Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B800F7F0E54B11EFBFA8BC6E762E951A.roa
File: B800F7F0E54B11EFBFA8BC6E762E951A.roa (raw, json)
Hash identifier: e27ectVoh6Dn//roYelIiAH/L+Ao+LQfFrxTBk9fNGg=
Subject key identifier: 93:07:BD:F2:93:A5:73:98:57:72:5C:37:54:92:23:E7:A6:11:FA:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B800F7F0E54B11EFBFA8BC6E762E951A.roa
Signing time: Fri 07 Feb 2025 12:04:45 +0000
ROA not before: Fri 07 Feb 2025 12:04:41 +0000
ROA not after: Fri 21 Jan 2028 12:04:41 +0000
asID: 17561
IP address blocks: 45.192.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73045 (0x11d55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 12:04:41 2025 GMT
Not After : Jan 21 12:04:41 2028 GMT
Subject: CN=67a5f6dc-db8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:0c:17:fe:2a:3b:2f:36:3e:4c:25:c5:da:
ce:a2:97:19:d9:9f:01:f9:00:b2:5a:43:47:cd:0d:
68:fe:44:db:0a:36:1b:2b:bf:e5:f6:b5:ae:c7:83:
b2:32:ad:be:2a:28:7b:99:f4:a5:b9:77:01:88:16:
a8:91:82:98:a3:78:f8:db:6b:73:c2:e7:15:d4:cf:
52:b3:a9:ed:a3:cb:e3:bb:b1:18:03:bc:92:44:34:
36:b5:9b:88:fd:25:58:0f:f2:9d:ed:b1:62:55:a0:
85:7a:e0:ea:54:bb:e1:76:b2:e9:0f:f2:13:b3:bb:
b6:9d:97:95:98:95:4d:77:0f:a4:1e:1e:07:64:13:
0c:93:3a:33:38:2b:7b:b1:75:24:7b:92:dd:2c:5c:
ca:ba:ab:09:7d:4c:0f:15:a5:bd:fc:95:f2:7e:07:
bb:d0:82:4b:b8:c0:bf:4a:d7:0a:44:5b:49:f1:48:
1b:3e:5b:57:2c:ff:70:35:3d:ef:0d:9f:87:98:b4:
01:82:a2:18:61:07:18:71:7d:84:ca:1d:5c:6e:d0:
f2:f6:25:c0:84:ae:cc:2b:9a:bd:2c:dd:9a:2b:fe:
65:5b:aa:6d:54:53:c3:41:d1:8f:39:62:7d:2e:59:
b7:df:ff:cc:a0:a0:21:9e:78:0a:e8:e2:64:4d:31:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:07:BD:F2:93:A5:73:98:57:72:5C:37:54:92:23:E7:A6:11:FA:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B800F7F0E54B11EFBFA8BC6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.13.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e2:8f:55:d5:74:08:84:2a:3d:6e:ec:1b:ae:1c:03:1a:35:
4a:7d:15:ca:4c:0b:b7:a1:9e:39:8a:8b:db:0a:10:f1:01:c7:
e6:a3:c5:c3:7c:b6:30:8c:46:1f:74:81:d6:ec:b2:ab:94:a4:
f1:44:c0:c6:ef:9f:c1:b1:c7:11:6c:e1:66:82:f5:ac:b7:83:
ab:aa:7a:f1:02:aa:4c:f0:9a:66:5d:de:41:04:37:a0:83:25:
93:2a:14:ce:09:b1:0f:fc:ce:33:ea:9d:84:7a:94:62:07:c9:
b6:8a:73:e6:19:18:f4:14:66:70:d4:0e:69:56:a1:db:a8:7e:
d6:a3:4d:da:52:6e:04:3c:61:94:49:db:7f:a9:ae:36:72:68:
ef:5c:af:0c:49:ea:1e:a1:eb:ff:98:28:8e:bd:2f:dd:59:fa:
d6:60:16:bb:69:c2:61:47:06:de:dd:6e:98:f6:b9:45:59:35:
33:60:40:d7:fe:b2:d4:af:1d:97:59:a9:d6:db:e3:2c:17:40:
68:5f:61:84:f8:55:fa:b2:58:52:a3:83:86:71:1f:4d:33:a5:
41:9e:25:a8:4c:0c:90:20:4e:ce:50:6d:80:79:09:d8:81:07:
83:b4:4c:d9:b3:34:cf:8f:51:bf:9f:c3:6d:04:e3:4b:15:7c:
71:1b:9f:26
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAR1VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjA3MTIwNDQxWhcNMjgwMTIxMTIwNDQxWjAYMRYw
FAYDVQQDEw02N2E1ZjZkYy1kYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4KAMF/4qOy82PkwlxdrOopcZ2Z8B+QCyWkNHzQ1o/kTbCjYbK7/l9rWu
x4OyMq2+Kih7mfSluXcBiBaokYKYo3j422tzwucV1M9Ss6nto8vju7EYA7ySRDQ2
tZuI/SVYD/Kd7bFiVaCFeuDqVLvhdrLpD/ITs7u2nZeVmJVNdw+kHh4HZBMMkzoz
OCt7sXUke5LdLFzKuqsJfUwPFaW9/JXyfge70IJLuMC/StcKRFtJ8UgbPltXLP9w
NT3vDZ+HmLQBgqIYYQcYcX2Eyh1cbtDy9iXAhK7MK5q9LN2aK/5lW6ptVFPDQdGP
OWJ9Llm33//MoKAhnngK6OJkTTEgFQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJMH
vfKTpXOYV3JcN1SSI+emEfrbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CODAwRjdGMEU1NEIxMUVGQkZBOEJDNkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcANMA0GCSqGSIb3DQEBCwUA
A4IBAQBB4o9V1XQIhCo9buwbrhwDGjVKfRXKTAu3oZ45iovbChDxAcfmo8XDfLYw
jEYfdIHW7LKrlKTxRMDG75/BsccRbOFmgvWst4OrqnrxAqpM8JpmXd5BBDeggyWT
KhTOCbEP/M4z6p2EepRiB8m2inPmGRj0FGZw1A5pVqHbqH7Wo03aUm4EPGGUSdt/
qa42cmjvXK8MSeoeoev/mCiOvS/dWfrWYBa7acJhRwbe3W6Y9rlFWTUzYEDX/rLU
rx2XWanW2+MsF0BoX2GE+FX6slhSo4OGcR9NM6VBniWoTAyQIE7OUG2AeQnYgQeD
tEzZszTPj1G/n8NtBONLFXxxG58m
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:48 2025 by rpki-client