Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B51990C0017E11F087EC6190762E951A.roa
File: B51990C0017E11F087EC6190762E951A.roa (raw, json)
Hash identifier: dYiqms0re98RcN5SmKtWRzisEN9czuJz1abiRXJSI+Y=
Subject key identifier: 48:5D:D5:41:B2:85:AF:37:98:89:EF:66:13:0D:AA:59:47:EB:3C:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014632
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B51990C0017E11F087EC6190762E951A.roa
Signing time: Sat 15 Mar 2025 09:20:16 +0000
ROA not before: Sat 15 Mar 2025 09:20:13 +0000
ROA not after: Mon 21 Apr 2025 09:20:13 +0000
asID: 2914
IP address blocks: 45.192.21.0/24 maxlen: 24
45.192.22.0/24 maxlen: 24
45.196.203.0/24 maxlen: 24
45.196.204.0/24 maxlen: 24
45.196.205.0/24 maxlen: 24
45.196.229.0/24 maxlen: 24
45.196.230.0/24 maxlen: 24
45.196.231.0/24 maxlen: 24
45.196.232.0/24 maxlen: 24
45.197.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83506 (0x14632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 15 09:20:13 2025 GMT
Not After : Apr 21 09:20:13 2025 GMT
Subject: CN=67d54650-d45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:51:1e:fa:cb:21:82:8f:62:de:90:6c:f2:
a4:97:03:33:ae:03:f4:bf:9c:c1:b8:9c:69:c9:67:
ae:60:4b:eb:12:2c:4f:d7:af:97:fc:c1:30:fa:88:
0a:15:c5:49:82:d5:86:5b:2c:63:d6:1f:9f:70:f6:
c3:9a:19:79:40:ce:63:b1:06:5b:1b:d7:90:a0:85:
fc:d3:34:ec:dd:7b:c9:26:bb:99:d0:13:95:bf:1f:
b9:2f:85:ff:ed:50:6e:74:1a:a0:c3:99:ae:63:5c:
7c:1a:65:a1:2f:7a:69:34:02:a9:07:9a:e3:7e:a8:
ec:b5:40:97:82:e8:3f:1c:bf:c4:8b:ea:5c:ad:a8:
ce:2d:29:db:96:87:db:01:a5:bd:9c:5c:f5:35:05:
bc:52:70:62:07:bb:d5:f3:1d:94:ae:e3:1f:ae:ed:
d5:8c:ec:d5:85:48:4a:b4:ab:80:da:14:cf:fa:f2:
89:fd:54:a9:81:d6:8a:5d:2f:a3:0e:e4:b5:cb:ab:
56:94:1f:7f:0d:ee:a9:82:3f:80:91:c7:7b:8c:01:
27:81:3d:2d:ba:5e:77:9f:b4:c5:e6:44:2c:c2:49:
1f:00:a8:ee:a2:fa:00:a6:54:e5:e9:87:31:d3:a5:
1b:76:5e:ea:69:0d:64:39:55:50:43:c0:20:cb:c2:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5D:D5:41:B2:85:AF:37:98:89:EF:66:13:0D:AA:59:47:EB:3C:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B51990C0017E11F087EC6190762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.21.0-45.192.22.255
45.196.203.0-45.196.205.255
45.196.229.0-45.196.232.255
45.197.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f4:43:24:88:30:60:42:ec:52:8e:34:fc:96:d6:7e:12:80:
44:b9:80:e1:08:aa:9e:e6:99:a0:d9:94:4f:ec:68:e7:42:a4:
14:43:24:ff:cf:2b:96:04:d2:79:93:7b:a6:6a:db:32:15:ff:
c8:9f:15:d5:96:3e:fe:dd:48:d3:b6:52:1f:d2:55:ac:d8:23:
83:fc:01:a3:13:bd:05:63:7a:2b:85:34:6f:0d:ae:3f:4a:9a:
6c:b6:2d:0c:5a:ca:ae:e8:c0:02:1d:a2:28:4f:50:5e:b4:d3:
73:10:d8:47:38:06:36:a0:06:ac:c4:c2:be:42:e2:f0:da:5f:
3c:6a:71:ba:ac:9f:f7:e1:35:1c:8d:fb:3a:9f:53:92:7e:7d:
47:d5:0b:7e:ff:99:95:8b:9d:9f:14:06:1b:9e:ce:2f:4a:f7:
45:2c:87:8a:12:8a:d0:69:fe:86:52:91:c2:f2:64:23:1a:e3:
c5:cb:95:ad:84:3b:58:1c:ce:7d:e6:d2:bb:5e:bd:3e:f3:c0:
04:56:87:00:98:d0:d9:56:6a:78:f5:65:17:ba:7b:fe:d9:b3:
da:ad:73:a9:9d:a6:f0:91:bd:32:80:1a:92:00:ba:14:4d:6e:
43:3a:80:44:76:15:ca:8b:18:13:32:e0:5a:25:36:e7:2b:b5:
4c:79:65:e9
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIDAUYyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE1MDkyMDEzWhcNMjUwNDIxMDkyMDEzWjAYMRYw
FAYDVQQDEw02N2Q1NDY1MC1kNDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAscRRHvrLIYKPYt6QbPKklwMzrgP0v5zBuJxpyWeuYEvrEixP16+X/MEw
+ogKFcVJgtWGWyxj1h+fcPbDmhl5QM5jsQZbG9eQoIX80zTs3XvJJruZ0BOVvx+5
L4X/7VBudBqgw5muY1x8GmWhL3ppNAKpB5rjfqjstUCXgug/HL/Ei+pcrajOLSnb
lofbAaW9nFz1NQW8UnBiB7vV8x2UruMfru3VjOzVhUhKtKuA2hTP+vKJ/VSpgdaK
XS+jDuS1y6tWlB9/De6pgj+Akcd7jAEngT0tul53n7TF5kQswkkfAKjuovoAplTl
6Ycx06Ubdl7qaQ1kOVVQQ8Agy8ICeQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFEhd
1UGyha83mInvZhMNqllH6zzJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNTE5OTBDMDAxN0UxMUYwODdFQzYxOTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAAtwBUDBAAtwBYwDAMEAC3E
ywMEAS3EzDAMAwQALcTlAwQALcToAwQALcWPMA0GCSqGSIb3DQEBCwUAA4IBAQAf
9EMkiDBgQuxSjjT8ltZ+EoBEuYDhCKqe5pmg2ZRP7GjnQqQUQyT/zyuWBNJ5k3um
atsyFf/InxXVlj7+3UjTtlIf0lWs2COD/AGjE70FY3orhTRvDa4/Sppsti0MWsqu
6MACHaIoT1BetNNzENhHOAY2oAasxMK+QuLw2l88anG6rJ/34TUcjfs6n1OSfn1H
1Qt+/5mVi52fFAYbns4vSvdFLIeKEorQaf6GUpHC8mQjGuPFy5WthDtYHM595tK7
Xr0+88AEVocAmNDZVmp49WUXunv+2bParXOpnabwkb0ygBqSALoUTW5DOoBEdhXK
ixgTMuBaJTbnK7VMeWXp
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:52 2025 by rpki-client