Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/335A116C107F11F09575AD6D762E951A.roa
File: 335A116C107F11F09575AD6D762E951A.roa (raw, json)
Hash identifier: R0DqYLocDFwRY491LI1PgIOGxqX+OYcZEfcYzYtaDms=
Subject key identifier: CA:98:CD:DF:FD:E1:01:D4:C2:8C:F5:01:06:BF:18:CE:44:10:43:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0149D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/335A116C107F11F09575AD6D762E951A.roa
Signing time: Thu 03 Apr 2025 11:31:36 +0000
ROA not before: Thu 03 Apr 2025 11:31:32 +0000
ROA not after: Sat 10 May 2025 11:31:32 +0000
asID: 61112
IP address blocks: 45.192.240.0/24 maxlen: 24
45.192.241.0/24 maxlen: 24
45.192.246.0/24 maxlen: 24
45.192.247.0/24 maxlen: 24
45.192.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84434 (0x149d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 11:31:32 2025 GMT
Not After : May 10 11:31:32 2025 GMT
Subject: CN=67ee7198-8c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2f:e7:44:57:77:0e:5f:ca:f2:32:07:36:89:
bc:59:22:7b:13:61:5e:74:45:ea:cc:9b:b3:c6:d9:
07:78:b6:5a:1d:6d:9b:7c:b0:e4:96:70:01:2d:25:
c0:66:f6:c7:d6:34:18:1c:b1:ed:35:c0:e4:00:12:
fa:ae:15:f5:57:4b:46:a1:13:00:4d:2b:71:93:be:
71:96:20:a3:a7:87:7b:40:ea:57:84:87:4e:92:3d:
49:48:cd:6d:6a:28:65:19:bd:a2:42:f7:38:22:29:
e5:af:80:33:24:b9:3e:e6:aa:82:c9:da:52:a1:96:
b1:6b:da:b9:e5:21:07:10:e9:c8:fc:a5:91:cc:9f:
18:07:be:73:ca:c6:5f:43:26:d5:8a:7c:a4:14:d5:
58:86:6b:66:3d:72:9b:83:7a:dc:cd:08:52:b7:1e:
02:4c:54:d8:d7:2c:fd:2c:01:33:1c:7c:22:cd:8d:
0e:be:73:f5:88:0a:82:79:40:c0:83:56:ef:d1:dc:
23:77:d1:c6:e6:c0:04:10:87:78:e0:f5:7a:22:c5:
e2:f9:53:c7:90:be:5f:07:ba:ea:f3:d1:91:a8:07:
35:1e:3f:f1:bf:bc:cc:27:b1:fb:37:16:9a:af:ed:
76:54:2d:26:5e:20:13:25:c3:ae:aa:3e:4f:c0:09:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:CD:DF:FD:E1:01:D4:C2:8C:F5:01:06:BF:18:CE:44:10:43:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/335A116C107F11F09575AD6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/23
45.192.246.0-45.192.249.255
Signature Algorithm: sha256WithRSAEncryption
66:4d:2e:cb:bf:a4:22:ae:29:79:da:3a:ea:e1:64:e7:a0:e0:
ff:b3:d8:b8:42:88:69:2e:9d:87:a4:ec:05:6b:db:34:04:04:
1c:cf:6d:04:62:90:f1:f7:b0:64:5d:a0:32:83:f2:93:54:29:
86:c0:10:44:5d:73:d6:59:ae:ed:23:14:23:2d:a3:fd:83:c6:
88:06:35:5d:29:c9:7f:b5:07:cc:82:fd:a0:18:c4:8a:e0:17:
58:04:b9:df:22:f8:9a:d4:77:d9:fc:02:11:70:66:bc:60:8f:
43:36:15:40:db:94:c5:40:80:89:d5:d8:6a:f4:f3:ab:40:87:
3b:24:0a:d9:87:bb:5c:87:8a:17:d7:89:b6:7f:2b:bf:7e:e8:
9f:05:e6:73:eb:17:f0:9e:86:5f:b5:e6:99:9c:3f:22:de:82:
2a:31:08:4b:f2:43:7f:f4:61:b0:5f:65:f2:1a:5a:cc:ad:61:
9b:80:39:65:61:23:b4:c9:2a:74:eb:69:99:6e:68:b4:4f:7d:
87:ab:00:7a:f3:e4:0f:31:de:cc:c2:f8:5d:ef:92:ff:76:42:
0d:c8:ca:93:f0:e8:6e:7d:cc:49:1d:33:1f:f9:0d:f9:f5:16:
13:3b:3d:0c:03:fe:4f:89:ba:ca:9f:d0:ee:66:09:f1:3d:6f:
2e:08:94:60
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAUnSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDAzMTEzMTMyWhcNMjUwNTEwMTEzMTMyWjAYMRYw
FAYDVQQDEw02N2VlNzE5OC04YzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6C/nRFd3Dl/K8jIHNom8WSJ7E2FedEXqzJuzxtkHeLZaHW2bfLDklnAB
LSXAZvbH1jQYHLHtNcDkABL6rhX1V0tGoRMATStxk75xliCjp4d7QOpXhIdOkj1J
SM1taihlGb2iQvc4Iinlr4AzJLk+5qqCydpSoZaxa9q55SEHEOnI/KWRzJ8YB75z
ysZfQybVinykFNVYhmtmPXKbg3rczQhStx4CTFTY1yz9LAEzHHwizY0OvnP1iAqC
eUDAg1bv0dwjd9HG5sAEEId44PV6IsXi+VPHkL5fB7rq89GRqAc1Hj/xv7zMJ7H7
Nxaar+12VC0mXiATJcOuqj5PwAk/XQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMqY
zd/94QHUwoz1AQa/GM5EEEN8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzVBMTE2QzEwN0YxMUYwOTU3NUFENkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBLcDwMAwDBAEtwPYDBAEtwPgw
DQYJKoZIhvcNAQELBQADggEBAGZNLsu/pCKuKXnaOurhZOeg4P+z2LhCiGkunYek
7AVr2zQEBBzPbQRikPH3sGRdoDKD8pNUKYbAEERdc9ZZru0jFCMto/2DxogGNV0p
yX+1B8yC/aAYxIrgF1gEud8i+JrUd9n8AhFwZrxgj0M2FUDblMVAgInV2Gr086tA
hzskCtmHu1yHihfXibZ/K79+6J8F5nPrF/Cehl+15pmcPyLegioxCEvyQ3/0YbBf
ZfIaWsytYZuAOWVhI7TJKnTraZluaLRPfYerAHrz5A8x3szC+F3vkv92Qg3IypPw
6G59zEkdMx/5Dfn1FhM7PQwD/k+Jusqf0O5mCfE9by4IlGA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:05 2025 by rpki-client