Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/937808CCF48411EFA82F5EA2762E951A.roa
File: 937808CCF48411EFA82F5EA2762E951A.roa (raw, json)
Hash identifier: zePA5kOGxAtv0jEUyI/UG3UkuRh+WbhVELcGpUReVYE=
Subject key identifier: 8A:0A:BE:63:9C:E5:8C:D9:A5:F4:22:5D:E1:98:F7:25:E9:53:6A:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0137B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/937808CCF48411EFA82F5EA2762E951A.roa
Signing time: Wed 26 Feb 2025 20:59:32 +0000
ROA not before: Wed 26 Feb 2025 20:59:28 +0000
ROA not after: Sat 19 Feb 2028 20:59:28 +0000
asID: 17561
IP address blocks: 45.201.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79792 (0x137b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 20:59:28 2025 GMT
Not After : Feb 19 20:59:28 2028 GMT
Subject: CN=67bf80b4-e92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:80:3a:a3:4d:da:f1:76:05:b7:95:72:4e:
81:7f:9e:41:2f:a8:de:9a:8c:06:d8:26:8a:e7:f0:
79:3d:cf:cb:2c:5a:4b:32:57:58:43:cf:55:88:c6:
2c:92:a4:1e:cd:84:f6:01:43:c1:f1:26:08:93:4f:
8f:2f:3a:ad:fd:02:7f:32:73:17:80:b6:97:02:1b:
03:01:f5:5b:5d:84:ca:40:52:ba:a4:c1:d4:33:2c:
53:58:4e:fb:3e:7f:3c:79:b7:62:eb:9c:cd:c0:44:
04:6a:64:ac:2f:f3:6b:46:96:93:fc:2d:aa:85:ac:
d6:19:53:47:79:72:2b:c0:30:cb:99:82:00:ea:d9:
fe:6c:0f:61:3a:8d:3a:11:be:f4:ad:b6:88:7e:48:
88:2c:13:98:d8:26:d9:d1:c6:83:53:1d:8e:39:ce:
5b:65:98:7c:8e:ca:38:49:42:df:a7:ff:2e:32:ea:
0d:57:89:a3:4a:2f:85:a5:fe:cc:b7:2b:f6:c1:24:
ca:71:44:a0:c3:a4:a3:56:b6:7a:82:4b:8f:bb:74:
22:9a:da:00:9a:6a:72:79:82:07:a9:c2:58:0d:6e:
00:69:15:4d:ba:2e:ea:bb:8d:7a:2b:31:33:d6:e4:
80:0c:fc:da:25:03:03:67:17:23:85:96:97:b9:89:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0A:BE:63:9C:E5:8C:D9:A5:F4:22:5D:E1:98:F7:25:E9:53:6A:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/937808CCF48411EFA82F5EA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.238.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c5:9b:fc:af:6b:a1:66:36:27:da:17:e3:09:a5:99:50:b1:
36:3e:ea:95:37:dd:d4:5a:9e:d6:ed:8f:e6:83:e3:60:7d:69:
41:2c:9b:22:f2:ee:22:fb:13:3e:dc:f2:c1:61:d6:18:0c:83:
e5:fc:bf:b2:28:c1:f0:43:56:c7:de:3f:27:10:04:a7:e5:6e:
74:c0:81:90:b0:b6:be:4e:b0:aa:25:8f:cd:b0:10:3d:fa:c3:
87:cc:f8:b3:d5:ac:c2:d2:30:30:eb:f3:a1:84:87:0d:f1:f3:
0a:38:e6:d6:32:4a:db:7b:3c:1b:4c:b7:93:09:a5:60:6c:dd:
72:ef:00:25:a2:30:72:cf:e6:16:cc:48:f2:f5:4c:5a:2c:ea:
6c:8e:0e:7a:57:dd:5d:b6:13:9e:fa:07:4b:84:03:9d:d8:f1:
32:9e:4f:b8:fb:b0:26:19:39:86:3b:cd:34:5e:81:18:78:e7:
db:72:6e:30:54:c4:11:2c:59:bd:1b:3b:c4:e7:c0:f3:d1:83:
e4:c1:c8:a5:7e:2c:70:96:39:81:6a:28:21:4b:53:74:10:de:
ef:36:42:9c:ce:6b:e9:93:ce:b0:9b:27:11:c2:fc:75:55:30:
db:0b:36:3f:4d:50:e8:a0:45:88:95:77:72:40:07:bc:9b:81:
6f:ea:ad:7c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATewMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MjA1OTI4WhcNMjgwMjE5MjA1OTI4WjAYMRYw
FAYDVQQDEw02N2JmODBiNC1lOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAltCAOqNN2vF2BbeVck6Bf55BL6jemowG2CaK5/B5Pc/LLFpLMldYQ89V
iMYskqQezYT2AUPB8SYIk0+PLzqt/QJ/MnMXgLaXAhsDAfVbXYTKQFK6pMHUMyxT
WE77Pn88ebdi65zNwEQEamSsL/NrRpaT/C2qhazWGVNHeXIrwDDLmYIA6tn+bA9h
Oo06Eb70rbaIfkiILBOY2CbZ0caDUx2OOc5bZZh8jso4SULfp/8uMuoNV4mjSi+F
pf7Mtyv2wSTKcUSgw6SjVrZ6gkuPu3QimtoAmmpyeYIHqcJYDW4AaRVNui7qu416
KzEz1uSADPzaJQMDZxcjhZaXuYm1gQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIoK
vmOc5YzZpfQiXeGY9yXpU2qEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85Mzc4MDhDQ0Y0ODQxMUVGQTgyRjVFQTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcnuMA0GCSqGSIb3DQEBCwUA
A4IBAQCQxZv8r2uhZjYn2hfjCaWZULE2PuqVN93UWp7W7Y/mg+NgfWlBLJsi8u4i
+xM+3PLBYdYYDIPl/L+yKMHwQ1bH3j8nEASn5W50wIGQsLa+TrCqJY/NsBA9+sOH
zPiz1azC0jAw6/OhhIcN8fMKOObWMkrbezwbTLeTCaVgbN1y7wAlojByz+YWzEjy
9UxaLOpsjg56V91dthOe+gdLhAOd2PEynk+4+7AmGTmGO800XoEYeOfbcm4wVMQR
LFm9GzvE58Dz0YPkwcilfixwljmBaighS1N0EN7vNkKczmvpk86wmycRwvx1VTDb
CzY/TVDooEWIlXdyQAe8m4Fv6q18
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:39 2025 by rpki-client