Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B251FEC2F83711EF884C176E762E951A.roa
File: B251FEC2F83711EF884C176E762E951A.roa (raw, json)
Hash identifier: DTXQWNIwvH/01za+7AWxIia8SX0OMT5mjMiCGacMmIg=
Subject key identifier: 5E:AA:67:AB:FE:8A:BC:7C:8F:20:A8:AF:E6:31:65:F2:CD:2A:4D:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0141B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B251FEC2F83711EF884C176E762E951A.roa
Signing time: Mon 03 Mar 2025 13:59:17 +0000
ROA not before: Mon 03 Mar 2025 13:59:13 +0000
ROA not after: Sun 06 Apr 2025 13:59:13 +0000
asID: 20473
IP address blocks: 45.195.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 13:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82356 (0x141b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 13:59:13 2025 GMT
Not After : Apr 6 13:59:13 2025 GMT
Subject: CN=67c5b5b5-97f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c4:65:0d:88:63:0a:01:e5:e1:02:7f:2d:f9:
87:50:59:23:d9:b6:6d:55:da:e8:0c:1a:74:09:4d:
4a:60:e6:a5:26:4d:ed:10:e6:fa:80:4c:65:49:ba:
a3:f9:e4:2f:fe:11:71:e4:fc:b9:4d:9a:55:91:34:
e6:9e:bc:58:3f:33:01:02:fe:42:e9:97:45:73:17:
36:69:bb:8a:6a:ce:c2:4b:27:8c:82:23:55:12:dd:
e9:2c:2c:33:f8:fe:f0:e0:75:a5:79:36:a7:08:86:
05:69:bc:aa:95:55:dd:32:9b:20:e7:0d:a4:31:37:
1f:7f:b0:ae:08:f2:34:17:f7:60:3f:1f:ba:00:50:
13:6d:34:02:23:b2:35:e4:67:1a:a8:93:d9:ef:34:
f3:0e:f2:d7:b7:f6:94:ce:83:4e:73:f1:1b:f5:ec:
e7:27:86:ef:e4:72:69:ca:36:a3:0e:60:e6:14:b9:
a0:49:3f:71:f0:01:6e:10:ee:41:70:7a:83:d7:33:
fc:2b:28:a7:19:32:ca:e2:7a:b5:00:b6:16:0d:08:
13:bf:d3:ee:12:e7:21:50:a5:c9:f1:50:9b:cb:02:
8f:30:84:df:f2:ac:38:ea:5f:8e:e0:24:fb:73:f8:
21:90:f5:1f:6d:b2:27:87:ee:10:a5:ec:8a:42:72:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AA:67:AB:FE:8A:BC:7C:8F:20:A8:AF:E6:31:65:F2:CD:2A:4D:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B251FEC2F83711EF884C176E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:06:9f:75:68:9f:0d:39:01:df:f4:bd:43:8b:9c:20:84:aa:
4c:1e:13:10:9d:84:bf:d2:50:49:7d:27:65:0f:6e:66:a8:e5:
1b:50:d1:2f:a3:5e:4d:3f:21:10:2b:20:30:77:a8:89:fa:6b:
c4:76:46:f3:0d:3c:2e:ab:3c:af:c9:60:7b:4c:13:de:e2:83:
04:99:78:d3:59:eb:a3:10:ee:73:48:74:b0:8b:f5:8c:85:9e:
82:19:a7:b5:13:62:39:00:c5:71:4e:6a:88:ee:57:63:50:48:
db:da:64:34:f8:fd:0f:be:d6:21:4b:af:6e:e4:dd:4b:a8:02:
30:19:dd:d4:ee:6f:d9:b0:3d:6e:f7:00:8f:e1:d4:b1:37:a8:
f1:c6:3d:dd:4f:d1:db:2e:08:38:1a:9c:da:07:c2:c1:fb:46:
e0:ae:1b:54:d0:52:cc:29:cf:fb:1c:80:d1:eb:3f:ce:08:8c:
a2:95:94:fd:9c:23:f3:7e:67:fa:08:36:5c:2f:1e:0d:95:68:
4f:d4:d5:45:6d:1f:e1:47:a5:9a:82:92:a7:6d:58:65:1f:81:
7a:76:68:f7:fe:ff:cb:d1:76:ae:b0:ef:dd:cb:1e:fd:ee:24:
2a:3c:1b:8d:de:1e:70:c7:86:52:22:2a:6b:a2:2b:42:f1:40:
a8:9d:e4:58
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUG0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzAzMTM1OTEzWhcNMjUwNDA2MTM1OTEzWjAYMRYw
FAYDVQQDEw02N2M1YjViNS05N2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+sRlDYhjCgHl4QJ/LfmHUFkj2bZtVdroDBp0CU1KYOalJk3tEOb6gExl
Sbqj+eQv/hFx5Py5TZpVkTTmnrxYPzMBAv5C6ZdFcxc2abuKas7CSyeMgiNVEt3p
LCwz+P7w4HWleTanCIYFabyqlVXdMpsg5w2kMTcff7CuCPI0F/dgPx+6AFATbTQC
I7I15GcaqJPZ7zTzDvLXt/aUzoNOc/Eb9eznJ4bv5HJpyjajDmDmFLmgST9x8AFu
EO5BcHqD1zP8KyinGTLK4nq1ALYWDQgTv9PuEuchUKXJ8VCbywKPMITf8qw46l+O
4CT7c/ghkPUfbbInh+4QpeyKQnLGkQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF6q
Z6v+irx8jyCor+YxZfLNKk17MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMjUxRkVDMkY4MzcxMUVGODg0QzE3NkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOJMA0GCSqGSIb3DQEBCwUA
A4IBAQCgBp91aJ8NOQHf9L1Di5wghKpMHhMQnYS/0lBJfSdlD25mqOUbUNEvo15N
PyEQKyAwd6iJ+mvEdkbzDTwuqzyvyWB7TBPe4oMEmXjTWeujEO5zSHSwi/WMhZ6C
Gae1E2I5AMVxTmqI7ldjUEjb2mQ0+P0PvtYhS69u5N1LqAIwGd3U7m/ZsD1u9wCP
4dSxN6jxxj3dT9HbLgg4GpzaB8LB+0bgrhtU0FLMKc/7HIDR6z/OCIyilZT9nCPz
fmf6CDZcLx4NlWhP1NVFbR/hR6WagpKnbVhlH4F6dmj3/v/L0XausO/dyx797iQq
PBuN3h5wx4ZSIiproitC8UConeRY
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:59 2025 by rpki-client