Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDBAEFD2FB2511EFA56B2F46762E951A.roa
File: EDBAEFD2FB2511EFA56B2F46762E951A.roa (raw, json)
Hash identifier: LZ09e233DWhk3vYtUfQbEAWnLd/yX0Zu+0G+TtvIbLg=
Subject key identifier: 15:F7:E1:D0:F6:A7:85:86:2E:D2:55:37:28:66:11:57:73:79:CD:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDBAEFD2FB2511EFA56B2F46762E951A.roa
Signing time: Fri 07 Mar 2025 07:29:39 +0000
ROA not before: Fri 07 Mar 2025 07:29:35 +0000
ROA not after: Thu 10 Apr 2025 07:29:35 +0000
asID: 271916
IP address blocks: 45.194.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82886 (0x143c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 07:29:35 2025 GMT
Not After : Apr 10 07:29:35 2025 GMT
Subject: CN=67caa063-af80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:1f:ed:d6:fb:fc:fc:ed:26:d2:36:8d:ec:
68:11:93:ad:fb:4c:c2:7b:6b:8c:0f:f1:07:45:2b:
60:7a:f2:4b:a8:31:b9:b6:a0:05:f8:7b:c6:85:b4:
da:7d:95:38:d9:44:ad:25:d3:c4:fd:82:6d:66:f0:
5d:2a:b3:2c:d5:5e:28:54:8d:12:1d:fc:cb:6f:af:
bb:8a:1c:eb:19:94:a5:ad:bc:6a:2b:35:15:07:dd:
61:d9:b8:98:d6:ed:95:71:f4:a4:83:90:33:7d:5c:
97:d6:f1:4f:bc:e7:40:f6:b5:d6:1b:d2:2f:21:3c:
c1:5e:10:f5:d6:60:9e:d4:1e:f0:cf:33:d3:05:02:
87:40:52:33:91:01:8b:bb:49:f2:93:1f:9b:ee:b5:
4d:8d:a0:d1:61:16:93:12:5c:d2:83:17:93:83:d3:
b2:d5:ec:16:d0:a4:5d:22:f7:b4:2d:a7:54:75:25:
46:61:9e:4d:9a:f3:59:72:7f:f0:95:f4:23:14:9f:
24:55:a6:b8:76:65:84:ea:6f:9c:1a:d5:cf:2b:5c:
77:02:40:2c:38:ce:d1:d5:2e:a4:42:14:17:b2:3d:
8d:1f:b8:1e:f7:f9:2c:27:54:77:79:72:e4:29:9b:
fc:4f:5c:33:7e:e2:ee:10:2f:3f:85:92:dc:89:98:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F7:E1:D0:F6:A7:85:86:2E:D2:55:37:28:66:11:57:73:79:CD:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDBAEFD2FB2511EFA56B2F46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
87:8f:ac:f3:36:01:12:85:55:12:f8:f3:62:36:88:09:98:f1:
cf:70:0d:55:a5:dc:aa:72:fd:9a:26:52:c6:5a:29:99:1f:60:
56:34:07:05:cf:a5:dc:73:01:34:be:b6:57:56:e6:0d:0b:4b:
83:3c:9d:09:80:a0:dd:58:7a:84:ff:1f:82:92:b9:80:23:11:
ee:44:8e:4f:20:a8:4f:4e:01:f0:c1:48:7e:85:18:44:bd:51:
67:e9:46:7b:22:ff:f2:a4:8b:98:97:40:06:4e:6a:b5:e0:72:
e5:c1:0c:ed:d1:f4:fb:51:96:33:55:99:8b:63:d1:1d:c7:a6:
47:cd:66:27:69:85:59:39:ad:85:5c:f0:3a:9b:f1:52:0a:57:
2f:7c:db:e6:4f:42:1f:bc:88:1d:60:28:40:9c:9b:e4:a0:c8:
e7:54:fe:cd:52:5c:5f:63:19:78:29:84:cb:49:cf:84:98:c4:
77:b1:27:60:ea:49:e2:87:d9:d1:80:af:98:56:3e:25:d7:ec:
25:b4:59:1a:de:76:da:b2:e3:9b:6c:e4:03:9e:1a:14:bb:a6:
da:70:96:ae:7d:e3:d1:71:19:7c:85:4d:c1:7b:c7:c6:cc:6d:
9d:31:0b:97:90:4d:b3:9f:b9:64:26:1c:08:44:34:75:82:b6:
fa:9f:3f:1f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUPGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA3MDcyOTM1WhcNMjUwNDEwMDcyOTM1WjAYMRYw
FAYDVQQDEw02N2NhYTA2My1hZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAobUf7db7/PztJtI2jexoEZOt+0zCe2uMD/EHRStgevJLqDG5tqAF+HvG
hbTafZU42UStJdPE/YJtZvBdKrMs1V4oVI0SHfzLb6+7ihzrGZSlrbxqKzUVB91h
2biY1u2VcfSkg5AzfVyX1vFPvOdA9rXWG9IvITzBXhD11mCe1B7wzzPTBQKHQFIz
kQGLu0nykx+b7rVNjaDRYRaTElzSgxeTg9Oy1ewW0KRdIve0LadUdSVGYZ5NmvNZ
cn/wlfQjFJ8kVaa4dmWE6m+cGtXPK1x3AkAsOM7R1S6kQhQXsj2NH7ge9/ksJ1R3
eXLkKZv8T1wzfuLuEC8/hZLciZhMqwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBX3
4dD2p4WGLtJVNyhmEVdzec2lMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FREJBRUZEMkZCMjUxMUVGQTU2QjJGNDY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcIwMA0GCSqGSIb3DQEBCwUA
A4IBAQCHj6zzNgEShVUS+PNiNogJmPHPcA1Vpdyqcv2aJlLGWimZH2BWNAcFz6Xc
cwE0vrZXVuYNC0uDPJ0JgKDdWHqE/x+CkrmAIxHuRI5PIKhPTgHwwUh+hRhEvVFn
6UZ7Iv/ypIuYl0AGTmq14HLlwQzt0fT7UZYzVZmLY9Edx6ZHzWYnaYVZOa2FXPA6
m/FSClcvfNvmT0IfvIgdYChAnJvkoMjnVP7NUlxfYxl4KYTLSc+EmMR3sSdg6kni
h9nRgK+YVj4l1+wltFka3nbasuObbOQDnhoUu6bacJaufePRcRl8hU3Be8fGzG2d
MQuXkE2zn7lkJhwIRDR1grb6nz8f
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:58 2025 by rpki-client