Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D121D7E03ED11F0AC20FBA4762E951A.roa
File: 8D121D7E03ED11F0AC20FBA4762E951A.roa (raw, json)
Hash identifier: 8uZKnL1fcZZmgA0i+cv90qlXyDQaiNsnTiqjOkCdmMM=
Subject key identifier: 88:D5:F2:96:46:1D:6E:F3:D9:D0:0F:4A:D2:21:6F:28:45:7D:AB:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D121D7E03ED11F0AC20FBA4762E951A.roa
Signing time: Tue 18 Mar 2025 11:38:46 +0000
ROA not before: Tue 18 Mar 2025 11:38:41 +0000
ROA not after: Sun 27 Apr 2025 11:38:41 +0000
asID: 202656
IP address blocks: 45.192.55.0/24 maxlen: 24
45.199.195.0/24 maxlen: 24
45.199.198.0/24 maxlen: 24
45.199.199.0/24 maxlen: 24
45.199.200.0/24 maxlen: 24
45.199.201.0/24 maxlen: 24
45.199.202.0/24 maxlen: 24
45.199.203.0/24 maxlen: 24
45.199.204.0/24 maxlen: 24
45.199.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83629 (0x146ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 11:38:41 2025 GMT
Not After : Apr 27 11:38:41 2025 GMT
Subject: CN=67d95b46-5ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:2a:c9:03:eb:23:da:8e:af:5c:b1:d0:65:
c8:c4:5c:9c:99:9a:2d:16:07:e6:79:6c:be:41:74:
08:db:e0:bf:c3:f9:93:da:07:31:5f:f1:43:2a:f2:
9a:14:41:80:5e:f7:83:9c:ed:1a:65:11:50:31:3d:
33:45:f2:a4:f2:97:90:a6:fb:4f:20:2d:d9:c4:a2:
60:6e:88:87:83:9f:be:ec:48:d4:14:3d:82:dc:26:
01:a4:c2:dc:c2:93:e2:c4:70:a7:e8:90:21:0c:d9:
bb:61:d0:d7:9c:72:ca:f2:a6:34:14:be:98:f2:27:
7f:0d:cb:25:ba:e4:ed:55:1f:5d:24:98:44:8a:ff:
30:1f:c1:68:d1:0d:92:d6:36:d2:e1:60:db:c3:a4:
bd:ba:9f:4a:20:cc:0e:88:8e:36:7e:35:e7:c3:c7:
09:a3:25:60:5b:84:96:a4:b0:45:a5:bd:0d:9f:fc:
9d:96:ec:ae:4e:49:ee:51:2a:51:6e:fa:7f:a5:c6:
61:c1:b0:e3:43:8f:d9:6f:10:58:ad:ab:13:35:fe:
46:2a:8c:14:a8:fc:b8:6b:c8:22:66:69:94:dc:45:
ca:97:7d:e5:15:62:80:e8:11:10:ca:4d:7a:26:f9:
cf:36:b8:5f:5a:4f:6d:6b:3e:03:50:91:c7:ff:41:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D5:F2:96:46:1D:6E:F3:D9:D0:0F:4A:D2:21:6F:28:45:7D:AB:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D121D7E03ED11F0AC20FBA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.55.0/24
45.199.195.0/24
45.199.198.0-45.199.205.255
Signature Algorithm: sha256WithRSAEncryption
92:00:8d:2d:c5:50:76:ae:6b:e2:d4:7b:70:b4:9c:ac:15:c1:
ec:56:ce:04:07:f5:42:9c:7a:bc:1f:0b:44:79:71:6b:c0:dd:
df:a4:2e:22:8d:1d:70:94:1d:19:7a:d5:6c:7a:e5:03:f4:1e:
02:23:36:50:fe:79:3e:86:86:6d:fe:ee:bc:95:fb:35:3d:99:
20:67:02:5f:54:4b:7d:4f:01:93:bb:74:14:fa:1b:dd:84:21:
53:ad:f1:2b:c2:79:2c:7d:73:d1:47:6a:29:f3:15:c0:6f:2d:
9b:0a:73:13:26:1d:1b:3b:41:e3:ed:ed:b0:ab:1c:00:27:b2:
93:24:61:a0:36:c5:b9:bd:85:4a:12:79:46:0e:9a:5f:12:90:
ae:6f:92:97:e6:71:6e:74:4a:87:c2:fa:57:03:42:e4:34:ae:
b4:39:a5:e8:69:75:b6:bb:f2:42:0c:08:23:e4:69:a0:68:95:
7e:2b:c7:96:10:06:c3:f4:e8:d9:90:1e:da:e8:fe:53:fc:cb:
05:c0:4a:e8:74:9d:47:34:67:3a:87:d4:32:8a:5e:ea:2d:ec:
29:d2:5e:59:ef:b3:df:ed:d6:2b:fd:1a:0e:29:90:51:ad:97:
38:bb:4f:19:26:d1:ab:78:a7:5a:eb:e5:b7:cf:a1:ad:9f:c3:
b1:2a:8a:90
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAUatMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE4MTEzODQxWhcNMjUwNDI3MTEzODQxWjAYMRYw
FAYDVQQDEw02N2Q5NWI0Ni01YWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2ukqyQPrI9qOr1yx0GXIxFycmZotFgfmeWy+QXQI2+C/w/mT2gcxX/FD
KvKaFEGAXveDnO0aZRFQMT0zRfKk8peQpvtPIC3ZxKJgboiHg5++7EjUFD2C3CYB
pMLcwpPixHCn6JAhDNm7YdDXnHLK8qY0FL6Y8id/DcsluuTtVR9dJJhEiv8wH8Fo
0Q2S1jbS4WDbw6S9up9KIMwOiI42fjXnw8cJoyVgW4SWpLBFpb0Nn/ydluyuTknu
USpRbvp/pcZhwbDjQ4/ZbxBYrasTNf5GKowUqPy4a8giZmmU3EXKl33lFWKA6BEQ
yk16JvnPNrhfWk9taz4DUJHH/0FHkwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFIjV
8pZGHW7z2dAPStIhbyhFfavVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RDEyMUQ3RTAzRUQxMUYwQUMyMEZCQTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALcA3AwQALcfDMAwDBAEtx8YD
BAEtx8wwDQYJKoZIhvcNAQELBQADggEBAJIAjS3FUHaua+LUe3C0nKwVwexWzgQH
9UKcerwfC0R5cWvA3d+kLiKNHXCUHRl61Wx65QP0HgIjNlD+eT6Ghm3+7ryV+zU9
mSBnAl9US31PAZO7dBT6G92EIVOt8SvCeSx9c9FHainzFcBvLZsKcxMmHRs7QePt
7bCrHAAnspMkYaA2xbm9hUoSeUYOml8SkK5vkpfmcW50SofC+lcDQuQ0rrQ5pehp
dba78kIMCCPkaaBolX4rx5YQBsP06NmQHtro/lP8ywXASuh0nUc0ZzqH1DKKXuot
7CnSXlnvs9/t1iv9Gg4pkFGtlzi7Txkm0at4p1rr5bfPoa2fw7EqipA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:53 2025 by rpki-client