Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A2F1584490411F0BD6620ADDAE4EC9C.roa
File: 2A2F1584490411F0BD6620ADDAE4EC9C.roa (raw, json)
Hash identifier: rTJ6g55bOFO5Qkpoh6/WTKCdKx0KxryD7LtGwvujNtQ=
Subject key identifier: 54:67:0C:49:F6:DC:22:A1:1A:41:EC:6D:76:7D:71:21:1C:33:5A:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A2F1584490411F0BD6620ADDAE4EC9C.roa
Signing time: Sat 14 Jun 2025 09:44:29 +0000
ROA not before: Sat 14 Jun 2025 09:44:24 +0000
ROA not after: Sun 20 Jul 2025 09:44:24 +0000
asID: 395793
IP address blocks: 45.192.13.0/24 maxlen: 24
45.192.14.0/24 maxlen: 24
45.192.15.0/24 maxlen: 24
45.192.16.0/24 maxlen: 24
45.198.226.0/24 maxlen: 24
45.198.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89066 (0x15bea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 09:44:24 2025 GMT
Not After : Jul 20 09:44:24 2025 GMT
Subject: CN=684d447d-f6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:c5:a8:0f:c9:9f:44:8e:f5:58:3c:72:d6:
d1:d2:f8:a2:37:87:09:25:dd:c8:55:da:b0:47:98:
0a:08:ae:91:dd:38:ee:b5:17:5d:67:46:f7:f7:55:
14:59:d4:a9:4b:7f:5a:fd:27:66:03:4f:af:4b:c5:
1d:be:f2:d1:69:c9:cb:27:d2:1e:91:b7:88:5f:1e:
c9:c8:64:b7:c3:3c:ed:a0:d6:90:2e:ca:d9:51:1e:
e0:1c:fa:da:56:3c:33:b2:34:99:bf:ef:34:98:f7:
06:87:e0:58:92:f4:17:c8:ba:68:a7:3c:bc:c0:8a:
cf:5e:a3:fa:bf:1a:b8:e2:75:67:51:be:8a:0a:61:
03:58:90:1d:9a:c8:1d:2b:48:77:1a:fc:26:bf:8f:
c3:d1:00:0d:32:8e:6d:92:82:31:52:8b:a3:de:e4:
2e:28:23:ae:eb:c6:18:ac:6d:e5:7b:30:90:c4:32:
70:85:97:86:64:f7:2f:e4:97:97:89:a5:4b:7c:36:
99:77:ec:10:39:d7:15:9f:40:20:1e:6f:aa:5b:7c:
78:c3:30:8e:34:03:5b:9f:43:ff:d0:17:fc:2e:a2:
dc:1d:78:df:61:fa:1a:db:29:bd:01:f3:ae:07:85:
7e:10:39:a9:db:e9:98:25:6b:0d:4f:06:aa:64:24:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:67:0C:49:F6:DC:22:A1:1A:41:EC:6D:76:7D:71:21:1C:33:5A:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A2F1584490411F0BD6620ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.13.0-45.192.16.255
45.198.226.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:ad:d7:61:31:2e:a4:bd:13:59:be:64:d6:40:16:b2:80:ee:
28:33:1d:b9:9b:99:d5:86:16:84:d4:41:d6:96:28:52:44:be:
88:d7:21:a3:1e:25:10:78:43:26:1c:6a:a6:23:17:4d:14:a8:
26:99:46:93:84:06:2d:e9:92:56:89:7e:7b:96:a6:16:3e:38:
a0:71:2b:7a:01:8c:f8:d8:31:3c:2f:c8:41:2a:4a:2c:1a:54:
bd:16:6f:92:a3:db:b5:95:d5:58:cd:fc:bc:71:98:55:f1:00:
25:70:19:7d:af:49:d6:1d:48:60:40:79:56:1f:bc:ca:e4:42:
71:82:38:4a:b0:08:a4:bc:e0:cf:3a:ad:aa:f0:e0:d2:54:5d:
29:b4:47:74:76:32:b9:84:07:18:23:a2:6d:f0:03:42:10:49:
2e:5d:bd:53:7a:1d:37:4e:dd:de:b8:45:db:c1:ea:a7:77:e1:
2c:77:b3:1e:07:5c:f8:8e:d3:8b:62:6c:f8:7d:f5:05:a5:79:
d7:9c:bd:33:ff:58:3e:e1:a2:cc:f7:5f:48:ba:f3:26:3d:13:
3c:89:b3:64:ea:a5:17:a1:11:50:64:75:f9:dd:b6:30:60:be:
04:7e:a3:8c:c6:4a:af:e0:4a:50:9e:b4:45:9b:76:7d:23:c4:
0a:49:df:66
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAVvqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE0MDk0NDI0WhcNMjUwNzIwMDk0NDI0WjAYMRYw
FAYDVQQDEw02ODRkNDQ3ZC1mNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnznFqA/Jn0SO9Vg8ctbR0viiN4cJJd3IVdqwR5gKCK6R3TjutRddZ0b3
91UUWdSpS39a/SdmA0+vS8UdvvLRacnLJ9IekbeIXx7JyGS3wzztoNaQLsrZUR7g
HPraVjwzsjSZv+80mPcGh+BYkvQXyLpopzy8wIrPXqP6vxq44nVnUb6KCmEDWJAd
msgdK0h3Gvwmv4/D0QANMo5tkoIxUouj3uQuKCOu68YYrG3lezCQxDJwhZeGZPcv
5JeXiaVLfDaZd+wQOdcVn0AgHm+qW3x4wzCONANbn0P/0Bf8LqLcHXjfYfoa2ym9
AfOuB4V+EDmp2+mYJWsNTwaqZCTBPQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFRn
DEn23CKhGkHsbXZ9cSEcM1p9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQTJGMTU4NDQ5MDQxMUYwQkQ2NjIwQUREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtwA0DBAAtwBADBAEtxuIw
DQYJKoZIhvcNAQELBQADggEBAKqt12ExLqS9E1m+ZNZAFrKA7igzHbmbmdWGFoTU
QdaWKFJEvojXIaMeJRB4QyYcaqYjF00UqCaZRpOEBi3pklaJfnuWphY+OKBxK3oB
jPjYMTwvyEEqSiwaVL0Wb5Kj27WV1VjN/LxxmFXxACVwGX2vSdYdSGBAeVYfvMrk
QnGCOEqwCKS84M86rarw4NJUXSm0R3R2MrmEBxgjom3wA0IQSS5dvVN6HTdO3d64
RdvB6qd34Sx3sx4HXPiO04tibPh99QWledecvTP/WD7hosz3X0i68yY9EzyJs2Tq
pRehEVBkdfndtjBgvgR+o4zGSq/gSlCetEWbdn0jxApJ32Y=
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:06:41 2025 by rpki-client