Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1D2E03EFE5411EFA21648B6762E951A.roa
File: A1D2E03EFE5411EFA21648B6762E951A.roa (raw, json)
Hash identifier: Vzc4/Ulf1Edlkqa7sm4kgjbq0nm7m716vfildhA+XLM=
Subject key identifier: 34:CA:EA:B9:2D:32:3D:1D:78:C4:D8:C7:4E:74:B5:22:F2:79:E6:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1D2E03EFE5411EFA21648B6762E951A.roa
Signing time: Tue 11 Mar 2025 08:41:32 +0000
ROA not before: Tue 11 Mar 2025 08:41:27 +0000
ROA not after: Wed 16 Apr 2025 08:41:27 +0000
asID: 174
IP address blocks: 45.197.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83173 (0x144e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 08:41:27 2025 GMT
Not After : Apr 16 08:41:27 2025 GMT
Subject: CN=67cff73c-b8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:95:c2:c7:45:0a:70:20:ef:ad:fc:1a:4d:
f3:96:43:77:1e:99:c9:37:47:a4:33:4a:e9:62:c1:
00:c1:5c:1c:84:35:b9:41:72:f8:cd:fc:92:e5:18:
9e:4b:26:ca:16:41:2c:1a:ce:2d:bf:e4:bc:9d:bb:
c8:38:21:86:81:0e:f7:76:f6:e1:1d:ca:1c:8a:5e:
f5:17:cc:47:2d:9d:a2:59:10:37:7d:8f:cc:2e:b1:
c7:45:aa:c7:ea:db:78:59:f7:5a:f4:7e:16:91:35:
43:ab:cd:67:41:89:eb:2f:c6:5d:33:fa:bd:35:0b:
ae:89:b6:7d:f6:1a:c5:8c:60:59:0a:c5:3a:ac:d3:
71:af:69:1c:d6:56:5f:bf:93:bd:ca:39:8a:3d:71:
3b:2d:0f:5b:37:1e:97:d0:fd:f1:dd:75:e8:58:e8:
de:94:0e:45:62:94:b4:d9:11:76:69:a0:c2:cb:c2:
8b:1e:d8:c1:f3:8a:e0:ff:4a:a0:e7:0b:b3:d8:70:
0c:f8:b1:67:94:a2:35:91:35:fa:f6:37:0f:5a:ee:
48:4c:78:07:13:2f:cf:6c:bb:e8:89:c5:a3:66:b1:
cd:00:07:20:08:58:52:ff:81:1d:68:5f:9d:46:df:
3d:eb:f4:8d:a1:5c:61:cd:47:86:9f:47:4c:0e:20:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CA:EA:B9:2D:32:3D:1D:78:C4:D8:C7:4E:74:B5:22:F2:79:E6:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1D2E03EFE5411EFA21648B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.6.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:34:2a:56:bc:f2:22:29:db:bf:89:c6:ce:3a:af:6a:59:40:
fb:f5:de:7d:65:31:6c:5a:6d:43:91:99:1a:8b:d5:00:5c:37:
d8:4e:16:e0:05:1d:8e:ad:5e:80:e0:af:51:97:42:6c:a4:11:
81:5c:d8:c7:90:0a:2c:3d:d4:2b:53:32:30:5b:8b:b0:b8:ec:
5d:1d:55:0e:5d:a5:a5:bb:10:b2:dc:61:d5:87:6e:08:a1:eb:
ec:bc:aa:4f:ad:a9:70:17:5e:8b:64:05:7c:b8:11:8b:3b:a3:
e4:62:fc:1e:41:af:74:bc:ca:d9:b3:49:36:bf:f6:de:75:a9:
39:8f:10:48:9b:60:ae:7e:81:d9:7d:a7:e5:4c:1c:ce:ed:99:
d5:28:4c:d2:aa:e6:e9:5f:14:3c:11:e8:d7:23:66:4b:41:5e:
4e:0a:1d:bb:e9:b0:9a:ea:65:c0:22:e1:9f:7c:52:db:a2:1d:
c7:ea:3e:dd:2b:be:ba:4e:f0:ef:3f:c0:0b:5e:7d:ab:ed:e3:
84:b2:9d:88:e0:a5:fa:82:37:8e:e1:8d:1e:35:83:03:78:39:
3e:5f:89:d6:20:d0:ab:8e:1f:89:91:3a:49:e5:d9:22:53:58:
ed:37:ae:1a:b8:02:f5:b5:f3:8d:48:0a:93:18:07:dc:70:2d:
01:d3:21:93
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUTlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzExMDg0MTI3WhcNMjUwNDE2MDg0MTI3WjAYMRYw
FAYDVQQDEw02N2NmZjczYy1iOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzoKVwsdFCnAg7638Gk3zlkN3HpnJN0ekM0rpYsEAwVwchDW5QXL4zfyS
5RieSybKFkEsGs4tv+S8nbvIOCGGgQ73dvbhHcocil71F8xHLZ2iWRA3fY/MLrHH
RarH6tt4Wfda9H4WkTVDq81nQYnrL8ZdM/q9NQuuibZ99hrFjGBZCsU6rNNxr2kc
1lZfv5O9yjmKPXE7LQ9bNx6X0P3x3XXoWOjelA5FYpS02RF2aaDCy8KLHtjB84rg
/0qg5wuz2HAM+LFnlKI1kTX69jcPWu5ITHgHEy/PbLvoicWjZrHNAAcgCFhS/4Ed
aF+dRt896/SNoVxhzUeGn0dMDiASKwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDTK
6rktMj0deMTYx050tSLyeeZuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMUQyRTAzRUZFNTQxMUVGQTIxNjQ4QjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcUGMA0GCSqGSIb3DQEBCwUA
A4IBAQBKNCpWvPIiKdu/icbOOq9qWUD79d59ZTFsWm1DkZkai9UAXDfYThbgBR2O
rV6A4K9Rl0JspBGBXNjHkAosPdQrUzIwW4uwuOxdHVUOXaWluxCy3GHVh24Ioevs
vKpPralwF16LZAV8uBGLO6PkYvweQa90vMrZs0k2v/bedak5jxBIm2CufoHZfafl
TBzO7ZnVKEzSqubpXxQ8EejXI2ZLQV5OCh276bCa6mXAIuGffFLboh3H6j7dK766
TvDvP8ALXn2r7eOEsp2I4KX6gjeO4Y0eNYMDeDk+X4nWINCrjh+JkTpJ5dkiU1jt
N64auAL1tfONSAqTGAfccC0B0yGT
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:23 2025 by rpki-client