Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08B3918E46CD11F0AE918BB0DAE4EC9C.roa
File: 08B3918E46CD11F0AE918BB0DAE4EC9C.roa (raw, json)
Hash identifier: YGADAqxCQpjM/Z3LBZFGIF0V4DTJ5s8uymel4zPmzDM=
Subject key identifier: 6B:03:85:CF:C4:99:DC:44:AF:B7:D4:A6:CC:3D:26:C9:3C:37:31:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08B3918E46CD11F0AE918BB0DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 14:04:48 +0000
ROA not before: Wed 11 Jun 2025 14:04:43 +0000
ROA not after: Fri 11 Jul 2025 14:04:43 +0000
asID: 208483
IP address blocks: 45.195.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 00:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88917 (0x15b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 14:04:43 2025 GMT
Not After : Jul 11 14:04:43 2025 GMT
Subject: CN=68498d00-83bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:c1:05:4c:8d:74:9e:83:39:68:c2:ca:68:
df:6a:01:d8:7c:0e:ac:bb:77:05:84:20:c3:a4:10:
ac:4f:98:c5:e2:4c:f8:fe:27:9a:b3:86:2d:9a:c9:
35:02:d2:48:59:83:b8:41:a0:05:1c:05:a4:f7:d4:
48:fd:aa:6f:92:d5:13:06:0e:31:eb:36:5d:6e:f5:
1d:69:c0:61:cc:91:17:e2:60:00:3c:85:af:0e:0f:
6b:65:6b:2a:87:7e:b8:b0:08:d5:37:8f:54:ae:9b:
62:ad:f2:d5:8f:1f:c3:17:b7:d5:58:7f:fe:f3:5d:
34:19:e0:5f:21:fb:ab:78:af:64:88:8f:5a:3f:0d:
85:b0:ce:44:ba:04:6c:56:87:54:32:fb:03:28:89:
fb:31:3b:af:84:a9:5a:72:7c:bf:f3:12:c2:dc:88:
ab:f3:63:79:66:9e:73:58:e7:60:0b:5a:0e:34:a5:
04:5a:dc:ad:34:70:a7:76:b1:96:98:b0:c4:f2:be:
76:43:8f:e2:ed:cd:53:cb:a4:e3:0d:dd:71:f3:a3:
9b:2d:a3:eb:7d:f9:1a:b4:6f:45:8e:f7:52:13:cb:
ed:5a:91:db:69:8e:b2:48:f5:96:7b:31:3b:ec:f2:
24:15:fb:b7:5b:9a:73:80:09:f1:0d:25:38:c0:02:
12:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:03:85:CF:C4:99:DC:44:AF:B7:D4:A6:CC:3D:26:C9:3C:37:31:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08B3918E46CD11F0AE918BB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.249.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2f:47:e9:79:ef:61:bb:ab:09:a8:7b:bb:c8:d0:d0:aa:a6:
f5:4a:d5:9f:64:7e:ed:f3:ac:5b:1c:cb:a3:9a:4a:33:a2:99:
24:ed:38:98:79:d9:5b:2d:b6:8a:aa:0e:7f:35:65:09:4a:46:
06:da:ed:8d:01:dc:54:39:8c:da:42:cb:67:99:63:ab:a9:70:
c1:75:ed:2d:75:e2:a4:ae:27:28:61:62:1b:78:3a:9e:fe:36:
58:dd:7e:1f:fa:72:25:ad:79:d5:2c:54:6f:be:25:56:c4:70:
b1:53:46:4a:1f:0d:2e:30:e7:1c:9f:3b:44:bb:23:67:19:df:
f6:f5:c0:fd:10:f2:34:95:6b:eb:ac:19:0c:20:91:98:93:b6:
c5:e5:31:03:e1:68:18:5a:19:53:a2:c6:f5:11:62:d3:e7:c8:
28:b3:c3:b9:21:43:ba:aa:46:0c:c2:12:72:15:1d:a9:2a:3c:
2c:83:c6:10:82:57:52:9c:14:4c:0f:05:d9:ea:93:f7:af:b7:
eb:85:eb:b6:a9:67:c9:54:c2:c1:5e:90:5e:e3:3b:b2:22:b6:
a6:7e:cd:22:36:f9:86:cd:e8:a9:25:f4:84:23:41:85:00:00:
25:2b:30:c0:52:da:29:88:e5:52:55:e6:ac:73:70:d5:0e:88:
95:94:00:2d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVtVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjExMTQwNDQzWhcNMjUwNzExMTQwNDQzWjAYMRYw
FAYDVQQDEw02ODQ5OGQwMC04M2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1IXBBUyNdJ6DOWjCymjfagHYfA6su3cFhCDDpBCsT5jF4kz4/ieas4Yt
msk1AtJIWYO4QaAFHAWk99RI/apvktUTBg4x6zZdbvUdacBhzJEX4mAAPIWvDg9r
ZWsqh364sAjVN49UrptirfLVjx/DF7fVWH/+8100GeBfIfureK9kiI9aPw2FsM5E
ugRsVodUMvsDKIn7MTuvhKlacny/8xLC3Iir82N5Zp5zWOdgC1oONKUEWtytNHCn
drGWmLDE8r52Q4/i7c1Ty6TjDd1x86ObLaPrffkatG9FjvdSE8vtWpHbaY6ySPWW
ezE77PIkFfu3W5pzgAnxDSU4wAISPwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGsD
hc/EmdxEr7fUpsw9Jsk8NzFSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wOEIzOTE4RTQ2Q0QxMUYwQUU5MThCQjBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcP5MA0GCSqGSIb3DQEBCwUA
A4IBAQAaL0fpee9hu6sJqHu7yNDQqqb1StWfZH7t86xbHMujmkozopkk7TiYedlb
LbaKqg5/NWUJSkYG2u2NAdxUOYzaQstnmWOrqXDBde0tdeKkricoYWIbeDqe/jZY
3X4f+nIlrXnVLFRvviVWxHCxU0ZKHw0uMOccnztEuyNnGd/29cD9EPI0lWvrrBkM
IJGYk7bF5TED4WgYWhlTosb1EWLT58gos8O5IUO6qkYMwhJyFR2pKjwsg8YQgldS
nBRMDwXZ6pP3r7frheu2qWfJVMLBXpBe4zuyIramfs0iNvmGzeipJfSEI0GFAAAl
KzDAUtopiOVSVeasc3DVDoiVlAAt
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:40:41 2025 by rpki-client