Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E40CBA0E55B11EF870B3157762E951A.roa
File: 9E40CBA0E55B11EF870B3157762E951A.roa (raw, json)
Hash identifier: gZ2aOX5jNNp6/9/VwQQpBOjFlMatbxJ8EQJlC/BymZk=
Subject key identifier: D9:B9:11:E4:79:72:21:10:35:CA:97:CE:D3:35:4C:C7:EF:E3:69:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011DDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E40CBA0E55B11EF870B3157762E951A.roa
Signing time: Fri 07 Feb 2025 13:58:33 +0000
ROA not before: Fri 07 Feb 2025 13:58:30 +0000
ROA not after: Fri 21 Jan 2028 13:58:30 +0000
asID: 17561
IP address blocks: 45.196.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73178 (0x11dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 13:58:30 2025 GMT
Not After : Jan 21 13:58:30 2028 GMT
Subject: CN=67a61189-9c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:94:96:b6:b5:a4:40:0f:1b:ee:be:3c:d2:
d3:41:31:79:72:95:e3:e9:f5:9d:4a:98:81:33:d7:
cd:a5:7d:c8:4f:a3:2e:f6:6b:d8:52:db:99:b7:9f:
5c:17:93:5f:6f:e6:97:72:f8:f9:a4:46:42:53:a3:
e0:43:a6:89:bc:ba:51:dd:5e:f7:8f:88:ec:15:7e:
a5:72:c2:a9:9f:cf:22:28:15:16:cd:58:6d:34:48:
d6:b3:9a:5e:27:7c:2d:3b:1f:97:ee:a0:0e:47:1d:
c6:39:13:94:8f:e0:93:f7:d3:b2:11:e6:62:d0:00:
e4:fa:dc:a6:b4:08:32:f0:be:d3:1d:45:ae:c5:ca:
66:1d:c4:cd:25:dd:68:04:a4:17:59:12:73:e5:07:
c0:ee:e1:b2:5a:a8:77:57:fc:e8:37:75:ef:d7:65:
0d:5a:1d:a5:e9:12:e4:b0:8f:ec:16:3a:18:b6:58:
be:84:af:84:f1:fc:db:70:f4:24:02:6a:4e:cd:1a:
da:fc:cd:4e:d4:e7:d0:80:76:3a:fb:42:10:6e:65:
00:8e:d4:36:1f:9e:03:2e:83:f6:0f:e1:40:25:b1:
50:6c:0b:42:92:76:3c:57:b3:b2:93:e5:7c:29:13:
0b:42:2d:04:be:e5:7f:b5:87:f2:20:2e:67:ed:bd:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B9:11:E4:79:72:21:10:35:CA:97:CE:D3:35:4C:C7:EF:E3:69:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E40CBA0E55B11EF870B3157762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.77.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:16:b4:18:de:14:d3:1d:f7:70:24:84:6a:c8:92:e1:c5:a1:
d7:07:39:5d:ea:2f:7c:6b:c8:93:ce:3f:29:39:46:bb:e2:1c:
6f:fb:ba:95:05:09:af:16:fe:e1:69:31:c5:ef:19:c8:2f:59:
f0:61:77:92:ce:ff:00:44:c0:4b:34:9a:92:b1:ac:ca:83:05:
56:ba:df:aa:3e:a2:a0:e3:cc:3c:68:72:88:d2:ac:db:0b:67:
b8:ac:dc:dd:36:ac:8d:b6:e5:95:21:81:9f:c8:07:37:4e:f3:
f3:ad:26:08:c4:be:88:77:b6:13:eb:98:25:d8:0f:a4:40:4b:
93:dc:11:27:d0:62:23:ee:92:59:7d:6a:7e:d1:9d:b4:e9:08:
25:ba:36:58:9f:d2:d2:23:4c:50:81:77:4a:7b:47:45:84:f7:
39:10:35:c1:24:27:2d:dc:fb:17:f6:d5:5c:ee:4c:69:95:82:
48:ed:75:63:48:b3:d7:94:17:80:b8:af:d2:dd:67:a2:a0:14:
23:94:16:27:4c:ed:2e:93:cf:41:a1:5a:dc:6e:4b:30:05:07:
fa:1d:a9:73:2d:21:c3:f2:07:9b:24:c4:81:29:e8:96:a7:f8:
a6:ce:6a:76:02:c6:fe:32:5c:7c:c4:80:f3:d2:4d:0a:1f:55:
f8:bd:42:1e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAR3aMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjA3MTM1ODMwWhcNMjgwMTIxMTM1ODMwWjAYMRYw
FAYDVQQDEw02N2E2MTE4OS05YzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzhiUlra1pEAPG+6+PNLTQTF5cpXj6fWdSpiBM9fNpX3IT6Mu9mvYUtuZ
t59cF5Nfb+aXcvj5pEZCU6PgQ6aJvLpR3V73j4jsFX6lcsKpn88iKBUWzVhtNEjW
s5peJ3wtOx+X7qAORx3GOROUj+CT99OyEeZi0ADk+tymtAgy8L7THUWuxcpmHcTN
Jd1oBKQXWRJz5QfA7uGyWqh3V/zoN3Xv12UNWh2l6RLksI/sFjoYtli+hK+E8fzb
cPQkAmpOzRra/M1O1OfQgHY6+0IQbmUAjtQ2H54DLoP2D+FAJbFQbAtCknY8V7Oy
k+V8KRMLQi0EvuV/tYfyIC5n7b1DwQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNm5
EeR5ciEQNcqXztM1TMfv42nQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RTQwQ0JBMEU1NUIxMUVGODcwQjMxNTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcRNMA0GCSqGSIb3DQEBCwUA
A4IBAQBLFrQY3hTTHfdwJIRqyJLhxaHXBzld6i98a8iTzj8pOUa74hxv+7qVBQmv
Fv7haTHF7xnIL1nwYXeSzv8ARMBLNJqSsazKgwVWut+qPqKg48w8aHKI0qzbC2e4
rNzdNqyNtuWVIYGfyAc3TvPzrSYIxL6Id7YT65gl2A+kQEuT3BEn0GIj7pJZfWp+
0Z206QglujZYn9LSI0xQgXdKe0dFhPc5EDXBJCct3PsX9tVc7kxplYJI7XVjSLPX
lBeAuK/S3WeioBQjlBYnTO0uk89BoVrcbkswBQf6HalzLSHD8gebJMSBKeiWp/im
zmp2Asb+Mlx8xIDz0k0KH1X4vUIe
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:50 2025 by rpki-client