Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA04695CF35F11EF9C5C0B46762E951A.roa
File: BA04695CF35F11EF9C5C0B46762E951A.roa (raw, json)
Hash identifier: FPaPZzEiCxzAZK5QfBoJZOfPJicfBVX3FjqZE0g3ROA=
Subject key identifier: 8C:86:20:27:29:4C:A2:90:00:F2:8C:7D:FC:1C:34:C6:CB:EC:9B:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012E0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA04695CF35F11EF9C5C0B46762E951A.roa
Signing time: Tue 25 Feb 2025 10:03:14 +0000
ROA not before: Tue 25 Feb 2025 10:03:10 +0000
ROA not after: Wed 09 Apr 2025 10:03:10 +0000
asID: 63139
IP address blocks: 45.197.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77324 (0x12e0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 10:03:10 2025 GMT
Not After : Apr 9 10:03:10 2025 GMT
Subject: CN=67bd9562-49e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:20:70:ea:4b:d6:6b:32:08:03:87:90:28:
49:65:26:99:50:f6:cf:08:77:08:f5:00:3b:05:bf:
c2:af:16:d7:eb:42:21:20:74:66:6d:82:1a:7e:04:
29:fb:72:72:62:87:5b:10:5b:0d:b3:9b:18:aa:57:
c8:b5:df:dd:bb:01:6a:db:1d:17:9e:96:24:5a:95:
21:19:cd:f9:d5:57:ba:39:1c:92:36:46:37:46:5c:
ea:f1:03:03:9f:b8:ae:a0:7f:48:d9:6f:bf:64:db:
bb:33:f0:e9:58:67:de:31:a6:c8:c3:b3:f8:5a:85:
ae:b5:0b:19:60:32:e0:54:fa:b8:07:6a:16:1b:1b:
06:5c:72:6e:f8:55:3d:ad:dd:46:fe:4e:9a:b2:98:
dd:02:e3:e2:1e:40:99:4f:b9:69:27:c6:2f:1e:e1:
6d:39:16:0a:b3:6b:5a:30:a5:a5:75:e6:64:57:2d:
f4:c9:ac:c5:6d:79:ac:f2:dd:c2:13:84:9b:c3:ec:
ea:f2:61:53:23:d9:1a:22:f3:c4:3e:bd:16:e9:48:
e8:8a:e3:2a:60:07:36:53:e9:75:b5:b5:ec:fb:a9:
f9:4e:34:90:9d:fe:1b:74:17:40:1c:12:58:ee:4d:
15:38:86:fe:09:bf:ce:c5:c8:f9:ae:db:5a:41:86:
da:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:86:20:27:29:4C:A2:90:00:F2:8C:7D:FC:1C:34:C6:CB:EC:9B:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA04695CF35F11EF9C5C0B46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.68.0/23
Signature Algorithm: sha256WithRSAEncryption
95:60:79:16:a9:1f:76:ff:95:1b:6e:9d:50:22:dd:e2:bf:08:
12:84:be:b7:12:c4:3d:05:b3:88:29:5d:cc:3c:30:35:27:71:
6e:ea:47:8e:ac:3d:39:0e:03:f6:5a:53:0b:67:66:8e:c6:20:
16:87:08:02:5d:80:97:72:c2:89:11:fe:71:1a:7e:90:4e:56:
65:d4:b9:f0:da:0d:f4:d4:6d:16:6a:50:39:3b:f1:22:8e:e4:
ab:5c:c8:43:65:19:0d:bb:c7:73:86:38:1b:47:f0:cc:29:fe:
f8:79:ab:db:cc:16:86:cb:93:7a:be:f9:2d:46:48:b3:60:7b:
99:0f:7f:eb:cd:d4:9e:a2:97:61:0d:f0:e5:ae:bc:74:71:75:
e8:1d:b1:0f:4a:d9:aa:15:5d:f4:39:cb:59:ea:97:fc:9d:3f:
e3:a7:d2:44:9c:9f:b9:36:0d:c1:27:92:c2:cb:d9:54:bc:ea:
72:c4:33:c2:70:5b:b8:bf:33:e9:fc:b7:0a:36:6f:5d:cc:70:
6a:88:88:ae:0f:64:b7:b1:c4:5f:c4:87:d3:7b:a0:fd:07:ac:
7a:af:2a:f5:da:41:69:47:4f:62:41:6d:e2:06:5d:83:95:dc:
6c:80:77:52:94:e1:4b:21:6f:be:90:93:81:d4:fa:2f:27:6d:
fd:59:94:be
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS4MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MTAwMzEwWhcNMjUwNDA5MTAwMzEwWjAYMRYw
FAYDVQQDEw02N2JkOTU2Mi00OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuV0gcOpL1msyCAOHkChJZSaZUPbPCHcI9QA7Bb/CrxbX60IhIHRmbYIa
fgQp+3JyYodbEFsNs5sYqlfItd/duwFq2x0XnpYkWpUhGc351Ve6ORySNkY3Rlzq
8QMDn7iuoH9I2W+/ZNu7M/DpWGfeMabIw7P4WoWutQsZYDLgVPq4B2oWGxsGXHJu
+FU9rd1G/k6aspjdAuPiHkCZT7lpJ8YvHuFtORYKs2taMKWldeZkVy30yazFbXms
8t3CE4Sbw+zq8mFTI9kaIvPEPr0W6UjoiuMqYAc2U+l1tbXs+6n5TjSQnf4bdBdA
HBJY7k0VOIb+Cb/Oxcj5rttaQYbauQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIyG
ICcpTKKQAPKMffwcNMbL7JssMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQTA0Njk1Q0YzNUYxMUVGOUM1QzBCNDY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcVEMA0GCSqGSIb3DQEBCwUA
A4IBAQCVYHkWqR92/5Ubbp1QIt3ivwgShL63EsQ9BbOIKV3MPDA1J3Fu6keOrD05
DgP2WlMLZ2aOxiAWhwgCXYCXcsKJEf5xGn6QTlZl1Lnw2g301G0WalA5O/EijuSr
XMhDZRkNu8dzhjgbR/DMKf74eavbzBaGy5N6vvktRkizYHuZD3/rzdSeopdhDfDl
rrx0cXXoHbEPStmqFV30OctZ6pf8nT/jp9JEnJ+5Ng3BJ5LCy9lUvOpyxDPCcFu4
vzPp/LcKNm9dzHBqiIiuD2S3scRfxIfTe6D9B6x6ryr12kFpR09iQW3iBl2Dldxs
gHdSlOFLIW++kJOB1PovJ239WZS+
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:00 2025 by rpki-client