Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CE83E7C13D211F0BA288980762E951A.roa
File: 5CE83E7C13D211F0BA288980762E951A.roa (raw, json)
Hash identifier: V/4qmmgfR2YD/kCOUFJUJDAttNinLuBeH0JWBZ3bBw4=
Subject key identifier: 28:AA:44:26:11:F6:DF:FF:77:13:DE:F0:FA:2B:A6:24:5D:EC:96:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CE83E7C13D211F0BA288980762E951A.roa
Signing time: Mon 07 Apr 2025 17:04:27 +0000
ROA not before: Mon 07 Apr 2025 17:04:23 +0000
ROA not after: Mon 12 May 2025 17:04:23 +0000
asID: 8796
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84638 (0x14a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 17:04:23 2025 GMT
Not After : May 12 17:04:23 2025 GMT
Subject: CN=67f4059b-e1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:36:e5:7c:17:32:e7:f5:5f:95:5f:d0:4c:65:
5e:76:bd:1d:07:69:d2:06:99:f5:ae:44:ca:b5:56:
42:ef:80:a4:26:cb:64:f1:50:42:04:24:6a:2d:73:
10:36:72:93:50:20:31:23:ae:c5:21:53:30:ea:bf:
1b:82:fa:76:47:64:4c:9a:70:38:80:bb:d0:4c:d4:
5e:70:11:3b:0f:40:c0:ca:5f:11:5b:2b:74:8e:85:
25:c9:7a:cd:d2:94:b0:59:a9:ad:22:81:65:18:45:
08:4a:a8:df:54:25:6d:56:e5:9e:6c:66:09:7b:3e:
c8:36:ea:91:53:25:3f:8e:97:dc:46:ee:aa:fb:e5:
df:44:a3:69:84:19:8a:ca:34:88:4c:9e:4d:a5:bd:
f4:ae:1f:36:99:fa:7e:c6:99:f4:e5:b2:13:c9:0f:
63:44:0a:bb:e0:5d:bd:40:7a:1c:50:81:dc:38:58:
b5:bd:f5:8c:33:c5:dd:14:f5:04:1c:22:9c:c9:7e:
3d:b2:e5:43:83:d5:bb:50:42:2b:dc:02:f1:7b:6a:
72:0a:a3:b7:10:80:07:14:f3:d7:49:ca:dd:ff:fe:
82:02:92:d5:fd:98:73:1b:da:82:83:b3:66:e5:45:
83:7d:00:2f:58:a7:b2:ce:6a:cb:e6:b0:ce:3b:b7:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AA:44:26:11:F6:DF:FF:77:13:DE:F0:FA:2B:A6:24:5D:EC:96:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CE83E7C13D211F0BA288980762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
76:58:ba:7b:7a:73:15:dc:43:3c:22:f7:bd:c6:d5:50:a3:54:
a9:83:5e:b9:33:0f:8f:f1:83:9f:6e:6e:e8:5d:ce:7e:06:c4:
87:0a:55:56:7e:ff:01:c9:e3:22:25:fe:e6:f8:0c:a3:15:3a:
14:d5:2b:f1:f2:4c:b4:4d:fa:9f:ea:28:27:0f:78:02:db:96:
38:34:e6:a4:0f:3b:43:d4:e7:78:52:6a:0e:13:43:e5:c4:37:
ec:e9:d3:48:2b:a1:d4:12:fe:fd:2b:e9:5c:19:c8:d9:ef:aa:
1f:ba:7e:af:30:2c:2b:ad:26:ae:6c:ac:86:73:7d:0b:4f:60:
10:7d:6c:cb:b4:d2:a1:ae:93:5b:70:5c:7e:bf:e6:ad:53:9a:
49:36:9e:ad:fe:fb:d5:69:03:59:eb:e8:34:57:d2:b8:10:7f:
7a:92:c0:19:04:74:ce:5a:b3:ba:c6:fd:1c:46:56:08:29:a6:
1d:28:70:a0:e1:f9:06:83:0c:47:82:f7:fa:b6:bd:5f:6e:a0:
46:d4:1c:d7:c2:db:db:cb:ae:cf:55:eb:ab:e6:ad:46:84:58:
eb:8f:00:57:9e:7c:0e:7a:0c:7d:5f:22:ad:cf:e2:52:87:92:
0a:75:3b:e8:84:89:ff:71:65:1f:2b:69:2a:e2:72:df:57:98:
ff:93:2f:a6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUqeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA3MTcwNDIzWhcNMjUwNTEyMTcwNDIzWjAYMRYw
FAYDVQQDEw02N2Y0MDU5Yi1lMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5TblfBcy5/VflV/QTGVedr0dB2nSBpn1rkTKtVZC74CkJstk8VBCBCRq
LXMQNnKTUCAxI67FIVMw6r8bgvp2R2RMmnA4gLvQTNRecBE7D0DAyl8RWyt0joUl
yXrN0pSwWamtIoFlGEUISqjfVCVtVuWebGYJez7INuqRUyU/jpfcRu6q++XfRKNp
hBmKyjSITJ5Npb30rh82mfp+xpn05bITyQ9jRAq74F29QHocUIHcOFi1vfWMM8Xd
FPUEHCKcyX49suVDg9W7UEIr3ALxe2pyCqO3EIAHFPPXScrd//6CApLV/ZhzG9qC
g7Nm5UWDfQAvWKeyzmrL5rDOO7fijQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCiq
RCYR9t//dxPe8PorpiRd7JYmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81Q0U4M0U3QzEzRDIxMUYwQkEyODg5ODA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLc/AMA0GCSqGSIb3DQEBCwUA
A4IBAQB2WLp7enMV3EM8Ive9xtVQo1Spg165Mw+P8YOfbm7oXc5+BsSHClVWfv8B
yeMiJf7m+AyjFToU1Svx8ky0Tfqf6ignD3gC25Y4NOakDztD1Od4UmoOE0PlxDfs
6dNIK6HUEv79K+lcGcjZ76ofun6vMCwrrSaubKyGc30LT2AQfWzLtNKhrpNbcFx+
v+atU5pJNp6t/vvVaQNZ6+g0V9K4EH96ksAZBHTOWrO6xv0cRlYIKaYdKHCg4fkG
gwxHgvf6tr1fbqBG1BzXwtvby67PVeur5q1GhFjrjwBXnnwOegx9XyKtz+JSh5IK
dTvohIn/cWUfK2kq4nLfV5j/ky+m
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:24 2025 by rpki-client