Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8A23BC8E92511EF80B7E583762E951A.roa
File: B8A23BC8E92511EF80B7E583762E951A.roa (raw, json)
Hash identifier: mx7oNFOt8M64f8Hw33Z0b2Ts319rkoy561JsqdcrsGw=
Subject key identifier: 66:D7:9E:46:9E:FE:1E:89:6C:94:6C:BC:03:18:45:74:B8:9D:7C:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012159
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8A23BC8E92511EF80B7E583762E951A.roa
Signing time: Wed 12 Feb 2025 09:42:49 +0000
ROA not before: Wed 12 Feb 2025 09:42:45 +0000
ROA not after: Wed 13 Aug 2025 09:42:45 +0000
asID: 57043
IP address blocks: 45.194.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74073 (0x12159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 12 09:42:45 2025 GMT
Not After : Aug 13 09:42:45 2025 GMT
Subject: CN=67ac6d19-2ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f1:4c:17:18:63:06:21:38:7d:c5:5e:ca:13:
02:bc:df:ec:36:f7:64:bb:28:1c:07:dc:9f:55:14:
9d:74:f1:fe:2e:2f:a1:93:97:a3:94:c0:84:f7:68:
b1:6f:08:71:e1:cc:5c:f6:50:77:e7:d5:0a:40:a2:
8e:f2:a1:8e:a0:7c:63:9b:a7:2d:10:04:0a:cb:32:
7d:18:e4:50:29:fe:27:fd:36:c1:f8:1a:d0:8d:49:
a1:83:10:6a:b1:77:59:02:9e:41:b2:74:9d:43:5b:
63:00:87:23:8a:27:a3:ca:f1:64:2d:af:87:42:3b:
d0:bd:8b:88:73:e1:61:bb:d0:5d:1d:0e:6b:b7:7b:
68:5e:4e:20:65:90:60:87:7c:46:1a:eb:9e:ae:ce:
7b:f8:52:88:7d:f0:6a:16:a9:29:67:0b:79:77:5e:
e7:b2:55:65:29:8a:c7:bb:57:58:61:9b:65:bd:91:
7a:fa:4b:dc:fe:1d:e6:58:6d:3d:aa:01:05:9f:81:
6a:e2:d0:27:93:b5:0d:da:d8:a5:07:d2:cd:99:ff:
ad:99:f2:36:39:c8:04:fd:39:7a:24:9f:c7:68:e5:
71:5b:91:07:b1:42:11:43:e4:08:ba:4f:1e:62:74:
95:9c:70:00:28:a7:f7:8a:84:ed:78:8b:29:2f:2e:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D7:9E:46:9E:FE:1E:89:6C:94:6C:BC:03:18:45:74:B8:9D:7C:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8A23BC8E92511EF80B7E583762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.45.0/24
Signature Algorithm: sha256WithRSAEncryption
81:09:e1:05:31:e0:7e:18:fa:ea:10:91:d3:e4:a5:e4:48:06:
9b:9a:c1:ff:20:00:cb:16:0a:0e:51:49:c7:ed:b5:90:ac:b1:
f9:b3:a8:8e:6b:7a:a4:7c:6a:27:09:f7:26:53:c0:70:60:35:
92:f2:22:49:70:fd:00:9d:8b:d8:4c:34:6d:0b:c1:fb:f7:33:
e0:5d:ba:52:03:d2:3a:f3:5f:8a:a9:cf:2c:39:52:37:2a:4a:
2f:d2:3c:15:06:00:02:82:98:b5:8c:9a:d9:d6:d0:bd:14:03:
fe:5d:6f:dc:04:1e:c3:fc:9e:6d:e0:f6:16:2c:69:1d:7d:67:
e5:d1:da:3e:74:a4:cc:da:82:05:69:4a:58:6f:0e:be:d2:f3:
c9:bb:c1:9e:de:7c:0c:7c:46:76:38:fb:98:66:37:3e:f4:6e:
da:b4:84:c8:84:ce:2a:0b:53:2b:0d:75:49:3a:fc:f5:40:fa:
b3:4d:4c:91:2f:31:34:e1:32:56:85:7f:d3:f5:6d:5e:57:99:
35:c6:19:9d:58:33:0d:ac:ba:95:18:53:56:ce:90:7f:a3:87:
e3:2e:01:5d:7f:d1:a5:cd:7f:01:3a:e6:5e:3f:fa:bd:65:67:
88:9c:50:80:1d:49:39:ad:1d:de:04:97:7f:f1:a8:00:26:70:
6b:fc:b8:be
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASFZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjEyMDk0MjQ1WhcNMjUwODEzMDk0MjQ1WjAYMRYw
FAYDVQQDEw02N2FjNmQxOS0yZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7fFMFxhjBiE4fcVeyhMCvN/sNvdkuygcB9yfVRSddPH+Li+hk5ejlMCE
92ixbwhx4cxc9lB359UKQKKO8qGOoHxjm6ctEAQKyzJ9GORQKf4n/TbB+BrQjUmh
gxBqsXdZAp5BsnSdQ1tjAIcjiiejyvFkLa+HQjvQvYuIc+Fhu9BdHQ5rt3toXk4g
ZZBgh3xGGuuers57+FKIffBqFqkpZwt5d17nslVlKYrHu1dYYZtlvZF6+kvc/h3m
WG09qgEFn4Fq4tAnk7UN2tilB9LNmf+tmfI2OcgE/Tl6JJ/HaOVxW5EHsUIRQ+QI
uk8eYnSVnHAAKKf3ioTteIspLy5FJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGbX
nkae/h6JbJRsvAMYRXS4nXyhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9COEEyM0JDOEU5MjUxMUVGODBCN0U1ODM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcItMA0GCSqGSIb3DQEBCwUA
A4IBAQCBCeEFMeB+GPrqEJHT5KXkSAabmsH/IADLFgoOUUnH7bWQrLH5s6iOa3qk
fGonCfcmU8BwYDWS8iJJcP0AnYvYTDRtC8H79zPgXbpSA9I681+Kqc8sOVI3Kkov
0jwVBgACgpi1jJrZ1tC9FAP+XW/cBB7D/J5t4PYWLGkdfWfl0do+dKTM2oIFaUpY
bw6+0vPJu8Ge3nwMfEZ2OPuYZjc+9G7atITIhM4qC1MrDXVJOvz1QPqzTUyRLzE0
4TJWhX/T9W1eV5k1xhmdWDMNrLqVGFNWzpB/o4fjLgFdf9GlzX8BOuZeP/q9ZWeI
nFCAHUk5rR3eBJd/8agAJnBr/Li+
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:12 2025 by rpki-client