Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94B72480F46A11EFBE40996F762E951A.roa
File: 94B72480F46A11EFBE40996F762E951A.roa (raw, json)
Hash identifier: hPqyGDpC3ji+YTLQkmDaBd7QMKkThWKnkkFC2KlVaw8=
Subject key identifier: 3A:E2:A9:20:AF:21:A0:64:ED:B3:EC:E1:B8:23:BF:6F:6A:08:77:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94B72480F46A11EFBE40996F762E951A.roa
Signing time: Wed 26 Feb 2025 17:53:27 +0000
ROA not before: Wed 26 Feb 2025 17:53:23 +0000
ROA not after: Thu 19 Feb 2026 17:53:23 +0000
asID: 984
IP address blocks: 45.201.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79345 (0x135f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:53:23 2025 GMT
Not After : Feb 19 17:53:23 2026 GMT
Subject: CN=67bf5517-1b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:84:61:5c:13:b8:5b:01:17:dd:d2:b5:60:ce:
ee:95:7e:17:ec:58:c7:48:7a:77:11:44:7c:a5:b1:
72:84:cc:02:e7:5b:0f:04:7e:47:65:e7:4a:27:bc:
33:e6:aa:be:5e:69:3b:5c:3c:17:d8:95:fd:ad:d9:
72:c4:7f:39:92:a0:a0:14:25:04:c2:89:70:cc:20:
8b:cb:c2:f0:2d:9d:1d:19:fb:a1:56:45:b5:84:c8:
39:57:4a:7f:97:e1:31:e7:c7:6a:cb:ac:46:a9:42:
1d:e5:68:1b:ac:8b:51:d8:6f:95:ea:a7:28:0d:67:
f8:46:a8:c0:76:cb:32:78:12:44:2e:d3:17:6d:46:
a1:7b:e2:d4:c2:6f:fd:e6:72:09:17:ac:ef:f5:02:
78:ff:3f:98:a6:22:89:c3:21:5a:1c:9c:7d:a8:ff:
dd:ca:6b:5e:ed:10:14:62:79:3b:df:cc:35:3d:3f:
b7:f7:29:64:6e:02:bf:a9:a9:10:88:24:fc:ce:71:
40:6f:90:5d:67:93:a5:69:bd:0e:df:50:7e:0d:56:
45:a1:26:fc:c8:df:71:8c:fb:39:7e:5b:9e:a3:0b:
82:6e:0b:fe:d5:00:28:b0:29:df:75:ac:37:d2:19:
d4:6b:74:cc:e5:90:89:b0:f5:ef:17:bc:1b:6f:4e:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E2:A9:20:AF:21:A0:64:ED:B3:EC:E1:B8:23:BF:6F:6A:08:77:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94B72480F46A11EFBE40996F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.55.0/24
Signature Algorithm: sha256WithRSAEncryption
05:31:f6:ad:43:90:7c:cb:59:bb:ec:60:e1:7c:ee:e4:e7:d7:
82:60:eb:aa:4e:3e:f4:b2:d4:23:79:de:cc:af:ed:09:5e:f1:
15:05:c1:0c:24:82:01:0a:31:22:dc:cc:27:93:a0:61:a7:35:
41:94:2d:15:4e:29:34:e9:5c:9c:94:d5:d9:ff:9f:0a:e3:98:
60:aa:ae:09:81:3c:e6:84:93:48:79:78:08:db:e0:7d:79:ac:
f9:a5:d2:05:22:85:17:c0:bf:9b:a4:c0:48:f0:dd:28:66:c4:
d7:0c:0b:f0:cc:a4:ba:cc:17:39:2c:6f:b8:47:49:4c:9d:75:
b9:0b:14:44:ed:8d:6f:ca:20:bc:26:d5:95:60:0e:b0:6b:5c:
03:25:18:f6:bc:21:e8:48:7c:8f:3c:43:ba:93:99:c7:7f:6c:
58:35:e8:cb:0d:01:b8:4e:48:29:67:c4:8b:5a:98:d0:e4:1e:
8d:15:f3:24:02:b1:b0:e0:37:bc:a0:b3:44:9a:6c:a8:f4:81:
ad:26:f9:23:d2:76:39:d6:8d:cb:56:ba:25:d2:45:b4:f6:8f:
64:dc:df:0e:13:33:be:a9:dd:8c:6e:07:88:fb:ba:a2:5b:db:
54:5f:a4:14:c1:19:c0:0e:f2:30:bc:58:92:ef:90:43:5f:39:
99:0f:d6:a6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATXxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTc1MzIzWhcNMjYwMjE5MTc1MzIzWjAYMRYw
FAYDVQQDEw02N2JmNTUxNy0xYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8oRhXBO4WwEX3dK1YM7ulX4X7FjHSHp3EUR8pbFyhMwC51sPBH5HZedK
J7wz5qq+Xmk7XDwX2JX9rdlyxH85kqCgFCUEwolwzCCLy8LwLZ0dGfuhVkW1hMg5
V0p/l+Ex58dqy6xGqUId5WgbrItR2G+V6qcoDWf4RqjAdssyeBJELtMXbUahe+LU
wm/95nIJF6zv9QJ4/z+YpiKJwyFaHJx9qP/dymte7RAUYnk738w1PT+39ylkbgK/
qakQiCT8znFAb5BdZ5Olab0O31B+DVZFoSb8yN9xjPs5flueowuCbgv+1QAosCnf
daw30hnUa3TM5ZCJsPXvF7wbb07ocwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDri
qSCvIaBk7bPs4bgjv29qCHfMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NEI3MjQ4MEY0NkExMUVGQkU0MDk5NkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALck3MA0GCSqGSIb3DQEBCwUA
A4IBAQAFMfatQ5B8y1m77GDhfO7k59eCYOuqTj70stQjed7Mr+0JXvEVBcEMJIIB
CjEi3Mwnk6BhpzVBlC0VTik06VyclNXZ/58K45hgqq4JgTzmhJNIeXgI2+B9eaz5
pdIFIoUXwL+bpMBI8N0oZsTXDAvwzKS6zBc5LG+4R0lMnXW5CxRE7Y1vyiC8JtWV
YA6wa1wDJRj2vCHoSHyPPEO6k5nHf2xYNejLDQG4TkgpZ8SLWpjQ5B6NFfMkArGw
4De8oLNEmmyo9IGtJvkj0nY51o3LVrol0kW09o9k3N8OEzO+qd2MbgeI+7qiW9tU
X6QUwRnADvIwvFiS75BDXzmZD9am
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:59 2025 by rpki-client