Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A43E2C06F8B511EF8837444D762E951A.roa
File: A43E2C06F8B511EF8837444D762E951A.roa (raw, json)
Hash identifier: u5GgHf6jiAG+5BGe/nXOsmgyXlhqArCa0khxuFN80Qg=
Subject key identifier: 93:4F:5F:6D:1C:EA:35:BC:66:D4:AF:82:53:EF:36:88:62:4F:A0:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01428F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A43E2C06F8B511EF8837444D762E951A.roa
Signing time: Tue 04 Mar 2025 05:00:50 +0000
ROA not before: Tue 04 Mar 2025 05:00:45 +0000
ROA not after: Wed 04 Mar 2026 05:00:45 +0000
asID: 328608
IP address blocks: 45.192.251.0/24 maxlen: 24
45.194.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82575 (0x1428f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 05:00:45 2025 GMT
Not After : Mar 4 05:00:45 2026 GMT
Subject: CN=67c68902-e99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:6e:e6:5d:60:7f:93:6f:12:63:19:c2:58:
8a:ba:20:61:4b:7b:d6:6f:38:e0:34:86:38:c4:9a:
d5:5a:26:d2:9d:bd:a6:45:42:8f:9d:be:04:70:3b:
94:dc:a4:1c:22:41:e7:50:3f:a6:d7:f0:ac:18:62:
c2:fc:cd:51:8b:82:44:c7:f9:21:91:54:18:9c:71:
20:17:4d:b7:ae:d2:c0:43:49:8b:5d:1b:21:86:7a:
a1:19:ea:91:9e:6a:99:d6:56:18:88:63:8e:9f:a9:
bb:1d:b4:f6:f0:38:21:0f:65:bc:eb:d8:d7:3b:9e:
f5:8a:5c:6b:0c:d2:15:2b:87:ec:ae:14:60:e5:83:
16:81:10:aa:c7:b8:df:e4:24:38:97:a7:9c:75:8a:
7d:66:d0:dd:a3:20:2f:52:15:a2:5b:75:f1:7b:f6:
19:0e:46:94:77:02:fd:3d:c7:df:69:d0:e3:d1:07:
ba:b8:a2:af:1c:16:e4:d4:f3:6f:c8:64:9c:7b:41:
0b:e6:17:91:70:c4:37:fd:08:99:aa:51:9d:4d:8b:
95:ac:8d:77:29:73:82:ee:b5:c2:f6:a9:2c:ed:b2:
fd:ac:74:82:78:12:7f:5f:22:8a:40:2d:76:8d:41:
80:b2:db:1e:d7:cc:3a:d4:b8:24:d5:22:a3:d2:1a:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4F:5F:6D:1C:EA:35:BC:66:D4:AF:82:53:EF:36:88:62:4F:A0:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A43E2C06F8B511EF8837444D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.251.0/24
45.194.83.0/24
Signature Algorithm: sha256WithRSAEncryption
90:62:13:ee:db:97:69:ba:b8:0d:16:b1:24:28:0a:58:70:9f:
a1:cc:24:19:27:04:70:0c:69:b0:9d:be:94:1a:78:21:38:ef:
ea:3b:3f:d1:32:5d:0c:a6:a8:bd:34:2d:8b:16:a2:45:37:49:
83:cb:7b:5c:1e:19:c7:cc:87:68:60:92:ce:20:48:76:44:e6:
38:c6:4d:87:60:60:17:04:b0:ca:31:3a:9f:ab:a4:c8:e2:dc:
75:75:29:c4:3f:a8:e2:5c:15:33:8c:13:48:27:94:09:f9:8c:
f0:6e:e1:c3:5f:98:fb:99:4f:ec:59:f8:2a:f2:e0:0a:ba:80:
e9:06:09:5d:f8:3d:2a:c8:9c:46:31:fe:a1:f4:f4:1e:c5:90:
c6:50:5b:8e:18:d2:92:af:34:5e:93:10:b4:f9:6a:bb:54:89:
f7:47:b4:39:e6:36:6c:24:48:ee:af:62:8b:53:c2:85:9c:11:
ab:d6:99:dc:9f:2d:06:be:5c:34:87:00:0d:c6:12:09:92:fc:
50:ab:b8:3c:01:08:a1:c9:d0:3b:0e:9f:96:d3:b5:89:d9:d8:
4d:74:e4:ba:aa:4e:9b:da:eb:4c:25:df:be:d9:61:97:2f:6a:
6d:f6:59:4b:16:9c:84:7f:de:d8:1b:45:80:1b:74:34:46:96:
7a:e5:a4:21
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUKPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA0MDUwMDQ1WhcNMjYwMzA0MDUwMDQ1WjAYMRYw
FAYDVQQDEw02N2M2ODkwMi1lOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1j1u5l1gf5NvEmMZwliKuiBhS3vWbzjgNIY4xJrVWibSnb2mRUKPnb4E
cDuU3KQcIkHnUD+m1/CsGGLC/M1Ri4JEx/khkVQYnHEgF023rtLAQ0mLXRshhnqh
GeqRnmqZ1lYYiGOOn6m7HbT28DghD2W869jXO571ilxrDNIVK4fsrhRg5YMWgRCq
x7jf5CQ4l6ecdYp9ZtDdoyAvUhWiW3Xxe/YZDkaUdwL9PcffadDj0Qe6uKKvHBbk
1PNvyGSce0EL5heRcMQ3/QiZqlGdTYuVrI13KXOC7rXC9qks7bL9rHSCeBJ/XyKK
QC12jUGAstse18w61Lgk1SKj0hpxbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNP
X20c6jW8ZtSvglPvNohiT6CCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNDNFMkMwNkY4QjUxMUVGODgzNzQ0NEQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcD7AwQALcJTMA0GCSqGSIb3
DQEBCwUAA4IBAQCQYhPu25dpurgNFrEkKApYcJ+hzCQZJwRwDGmwnb6UGnghOO/q
Oz/RMl0Mpqi9NC2LFqJFN0mDy3tcHhnHzIdoYJLOIEh2ROY4xk2HYGAXBLDKMTqf
q6TI4tx1dSnEP6jiXBUzjBNIJ5QJ+YzwbuHDX5j7mU/sWfgq8uAKuoDpBgld+D0q
yJxGMf6h9PQexZDGUFuOGNKSrzRekxC0+Wq7VIn3R7Q55jZsJEjur2KLU8KFnBGr
1pncny0Gvlw0hwANxhIJkvxQq7g8AQihydA7Dp+W07WJ2dhNdOS6qk6b2utMJd++
2WGXL2pt9llLFpyEf97YG0WAG3Q0RpZ65aQh
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:10 2025 by rpki-client