cd:92:f4:
c0:e7:f5:d5:35:df:e3:a7:d4:25:63:cd:a6:04:5d:
58:4a:91:a3:85:d6:9d:f4:75:77:5e:c5:77:f1:56:
42:b9:e3:4b:6d:70:d1:a1:a6:95:22:3b:69:ab:28:
37:a8:e2:18:45:a3:a8:52:32:ff:c6:f1:07:f2:e9:
63:f6:e3:e4:fa:e2:15:a2:28:ef:96:15:24:9d:f0:
2d:79:c8:29:3c:b0:a8:45:21:a9:d1:c2:68:ad:dd:
1f:0a:1c:05:86:42:13:10:31:3f:d8:e5:b7:ae:16:
1d:de:77:b4:bf:6f:f4:fa:f4:d8:d0:b7:ab:7e:a4:
bc:ed:bf:36:37:58:d3:2f:04:84:ee:35:9d:49:03:
cf:51:2d:bc:7e:04:fc:ee:56:c4:f9:a1:db:03:3a:
34:be:b0:9b:d0:bd:14:91:d1:26:0d:05:7e:a8:35:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:99:A1:6E:E1:2F:34:50:7F:B8:87:26:7F:38:21:F4:C0:0E:10:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C6FB4000A2111F0AADADFA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:26:db:ea:09:e3:aa:d8:40:64:cb:6a:e1:2a:16:d7:44:2a:
21:c8:b0:9d:86:f9:e2:76:59:f4:2c:8e:b1:26:f6:8e:a6:5d:
27:89:fa:bd:a4:e4:34:53:74:ee:ff:08:1e:9b:9a:2c:19:b1:
ed:7c:62:05:b0:0e:71:c8:cd:5f:a8:d7:cb:0c:7e:56:e8:5d:
a9:e1:da:f8:87:b5:b1:a5:c2:92:54:c2:84:70:6e:0e:af:15:
96:76:03:0c:02:c2:c7:49:34:65:ec:c1:94:8f:e9:1f:e5:a7:
7b:c8:08:33:47:82:e3:39:bf:ac:78:20:29:aa:c5:e4:cf:b0:
91:6e:8d:60:c7:85:49:bf:58:cf:bc:a0:50:f3:11:34:5e:26:
8e:cc:35:a4:fb:49:f6:f1:01:9f:4f:c3:e0:d1:3a:e2:ac:7d:
86:05:c9:21:de:c6:0e:5b:d0:f6:20:4c:82:68:d2:c8:40:5f:
e4:9b:9e:6a:d6:df:dd:2a:d2:ea:d3:fd:61:d9:f1:bf:b7:c4:
3d:e1:43:69:3f:9b:f6:7a:5a:04:5b:32:6d:3b:47:59:9f:da:
ac:2a:3b:72:4b:9f:0c:12:0e:a1:3d:d4:d7:4a:0f:02:08:d6:
91:83:56:87:c5:40:2a:5d:b7:5e:a1:da:f8:c5:3f:80:26:c4:
ad:59:5f:ba
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUhOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzI2MDkwNjAxWhcNMjUwNTAyMDkwNjAxWjAYMRYw
FAYDVQQDEw02N2UzYzM3ZC00MjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+PzLgU2hQfcq+rvj6OzDq1TNC2l+QdBAtXD6X6hVjC6EgX8eYZJGQ604
ScT4y1PwjO0VHYP8V0qId5tOFbsvTK3nvkrUikFUYcZ6CJJqfLhbV+C5DkXNkvTA
5/XVNd/jp9QlY82mBF1YSpGjhdad9HV3XsV38VZCueNLbXDRoaaVIjtpqyg3qOIY
RaOoUjL/xvEH8ulj9uPk+uIVoijvlhUknfAtecgpPLCoRSGp0cJord0fChwFhkIT
EDE/2OW3rhYd3ne0v2/0+vTY0LerfqS87b82N1jTLwSE7jWdSQPPUS28fgT87lbE
+aHbAzo0vrCb0L0UkdEmDQV+qDWQVwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD6Z
oW7hLzRQf7iHJn84IfTADhAlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QzZGQjQwMDBBMjExMUYwQUFEQURGQTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcCBMA0GCSqGSIb3DQEBCwUA
A4IBAQAdJtvqCeOq2EBky2rhKhbXRCohyLCdhvnidln0LI6xJvaOpl0nifq9pOQ0
U3Tu/wgem5osGbHtfGIFsA5xyM1fqNfLDH5W6F2p4dr4h7WxpcKSVMKEcG4OrxWW
dgMMAsLHSTRl7MGUj+kf5ad7yAgzR4LjOb+seCApqsXkz7CRbo1gx4VJv1jPvKBQ
8xE0XiaOzDWk+0n28QGfT8Pg0TrirH2GBckh3sYOW9D2IEyCaNLIQF/km55q1t/d
KtLq0/1h2fG/t8Q94UNpP5v2eloEWzJtO0dZn9qsKjtyS58MEg6hPdTXSg8CCNaR
g1aHxUAqXbdeodr4xT+AJsStWV+6
-----END CERTIFICATE-----
Generated at Fri Apr 11 13:37:35 2025 by rpki-client