Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD42D100F47D11EFB5F57275762E951A.roa
File: DD42D100F47D11EFB5F57275762E951A.roa (raw, json)
Hash identifier: tFhvhXKQgIWBnM0SYLhWUomvX4Kc4e97Tg0f46bg1Lw=
Subject key identifier: 53:86:3D:E6:6B:99:4A:E9:A5:A6:77:B3:81:AD:83:43:34:5A:D7:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013767
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD42D100F47D11EFB5F57275762E951A.roa
Signing time: Wed 26 Feb 2025 20:11:29 +0000
ROA not before: Wed 26 Feb 2025 20:11:25 +0000
ROA not after: Thu 19 Feb 2026 20:11:25 +0000
asID: 984
IP address blocks: 45.201.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79719 (0x13767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 20:11:25 2025 GMT
Not After : Feb 19 20:11:25 2026 GMT
Subject: CN=67bf7571-f99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6e:53:da:20:de:9f:ca:dd:93:b2:e4:7c:55:
35:f1:8d:d3:c0:b6:3b:62:99:74:10:c5:b7:09:d4:
b5:d3:6b:49:8e:a2:25:5b:a1:6c:59:75:31:84:01:
d3:2d:7c:37:e2:6c:48:0a:01:a2:c7:12:2d:a8:f1:
24:af:e6:49:2a:7a:1f:59:ba:69:d7:5c:fc:c0:9e:
f3:f0:8b:1a:84:c7:16:73:c8:49:48:e6:99:98:76:
f1:d4:9e:f8:16:8b:01:d2:de:a6:af:6f:71:2e:a3:
82:eb:3a:cf:ca:04:5f:3d:79:74:d2:b0:9f:33:02:
ec:37:e1:99:7e:4a:bb:2f:57:b1:18:51:b5:78:9f:
a2:7e:1f:f4:ff:80:3d:8b:17:a8:3f:30:39:cf:6f:
86:a6:18:21:31:e8:bc:b5:e5:8a:65:2d:89:0b:f5:
40:95:6f:29:6b:3c:7c:6c:60:8d:fa:dd:8e:5d:5a:
bd:7a:11:b1:fa:9e:be:4f:de:08:83:c6:79:72:36:
75:79:cb:b0:a8:93:6f:4f:7c:d1:d8:a5:65:ef:5d:
0c:bc:80:2b:7e:28:19:67:2e:ee:b6:35:ab:a7:b7:
32:20:c4:40:3c:ea:ed:cc:59:a3:be:79:ec:5f:18:
20:4d:01:b3:21:d8:56:ee:9a:4c:62:4a:9e:c9:78:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:86:3D:E6:6B:99:4A:E9:A5:A6:77:B3:81:AD:83:43:34:5A:D7:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD42D100F47D11EFB5F57275762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:43:d1:66:ab:f3:c6:37:a9:e8:57:88:aa:9b:d6:45:3c:cb:
df:47:20:59:57:e4:64:6a:77:fa:e9:a2:b6:0f:7f:ca:63:1c:
16:ef:78:38:5a:9a:4f:51:39:ca:19:f4:5e:00:be:07:9b:2f:
8f:f3:ba:c3:5e:73:12:6b:b3:4b:c3:16:55:db:f4:0d:17:a7:
5c:be:55:67:36:67:a0:15:26:e3:6d:d2:d7:dc:88:6f:3e:e6:
e3:3d:25:05:8a:d9:ce:a2:20:33:35:e5:b2:f8:d7:fb:5f:16:
3e:2d:1d:21:f0:2f:8f:ba:20:32:7d:67:fe:fb:f5:34:06:d8:
e2:6d:f1:ac:0f:23:ca:f5:40:38:1d:27:73:d3:0a:9a:2c:bb:
96:b1:47:64:4d:33:03:34:b1:54:2e:65:e0:5b:b4:6d:75:f2:
c4:fd:a9:74:86:74:b9:19:13:91:d0:14:fe:60:68:83:98:78:
a7:77:3b:21:78:73:87:f2:99:70:9e:09:f8:d5:56:e7:aa:b0:
2d:54:b1:69:ef:f6:e9:43:e3:aa:12:58:ea:3d:7d:d7:80:a4:
b0:3b:da:5e:50:88:fc:e2:5b:86:b9:37:0f:4f:db:33:36:c3:
cb:cc:a1:2d:3f:b8:b7:2c:b5:01:06:5b:1d:2c:19:fb:e1:2a:
65:e7:2a:ed
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATdnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MjAxMTI1WhcNMjYwMjE5MjAxMTI1WjAYMRYw
FAYDVQQDEw02N2JmNzU3MS1mOTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7m5T2iDen8rdk7LkfFU18Y3TwLY7Ypl0EMW3CdS102tJjqIlW6FsWXUx
hAHTLXw34mxICgGixxItqPEkr+ZJKnofWbpp11z8wJ7z8IsahMcWc8hJSOaZmHbx
1J74FosB0t6mr29xLqOC6zrPygRfPXl00rCfMwLsN+GZfkq7L1exGFG1eJ+ifh/0
/4A9ixeoPzA5z2+GphghMei8teWKZS2JC/VAlW8pazx8bGCN+t2OXVq9ehGx+p6+
T94Ig8Z5cjZ1ecuwqJNvT3zR2KVl710MvIArfigZZy7utjWrp7cyIMRAPOrtzFmj
vnnsXxggTQGzIdhW7ppMYkqeyXgZiwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFOG
PeZrmUrppaZ3s4Gtg0M0WtfeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERDQyRDEwMEY0N0QxMUVGQjVGNTcyNzU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALclxMA0GCSqGSIb3DQEBCwUA
A4IBAQCwQ9Fmq/PGN6noV4iqm9ZFPMvfRyBZV+Rkanf66aK2D3/KYxwW73g4WppP
UTnKGfReAL4Hmy+P87rDXnMSa7NLwxZV2/QNF6dcvlVnNmegFSbjbdLX3IhvPubj
PSUFitnOoiAzNeWy+Nf7XxY+LR0h8C+PuiAyfWf++/U0BtjibfGsDyPK9UA4HSdz
0wqaLLuWsUdkTTMDNLFULmXgW7RtdfLE/al0hnS5GROR0BT+YGiDmHindzsheHOH
8plwngn41VbnqrAtVLFp7/bpQ+OqEljqPX3XgKSwO9peUIj84luGuTcPT9szNsPL
zKEtP7i3LLUBBlsdLBn74Spl5yrt
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:58 2025 by rpki-client