Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1657972F43211EFA79C4868762E951A.roa
File: E1657972F43211EFA79C4868762E951A.roa (raw, json)
Hash identifier: UmiHhlIhXFD1onik7U3mTEOgx8tWHHt7A1CqVCNQtLo=
Subject key identifier: 85:43:D6:45:F2:DB:DB:48:FB:50:28:4C:C3:D3:24:6A:47:52:9A:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1657972F43211EFA79C4868762E951A.roa
Signing time: Wed 26 Feb 2025 11:14:44 +0000
ROA not before: Wed 26 Feb 2025 11:14:40 +0000
ROA not after: Thu 19 Feb 2026 11:14:40 +0000
asID: 328608
IP address blocks: 45.205.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78252 (0x131ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:14:40 2025 GMT
Not After : Feb 19 11:14:40 2026 GMT
Subject: CN=67bef7a4-0766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:b3:51:54:6a:f8:c1:a1:0d:b8:58:e1:c0:
8d:2a:df:c1:fa:57:f0:bb:1f:df:b7:a1:b9:b6:7f:
58:42:f8:92:5d:77:40:9a:5e:00:01:71:01:ac:3a:
00:32:95:b8:8a:e3:34:d0:91:a9:08:6b:d7:d5:e9:
0d:67:fa:d4:e9:1f:4d:07:cb:2e:40:f3:10:1c:07:
a6:74:83:e2:09:c5:b1:d0:0b:30:dd:34:c2:5f:fa:
34:06:12:07:6c:31:dc:02:51:4a:f2:e5:48:cf:3a:
ac:a4:15:20:e8:32:28:68:fc:27:d0:23:4b:70:fe:
ef:12:a3:4e:78:d2:10:32:57:58:b1:51:96:fa:a3:
25:17:c6:6e:ff:a0:82:62:5c:39:b8:c1:99:11:b5:
fc:16:54:a9:70:db:31:83:20:2a:33:fb:e9:b5:b1:
1e:f0:0e:b7:32:92:aa:02:dc:b5:2b:98:d6:e5:32:
5d:fb:bd:18:d8:a0:16:99:78:ee:b6:ff:9d:f6:f4:
c4:ec:4c:ab:76:73:a6:d8:75:f5:cc:3c:d9:7d:e4:
41:e3:0a:63:7e:db:ed:54:46:61:1a:6a:20:da:f0:
78:72:81:34:e2:89:8a:6d:fa:74:c7:ea:1b:e2:92:
b6:51:63:42:47:05:73:35:e9:b8:f8:d3:ea:39:a1:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:43:D6:45:F2:DB:DB:48:FB:50:28:4C:C3:D3:24:6A:47:52:9A:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1657972F43211EFA79C4868762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d9:a6:f2:2a:0f:62:c4:0c:bf:cc:16:72:a9:2a:62:45:50:
39:24:71:67:d4:48:49:f0:c5:b3:42:dc:21:3d:3b:93:01:51:
b0:92:ff:bc:af:f6:a6:c4:f3:b2:bb:de:43:6b:13:86:f3:47:
c3:db:4f:82:52:2b:d9:a4:88:e6:82:2f:61:c9:dd:7b:ce:df:
98:3c:3a:37:bc:f1:cf:85:bd:ec:28:c4:b5:35:ce:51:c7:82:
a4:9e:bd:c2:e9:cb:93:b9:f9:b3:dd:50:bf:31:57:cf:87:71:
39:c5:3c:1b:0e:8d:69:7e:e4:3f:18:e9:83:8f:bd:ac:80:e8:
43:ad:0f:c9:25:9f:73:b4:3d:17:d0:29:c3:d1:f4:5b:83:a2:
a9:a3:04:5e:7a:2a:15:99:8a:f1:03:1d:bb:8f:80:19:c6:90:
e9:44:97:b2:9e:5c:82:20:7c:9a:96:19:d6:fb:38:4d:a3:ae:
3d:1e:6f:3b:4d:c7:ad:3b:83:0b:04:fd:20:59:54:b3:90:d7:
fd:ed:41:ef:5d:24:fa:57:88:d5:4f:c1:24:b0:b0:4b:bf:27:
52:5c:54:d7:02:40:5f:0b:06:17:28:2f:cb:ae:01:98:be:2d:
87:77:a6:83:68:83:88:f6:fb:ce:16:31:44:59:6b:cd:eb:13:
67:30:e4:3c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATGsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTExNDQwWhcNMjYwMjE5MTExNDQwWjAYMRYw
FAYDVQQDEw02N2JlZjdhNC0wNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqN2zUVRq+MGhDbhY4cCNKt/B+lfwux/ft6G5tn9YQviSXXdAml4AAXEB
rDoAMpW4iuM00JGpCGvX1ekNZ/rU6R9NB8suQPMQHAemdIPiCcWx0Asw3TTCX/o0
BhIHbDHcAlFK8uVIzzqspBUg6DIoaPwn0CNLcP7vEqNOeNIQMldYsVGW+qMlF8Zu
/6CCYlw5uMGZEbX8FlSpcNsxgyAqM/vptbEe8A63MpKqAty1K5jW5TJd+70Y2KAW
mXjutv+d9vTE7EyrdnOm2HX1zDzZfeRB4wpjftvtVEZhGmog2vB4coE04omKbfp0
x+ob4pK2UWNCRwVzNem4+NPqOaEtHQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIVD
1kXy29tI+1AoTMPTJGpHUpoXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMTY1Nzk3MkY0MzIxMUVGQTc5QzQ4Njg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc2LMA0GCSqGSIb3DQEBCwUA
A4IBAQCb2abyKg9ixAy/zBZyqSpiRVA5JHFn1EhJ8MWzQtwhPTuTAVGwkv+8r/am
xPOyu95DaxOG80fD20+CUivZpIjmgi9hyd17zt+YPDo3vPHPhb3sKMS1Nc5Rx4Kk
nr3C6cuTufmz3VC/MVfPh3E5xTwbDo1pfuQ/GOmDj72sgOhDrQ/JJZ9ztD0X0CnD
0fRbg6KpowReeioVmYrxAx27j4AZxpDpRJeynlyCIHyalhnW+zhNo649Hm87Tcet
O4MLBP0gWVSzkNf97UHvXST6V4jVT8EksLBLvydSXFTXAkBfCwYXKC/LrgGYvi2H
d6aDaIOI9vvOFjFEWWvN6xNnMOQ8
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:41 2025 by rpki-client