Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A425D3A13D111F0B7F93B7C762E951A.roa
File: 9A425D3A13D111F0B7F93B7C762E951A.roa (raw, json)
Hash identifier: tph9zGTyZMqrZboY3Wh9Wit5et6ROJvI4S1nHCOZ/6U=
Subject key identifier: 73:19:26:05:E0:CD:D9:35:B0:50:6D:A0:67:89:DD:B5:EE:36:7B:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A9C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A425D3A13D111F0B7F93B7C762E951A.roa
Signing time: Mon 07 Apr 2025 16:59:01 +0000
ROA not before: Mon 07 Apr 2025 16:58:57 +0000
ROA not after: Mon 12 May 2025 16:58:57 +0000
asID: 51847
IP address blocks: 45.207.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 16 Apr 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84636 (0x14a9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 16:58:57 2025 GMT
Not After : May 12 16:58:57 2025 GMT
Subject: CN=67f40454-99d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9a:48:88:9a:7a:99:39:6e:00:1a:32:8c:c4:
b0:8e:04:54:13:5c:0d:d7:cc:49:6b:7d:eb:c4:00:
5b:44:1f:48:ad:65:ed:1d:74:e4:50:8e:ad:91:1f:
bf:79:08:ee:f7:18:c6:dd:76:ff:33:9d:48:3f:ac:
50:d4:64:f4:72:58:9b:cd:a2:d6:37:72:c8:88:88:
0d:27:b4:30:a7:d0:29:dd:91:e3:40:f5:af:38:6b:
46:24:70:91:77:eb:53:de:c8:bf:10:01:91:4c:5b:
09:ae:80:30:68:df:f2:fd:19:35:3a:be:9b:16:ff:
92:80:39:70:38:03:ba:0a:1d:a8:a6:66:ec:17:ea:
e8:8b:04:69:ac:12:cd:b8:17:40:e7:5f:a4:d6:9d:
8a:c5:62:bb:76:47:61:33:8f:13:db:44:84:c3:71:
0a:84:fa:ad:5b:8a:4d:3a:bd:b0:54:a5:a2:db:a6:
2f:9d:f3:da:3d:9e:3f:fa:35:ad:64:dd:24:f8:4a:
ed:47:f0:a1:c4:5f:e8:00:84:98:52:9c:ca:00:f8:
24:39:b7:0a:dd:af:30:b0:c8:ea:90:f8:56:7e:c7:
f7:70:97:e6:0c:f6:93:04:79:8c:ff:2a:81:8d:57:
b4:ab:98:d9:9f:c5:87:c8:01:8f:29:6d:f2:04:55:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:26:05:E0:CD:D9:35:B0:50:6D:A0:67:89:DD:B5:EE:36:7B:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A425D3A13D111F0B7F93B7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
78:db:e7:a1:5a:ba:ae:10:f3:ff:aa:0c:aa:0b:f3:5c:2e:f6:
9f:e8:81:5a:c0:b2:86:be:9c:0e:6d:9d:f4:cb:20:0a:f7:0e:
8f:f0:4d:28:a9:5a:7d:36:49:fd:46:20:16:a2:4c:3f:c3:3c:
2c:2f:54:16:80:3f:49:a1:59:3e:0c:a6:85:62:a0:97:7f:7b:
5f:40:56:37:0f:a5:f3:93:e2:5d:51:fe:ac:8b:fe:8c:27:d7:
1a:a9:a6:ad:1f:22:a5:5e:f2:b5:2b:da:dc:11:0b:b0:ab:45:
c3:4c:26:e7:3f:c2:90:dc:4e:c8:49:28:c2:39:dd:fd:47:1e:
8e:6d:75:fa:87:56:99:00:9c:6d:41:16:6d:65:76:b9:b7:c4:
70:09:77:ba:9c:14:9a:81:9e:e1:c1:f0:4d:06:19:d3:04:71:
48:b5:35:c5:5c:7e:7c:66:b0:e6:c7:40:7f:31:5f:1e:89:87:
4c:69:d1:11:75:34:4f:65:cb:50:c4:27:a5:ee:96:96:b6:91:
0c:ae:8a:82:21:5b:a8:5a:11:c3:3e:c2:e9:f6:f9:ec:67:eb:
28:47:c0:db:5d:84:ca:68:66:35:79:04:4c:24:d7:6b:54:9d:
35:ae:b6:08:88:98:44:30:d2:3c:53:d9:24:15:2f:16:50:5c:
3b:f0:47:a3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUqcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA3MTY1ODU3WhcNMjUwNTEyMTY1ODU3WjAYMRYw
FAYDVQQDEw02N2Y0MDQ1NC05OWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA55pIiJp6mTluABoyjMSwjgRUE1wN18xJa33rxABbRB9IrWXtHXTkUI6t
kR+/eQju9xjG3Xb/M51IP6xQ1GT0clibzaLWN3LIiIgNJ7Qwp9Ap3ZHjQPWvOGtG
JHCRd+tT3si/EAGRTFsJroAwaN/y/Rk1Or6bFv+SgDlwOAO6Ch2opmbsF+roiwRp
rBLNuBdA51+k1p2KxWK7dkdhM48T20SEw3EKhPqtW4pNOr2wVKWi26YvnfPaPZ4/
+jWtZN0k+ErtR/ChxF/oAISYUpzKAPgkObcK3a8wsMjqkPhWfsf3cJfmDPaTBHmM
/yqBjVe0q5jZn8WHyAGPKW3yBFUhQQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHMZ
JgXgzdk1sFBtoGeJ3bXuNnu8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QTQyNUQzQTEzRDExMUYwQjdGOTNCN0M3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLc/YMA0GCSqGSIb3DQEBCwUA
A4IBAQB42+ehWrquEPP/qgyqC/NcLvaf6IFawLKGvpwObZ30yyAK9w6P8E0oqVp9
Nkn9RiAWokw/wzwsL1QWgD9JoVk+DKaFYqCXf3tfQFY3D6Xzk+JdUf6si/6MJ9ca
qaatHyKlXvK1K9rcEQuwq0XDTCbnP8KQ3E7ISSjCOd39Rx6ObXX6h1aZAJxtQRZt
ZXa5t8RwCXe6nBSagZ7hwfBNBhnTBHFItTXFXH58ZrDmx0B/MV8eiYdMadERdTRP
ZctQxCel7paWtpEMroqCIVuoWhHDPsLp9vnsZ+soR8DbXYTKaGY1eQRMJNdrVJ01
rrYIiJhEMNI8U9kkFS8WUFw78Eej
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:13:00 2025 by rpki-client