Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/906B2DE0107111F099F8AE99762E951A.roa
File: 906B2DE0107111F099F8AE99762E951A.roa (raw, json)
Hash identifier: yky1NaQYLVmeQ7P47QzLwp4+lrJRb+rLwJuJwfCn7Jo=
Subject key identifier: 8A:DF:FC:ED:84:32:1E:C3:FF:43:47:0A:7C:FB:5C:5B:7D:19:9A:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/906B2DE0107111F099F8AE99762E951A.roa
Signing time: Thu 03 Apr 2025 09:53:59 +0000
ROA not before: Thu 03 Apr 2025 09:53:55 +0000
ROA not after: Sun 27 Apr 2025 09:53:55 +0000
asID: 13335
IP address blocks: 45.192.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84396 (0x149ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 3 09:53:55 2025 GMT
Not After : Apr 27 09:53:55 2025 GMT
Subject: CN=67ee5ab7-8e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:e1:05:fc:ba:0c:45:1b:87:67:52:1c:03:
a1:e3:b7:39:05:b7:28:e4:e6:ab:c4:e3:89:d6:ec:
66:d8:70:6d:6c:16:c2:01:80:5a:a3:20:16:44:b7:
cc:e9:84:62:9b:07:a2:76:a2:8d:8a:c7:b0:ab:6b:
56:ae:8b:fb:a1:92:37:f0:88:e2:13:9e:9c:8f:3f:
f5:3b:23:c2:f3:e9:b7:ac:ab:36:0d:6b:d2:50:9c:
b4:2e:ac:c0:7c:0b:13:94:21:44:34:04:5f:9f:cd:
c6:98:28:85:40:4d:fa:75:ac:32:26:27:ee:39:a4:
1b:59:f1:c6:6c:2d:13:78:dd:28:05:9c:28:22:08:
f9:f5:28:90:16:7d:e7:27:01:eb:5e:af:f1:65:4d:
85:a7:d7:ed:48:3a:ae:cc:d9:c5:3c:0f:00:fc:2a:
e5:53:a6:4e:da:1d:da:4f:eb:3e:d0:b4:05:6f:6a:
a3:c7:5f:17:9e:25:b6:c8:59:e3:2b:58:c2:18:62:
cf:97:2c:1d:45:c3:70:6b:28:43:4b:42:7f:37:92:
09:6d:28:be:23:17:8c:ca:eb:1c:06:f0:b7:ec:49:
52:7e:5c:5a:8f:c2:41:f5:c5:ab:42:5c:b4:a8:d0:
a1:44:b6:5a:0b:cc:96:1b:a8:7b:99:9a:a5:8e:d7:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DF:FC:ED:84:32:1E:C3:FF:43:47:0A:7C:FB:5C:5B:7D:19:9A:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/906B2DE0107111F099F8AE99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
57:db:87:31:e0:77:8c:60:b7:84:1d:97:f6:ae:34:8e:6c:f5:
3f:ca:5e:b4:f7:ab:3f:6e:11:d8:42:e9:e6:24:8e:ad:c4:7e:
64:03:84:f7:58:ec:b0:92:4a:a8:70:fc:cd:ff:40:3f:62:5c:
11:1f:8a:51:2f:d6:ef:8a:61:4f:bd:3e:4f:ac:68:8d:80:bb:
c3:1f:37:35:1e:ed:78:bc:fd:de:f3:c1:cd:fd:97:92:b8:de:
2f:82:5b:bd:ad:5b:b7:a0:73:7d:40:09:bd:83:d3:18:b9:d2:
ec:d1:22:89:87:a4:63:cd:c3:ec:5b:40:77:68:34:7a:04:84:
c5:fe:61:a0:dc:70:f9:f8:28:d8:92:db:e0:39:6d:90:35:44:
69:06:44:42:9c:9a:77:d6:b0:4c:27:5e:96:38:bc:1a:d8:72:
25:8f:b6:d9:e1:64:a9:76:5b:3f:6c:43:85:67:e3:b9:b9:ce:
c5:80:7a:ca:74:b2:f2:1f:25:29:93:f6:eb:6d:32:a3:46:88:
a0:db:a6:d0:99:87:00:e4:08:ed:38:65:3e:52:fe:85:fa:b4:
3c:34:96:bd:6e:a0:3f:bc:78:53:2b:e0:33:ee:ee:0f:a8:9f:
bf:e2:b9:91:96:e7:9f:83:6a:9c:3a:b5:10:e0:cc:44:10:a9:
91:e8:e1:23
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUmsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDAzMDk1MzU1WhcNMjUwNDI3MDk1MzU1WjAYMRYw
FAYDVQQDEw02N2VlNWFiNy04ZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3ZThBfy6DEUbh2dSHAOh47c5Bbco5OarxOOJ1uxm2HBtbBbCAYBaoyAW
RLfM6YRimweidqKNisewq2tWrov7oZI38IjiE56cjz/1OyPC8+m3rKs2DWvSUJy0
LqzAfAsTlCFENARfn83GmCiFQE36dawyJifuOaQbWfHGbC0TeN0oBZwoIgj59SiQ
Fn3nJwHrXq/xZU2Fp9ftSDquzNnFPA8A/CrlU6ZO2h3aT+s+0LQFb2qjx18XniW2
yFnjK1jCGGLPlywdRcNwayhDS0J/N5IJbSi+IxeMyuscBvC37ElSflxaj8JB9cWr
Qly0qNChRLZaC8yWG6h7mZqljtfyEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIrf
/O2EMh7D/0NHCnz7XFt9GZoDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MDZCMkRFMDEwNzExMUYwOTlGOEFFOTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDeMA0GCSqGSIb3DQEBCwUA
A4IBAQBX24cx4HeMYLeEHZf2rjSObPU/yl6096s/bhHYQunmJI6txH5kA4T3WOyw
kkqocPzN/0A/YlwRH4pRL9bvimFPvT5PrGiNgLvDHzc1Hu14vP3e88HN/ZeSuN4v
glu9rVu3oHN9QAm9g9MYudLs0SKJh6RjzcPsW0B3aDR6BITF/mGg3HD5+CjYktvg
OW2QNURpBkRCnJp31rBMJ16WOLwa2HIlj7bZ4WSpdls/bEOFZ+O5uc7FgHrKdLLy
HyUpk/brbTKjRoig26bQmYcA5AjtOGU+Uv6F+rQ8NJa9bqA/vHhTK+Az7u4PqJ+/
4rmRluefg2qcOrUQ4MxEEKmR6OEj
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:14 2025 by rpki-client