Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B027EC0403DD11F0AD817F49762E951A.roa
File: B027EC0403DD11F0AD817F49762E951A.roa (raw, json)
Hash identifier: XBFP0/AlnnyFPEfVCnTgedRODoc6XYcmX+fclqPNa6Y=
Subject key identifier: DD:9A:BB:F7:9B:65:E6:0E:13:CF:F2:3E:BF:87:D6:54:A0:73:94:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014691
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B027EC0403DD11F0AD817F49762E951A.roa
Signing time: Tue 18 Mar 2025 09:45:13 +0000
ROA not before: Tue 18 Mar 2025 09:45:09 +0000
ROA not after: Wed 23 Apr 2025 09:45:09 +0000
asID: 395793
IP address blocks: 45.192.15.0/24 maxlen: 24
45.192.16.0/24 maxlen: 24
45.194.12.0/23 maxlen: 24
45.198.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83601 (0x14691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 09:45:09 2025 GMT
Not After : Apr 23 09:45:09 2025 GMT
Subject: CN=67d940a9-8ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:af:2c:42:ed:c7:f3:d9:4b:48:e5:6d:d3:
6a:df:0e:6d:5c:c8:70:50:dd:c2:85:30:e8:9d:a1:
65:f0:1a:3b:a1:3d:a9:be:ea:8b:b1:51:09:29:d3:
4f:6a:9f:fe:24:08:0d:fc:2f:6f:12:2b:5b:e1:40:
a0:0e:ff:a6:ba:72:60:14:87:7c:ca:29:cc:66:74:
84:23:15:a0:55:b1:f1:d5:ef:fd:82:1b:47:14:13:
2e:7c:75:86:81:10:92:2a:90:99:03:48:be:f3:40:
5d:a6:6f:f6:c8:79:b8:7d:dd:ce:e8:87:67:b8:66:
3a:ba:1a:17:b3:d5:c5:12:8a:fa:5f:17:b0:31:f7:
5c:13:86:92:96:7b:01:12:aa:78:dc:cb:eb:f2:8f:
4e:b1:3d:2b:04:a2:db:be:68:c4:9c:96:ec:06:35:
0e:bc:91:fe:ad:ee:f7:b5:db:64:a1:58:0b:92:6e:
b1:42:39:e2:51:31:ab:52:e1:fd:13:8a:49:f7:1f:
96:87:0f:d7:18:2d:04:85:55:8c:c2:7d:97:77:cc:
ab:75:ce:f4:e2:3e:55:98:76:89:fb:b9:de:a7:90:
ef:af:fd:a7:4d:cf:8c:ca:4b:cb:32:44:42:51:60:
95:32:a6:ec:cb:25:99:fb:80:71:f3:53:9d:60:ce:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:BB:F7:9B:65:E6:0E:13:CF:F2:3E:BF:87:D6:54:A0:73:94:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B027EC0403DD11F0AD817F49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.15.0-45.192.16.255
45.194.12.0/23
45.198.227.0/24
Signature Algorithm: sha256WithRSAEncryption
14:4c:d8:85:06:8e:07:a2:e8:7a:13:a1:9c:ef:20:3f:f7:16:
6e:98:3c:64:cf:3c:15:76:7a:45:df:eb:3c:93:29:5b:1b:09:
42:e9:03:73:86:57:cd:07:6c:38:89:66:e1:51:5b:9b:b6:4d:
a1:ad:6c:26:9b:59:9e:42:ef:38:2b:29:81:0f:ca:76:19:ab:
29:01:99:f8:f8:67:f0:1b:a8:cd:f8:e1:5c:98:96:41:9f:d9:
b1:49:e1:bb:16:72:b9:2c:24:61:63:6c:78:73:bf:ac:5b:5d:
5f:1d:7c:3b:a2:f3:47:51:f5:9d:32:69:b2:ea:d0:fd:ba:2a:
67:05:c7:8f:9e:fe:e7:89:c5:4d:4c:a7:61:b8:31:e9:14:b2:
99:ab:85:55:27:64:0b:84:3a:06:53:0f:67:63:48:8a:ee:14:
6a:c3:6c:bf:b5:2b:34:00:71:b5:0c:46:18:0b:3a:ed:5a:2c:
60:e5:39:a9:a2:e7:cd:f9:e5:72:ef:5c:14:b0:3b:a4:73:ca:
03:e8:4d:f0:ae:05:f7:df:a7:68:e3:6f:c2:b1:58:57:a6:fc:
a5:07:0d:98:a8:de:53:9c:24:f3:98:b6:84:83:8c:24:df:54:
8d:16:72:2a:69:02:bf:3c:43:1a:ca:b5:89:05:b7:81:b3:bb:
08:81:cd:3d
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAUaRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE4MDk0NTA5WhcNMjUwNDIzMDk0NTA5WjAYMRYw
FAYDVQQDEw02N2Q5NDBhOS04YWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArmyvLELtx/PZS0jlbdNq3w5tXMhwUN3ChTDonaFl8Bo7oT2pvuqLsVEJ
KdNPap/+JAgN/C9vEitb4UCgDv+munJgFId8yinMZnSEIxWgVbHx1e/9ghtHFBMu
fHWGgRCSKpCZA0i+80Bdpm/2yHm4fd3O6IdnuGY6uhoXs9XFEor6XxewMfdcE4aS
lnsBEqp43Mvr8o9OsT0rBKLbvmjEnJbsBjUOvJH+re73tdtkoVgLkm6xQjniUTGr
UuH9E4pJ9x+Whw/XGC0EhVWMwn2Xd8yrdc704j5VmHaJ+7nep5Dvr/2nTc+MykvL
MkRCUWCVMqbsyyWZ+4Bx81OdYM4kEwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFN2a
u/ebZeYOE8/yPr+H1lSgc5SgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMDI3RUMwNDAzREQxMUYwQUQ4MTdGNDk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtwA8DBAAtwBADBAEtwgwD
BAAtxuMwDQYJKoZIhvcNAQELBQADggEBABRM2IUGjgei6HoToZzvID/3Fm6YPGTP
PBV2ekXf6zyTKVsbCULpA3OGV80HbDiJZuFRW5u2TaGtbCabWZ5C7zgrKYEPynYZ
qykBmfj4Z/AbqM344VyYlkGf2bFJ4bsWcrksJGFjbHhzv6xbXV8dfDui80dR9Z0y
abLq0P26KmcFx4+e/ueJxU1Mp2G4MekUspmrhVUnZAuEOgZTD2djSIruFGrDbL+1
KzQAcbUMRhgLOu1aLGDlOami58355XLvXBSwO6RzygPoTfCuBfffp2jjb8KxWFem
/KUHDZio3lOcJPOYtoSDjCTfVI0WcippAr88QxrKtYkFt4GzuwiBzT0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:56 2025 by rpki-client