Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E7723C211F511F0B7FA764A762E951A.roa
File: 0E7723C211F511F0B7FA764A762E951A.roa (raw, json)
Hash identifier: lF0TBQU+PZWsTEPH9QsB7BB/PsLXCIm6glROpFCIuGI=
Subject key identifier: BE:75:1C:44:00:F9:C9:CE:6F:C7:0B:18:8D:81:EB:D3:20:25:3F:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A42
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E7723C211F511F0B7FA764A762E951A.roa
Signing time: Sat 05 Apr 2025 08:07:46 +0000
ROA not before: Sat 05 Apr 2025 08:07:40 +0000
ROA not after: Sun 11 May 2025 08:07:40 +0000
asID: 147176
IP address blocks: 45.201.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84546 (0x14a42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 08:07:40 2025 GMT
Not After : May 11 08:07:40 2025 GMT
Subject: CN=67f0e4d1-cb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:fe:65:62:75:f8:c8:5d:85:df:11:09:81:
32:7b:1a:75:af:c3:42:c0:78:7a:02:7d:ec:10:8d:
3b:a5:88:ed:b8:0d:05:06:d0:b2:8f:16:64:61:c9:
53:15:1b:c8:ec:af:dc:26:d8:cc:e6:9e:dd:3e:02:
01:44:2e:31:b7:a7:e4:74:9b:c7:f4:21:75:44:23:
a6:b1:38:5b:f6:85:0c:7b:15:6c:00:55:de:0a:51:
7f:26:03:a7:f3:5a:34:c2:d9:22:87:d3:3b:e0:2f:
0e:ce:e6:c7:20:e4:a0:9f:d6:af:e5:90:3b:d9:f2:
cb:0a:bb:d5:b1:a8:fe:39:15:41:e5:c4:ea:41:fa:
d3:39:e4:2c:02:65:58:e1:1b:2c:bb:0d:34:6c:61:
4c:8f:bc:a9:74:8a:f7:2a:16:94:c1:61:ea:1b:64:
b0:7c:48:be:4f:e3:6b:3d:21:0b:ab:ea:5a:8c:a1:
0f:85:11:78:ad:02:fe:3f:ec:dd:20:8b:ec:13:3b:
3e:03:fb:11:19:53:d2:a4:5f:49:ea:d6:be:eb:53:
96:75:a7:86:2d:75:5b:aa:84:73:91:fb:a8:69:3b:
bc:a4:7d:d9:87:5a:64:eb:5e:45:6f:a1:09:ab:52:
48:b5:a6:05:28:b1:a3:a1:de:6a:67:4f:bc:4c:c3:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:75:1C:44:00:F9:C9:CE:6F:C7:0B:18:8D:81:EB:D3:20:25:3F:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E7723C211F511F0B7FA764A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.9.0/24
Signature Algorithm: sha256WithRSAEncryption
50:30:62:d1:7e:67:20:91:dc:9c:5b:c6:5f:1d:d8:81:37:07:
f3:05:d3:36:d3:b5:0c:9c:09:14:07:a2:35:bf:a3:3a:c1:f4:
7d:7d:4f:3b:df:14:a2:50:a5:91:77:d8:55:87:74:06:b7:6d:
0e:d3:fb:9c:45:5b:21:20:f4:4c:99:49:a3:1d:39:d8:38:ff:
45:12:fc:d5:fa:40:13:0b:73:92:17:21:ac:ea:23:b7:05:6d:
52:3c:f4:65:c8:20:ff:31:1c:45:d7:53:6c:a2:5c:f6:97:46:
a0:11:8e:6d:68:1b:ce:7f:13:c2:00:e6:ca:a3:ab:32:ad:7f:
a0:c4:f9:d0:7d:28:d2:c0:fa:ac:2f:6e:ca:ce:f9:5b:0c:c2:
51:b5:65:b7:dd:8e:57:cd:42:96:fa:ee:aa:15:02:36:63:b2:
4e:90:7f:d0:1c:c5:9d:56:86:9e:49:e1:4f:c7:8f:09:ab:02:
8f:75:32:32:a5:c1:9b:85:78:92:30:57:8e:de:0c:0f:fb:1b:
1f:84:27:ac:09:16:1f:8e:84:ea:90:97:7b:94:a3:d9:8d:e3:
13:d2:41:be:ed:af:9f:8b:44:d2:ea:81:2c:82:ed:a9:20:c8:
e7:f8:bc:2f:8a:cb:15:79:98:b9:75:76:70:a7:6a:e5:54:53:
8d:df:0d:59
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUpCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA1MDgwNzQwWhcNMjUwNTExMDgwNzQwWjAYMRYw
FAYDVQQDEw02N2YwZTRkMS1jYjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArXT+ZWJ1+Mhdhd8RCYEyexp1r8NCwHh6An3sEI07pYjtuA0FBtCyjxZk
YclTFRvI7K/cJtjM5p7dPgIBRC4xt6fkdJvH9CF1RCOmsThb9oUMexVsAFXeClF/
JgOn81o0wtkih9M74C8OzubHIOSgn9av5ZA72fLLCrvVsaj+ORVB5cTqQfrTOeQs
AmVY4Rssuw00bGFMj7ypdIr3KhaUwWHqG2SwfEi+T+NrPSELq+pajKEPhRF4rQL+
P+zdIIvsEzs+A/sRGVPSpF9J6ta+61OWdaeGLXVbqoRzkfuoaTu8pH3Zh1pk615F
b6EJq1JItaYFKLGjod5qZ0+8TMMbwwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL51
HEQA+cnOb8cLGI2B69MgJT8WMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRTc3MjNDMjExRjUxMUYwQjdGQTc2NEE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALckJMA0GCSqGSIb3DQEBCwUA
A4IBAQBQMGLRfmcgkdycW8ZfHdiBNwfzBdM207UMnAkUB6I1v6M6wfR9fU873xSi
UKWRd9hVh3QGt20O0/ucRVshIPRMmUmjHTnYOP9FEvzV+kATC3OSFyGs6iO3BW1S
PPRlyCD/MRxF11Nsolz2l0agEY5taBvOfxPCAObKo6syrX+gxPnQfSjSwPqsL27K
zvlbDMJRtWW33Y5XzUKW+u6qFQI2Y7JOkH/QHMWdVoaeSeFPx48JqwKPdTIypcGb
hXiSMFeO3gwP+xsfhCesCRYfjoTqkJd7lKPZjeMT0kG+7a+fi0TS6oEsgu2pIMjn
+LwvissVeZi5dXZwp2rlVFON3w1Z
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:17 2025 by rpki-client