Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8736B2404B211F0B2A8DC77762E951A.roa
File: B8736B2404B211F0B2A8DC77762E951A.roa (raw, json)
Hash identifier: 20+5vF3+x4eu+BWhy1pcoleJWs/vcNZ3l1J/jsoa7cE=
Subject key identifier: 39:39:B3:E0:37:85:F4:B9:F8:34:59:6E:4E:56:D2:8E:18:3F:42:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8736B2404B211F0B2A8DC77762E951A.roa
Signing time: Wed 19 Mar 2025 11:10:09 +0000
ROA not before: Wed 19 Mar 2025 11:10:05 +0000
ROA not after: Sat 26 Apr 2025 11:10:05 +0000
asID: 7029
IP address blocks: 45.194.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83670 (0x146d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 19 11:10:05 2025 GMT
Not After : Apr 26 11:10:05 2025 GMT
Subject: CN=67daa611-16bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:e6:be:c5:0a:b3:58:82:cd:ff:33:48:4c:
bc:b4:fd:97:29:ae:40:52:dd:49:5a:1e:35:06:2b:
1f:70:f3:d0:5f:88:3f:7c:62:80:ec:a4:3d:10:45:
14:18:ee:a6:d5:28:52:85:9e:a3:5b:40:a5:cd:10:
68:a1:29:d6:b2:92:73:0f:f5:91:a7:97:30:3f:3c:
a6:95:c8:e9:17:3d:10:a2:fc:59:0d:aa:0c:93:dd:
f0:1e:15:27:dd:f4:1f:76:af:1f:ed:4f:6a:16:ca:
09:2d:b0:59:cd:e8:a6:73:78:d3:be:00:6a:cd:7b:
3f:40:7d:2c:1a:46:4d:fd:28:31:c6:a2:d4:de:25:
3e:bb:f8:c8:b1:36:21:48:35:21:94:0a:1a:26:24:
6e:bf:ca:93:11:7e:1d:05:06:4d:2b:5d:e5:2f:95:
3f:6f:05:46:61:31:ed:93:e9:00:56:9d:16:05:f3:
7e:36:b3:f4:a1:cf:3e:b8:ab:a6:5a:6c:19:9f:cb:
2d:35:43:e2:04:c0:0e:28:f8:e0:56:58:10:7b:34:
06:78:8b:b7:46:5e:17:56:88:72:7a:c5:88:ba:c0:
2d:cb:1c:ae:d9:1f:69:a0:3d:10:e9:f1:8a:76:c1:
a1:82:2e:2a:76:2b:0c:4d:3f:bf:0e:d3:6e:fc:78:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:39:B3:E0:37:85:F4:B9:F8:34:59:6E:4E:56:D2:8E:18:3F:42:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8736B2404B211F0B2A8DC77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.40.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d4:13:4a:f8:f3:54:fc:81:46:1b:56:75:4f:00:0a:dd:d2:
96:18:d4:77:09:bf:44:08:8e:a0:bf:92:51:ce:e0:af:8e:40:
f6:3b:38:4c:ef:c4:54:dd:d6:eb:d9:82:0a:d9:3b:ae:8e:aa:
87:91:2e:06:eb:41:bb:24:65:84:44:41:46:e8:02:e8:ed:98:
53:1c:06:d5:16:3f:b3:bf:5e:66:21:32:81:14:04:53:12:8a:
b5:e1:13:2b:4c:9c:3b:73:6e:9c:29:44:c1:ef:02:a1:99:48:
94:75:af:b8:0f:ec:02:f2:b4:f5:3f:4e:28:5d:18:dc:7b:90:
03:b6:46:77:ee:d2:56:ff:75:7f:77:da:90:3a:d9:cc:6b:9a:
1f:d0:cd:ed:7b:16:3b:41:fa:b9:a9:1d:f8:fc:71:01:31:fa:
85:13:d1:42:81:a1:cc:b7:96:bf:46:a7:cb:bc:b0:34:12:45:
e2:ce:1e:3e:d0:8c:60:7c:7c:8f:d5:b9:15:d1:3e:be:46:ee:
80:51:c6:98:7a:dc:77:05:06:75:78:0c:11:40:ac:9c:1c:66:
5c:29:18:1d:17:e6:83:3e:a8:82:3e:46:1a:18:96:2a:22:62:
37:94:e6:3b:06:3b:66:cc:a4:f6:a8:2d:04:d4:1f:bb:8d:13:
44:7c:4d:32
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUbWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE5MTExMDA1WhcNMjUwNDI2MTExMDA1WjAYMRYw
FAYDVQQDEw02N2RhYTYxMS0xNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAquzmvsUKs1iCzf8zSEy8tP2XKa5AUt1JWh41BisfcPPQX4g/fGKA7KQ9
EEUUGO6m1ShShZ6jW0ClzRBooSnWspJzD/WRp5cwPzymlcjpFz0QovxZDaoMk93w
HhUn3fQfdq8f7U9qFsoJLbBZzeimc3jTvgBqzXs/QH0sGkZN/SgxxqLU3iU+u/jI
sTYhSDUhlAoaJiRuv8qTEX4dBQZNK13lL5U/bwVGYTHtk+kAVp0WBfN+NrP0oc8+
uKumWmwZn8stNUPiBMAOKPjgVlgQezQGeIu3Rl4XVohyesWIusAtyxyu2R9poD0Q
6fGKdsGhgi4qdisMTT+/DtNu/HhyhQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDk5
s+A3hfS5+DRZbk5W0o4YP0LAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CODczNkIyNDA0QjIxMUYwQjJBOERDNzc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIoMA0GCSqGSIb3DQEBCwUA
A4IBAQCB1BNK+PNU/IFGG1Z1TwAK3dKWGNR3Cb9ECI6gv5JRzuCvjkD2OzhM78RU
3dbr2YIK2TuujqqHkS4G60G7JGWEREFG6ALo7ZhTHAbVFj+zv15mITKBFARTEoq1
4RMrTJw7c26cKUTB7wKhmUiUda+4D+wC8rT1P04oXRjce5ADtkZ37tJW/3V/d9qQ
OtnMa5of0M3texY7Qfq5qR34/HEBMfqFE9FCgaHMt5a/RqfLvLA0EkXizh4+0Ixg
fHyP1bkV0T6+Ru6AUcaYetx3BQZ1eAwRQKycHGZcKRgdF+aDPqiCPkYaGJYqImI3
lOY7BjtmzKT2qC0E1B+7jRNEfE0y
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:37 2025 by rpki-client