Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/816A35280D3011F08F004C67762E951A.roa
File: 816A35280D3011F08F004C67762E951A.roa (raw, json)
Hash identifier: Slj8s9xH/KnOXVWMUIuy3o9skdAqBWCfreUBgI2+B5s=
Subject key identifier: 8A:B2:74:C7:C1:91:10:94:C1:8D:10:26:F5:40:AC:3D:EB:C2:F1:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014934
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/816A35280D3011F08F004C67762E951A.roa
Signing time: Sun 30 Mar 2025 06:30:43 +0000
ROA not before: Sun 30 Mar 2025 06:30:39 +0000
ROA not after: Sun 04 May 2025 06:30:39 +0000
asID: 401434
IP address blocks: 45.196.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84276 (0x14934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 30 06:30:39 2025 GMT
Not After : May 4 06:30:39 2025 GMT
Subject: CN=67e8e513-7d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:69:8d:ec:75:45:0d:c5:78:c6:92:f2:91:
00:0c:fa:00:3a:c5:bc:29:05:42:3b:e8:60:89:5f:
20:22:1e:7d:ee:87:44:b8:f0:93:d2:14:09:56:9d:
4f:e0:ce:df:2a:8c:c5:e8:7a:05:bb:ed:c5:4d:2e:
89:37:8e:a4:85:bb:28:3f:d0:6a:90:c2:0f:60:3e:
39:05:6b:c4:c3:f8:72:c4:88:8e:c3:fd:b9:9e:e9:
3a:f2:1a:fc:47:02:ca:e0:4c:b2:c3:6d:4a:93:c5:
2d:36:a3:13:d9:83:ed:25:b3:80:95:79:89:f1:91:
5c:6b:92:9e:a0:f0:c6:be:43:a3:b6:74:c3:6c:f2:
6e:6b:1f:58:bb:b3:8e:46:6f:c0:3c:c0:5e:6d:eb:
44:fa:49:66:90:1b:ae:30:75:55:41:dd:7e:a1:3b:
7d:a4:df:de:53:2a:2f:8a:e4:96:49:b4:6a:73:61:
d4:47:b3:96:aa:f5:37:f1:53:d5:d5:b2:f6:79:0e:
6a:39:e7:2f:80:3b:ab:cb:39:76:79:f3:91:38:c9:
81:c2:d7:0f:64:66:84:5b:89:88:1d:46:3f:22:eb:
37:f0:4e:5c:35:30:cc:3e:86:d1:0a:d3:b2:2d:b4:
0a:9d:e1:dc:3b:41:19:ab:e6:36:bf:22:82:ed:e5:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:74:C7:C1:91:10:94:C1:8D:10:26:F5:40:AC:3D:EB:C2:F1:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/816A35280D3011F08F004C67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.216.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:1a:b4:8d:25:a6:d8:2d:39:bf:cf:5d:fd:e2:b7:ce:df:e9:
30:c4:ab:0b:a0:a8:c2:06:05:2a:5b:71:0c:14:8d:40:ef:be:
7a:84:c2:2f:78:17:45:6e:d9:13:71:5e:bb:93:cb:70:ef:ce:
f1:fb:a7:c7:38:2b:d5:20:47:9e:31:96:46:f3:af:67:ec:09:
5d:4b:4d:a3:4b:dc:76:32:8f:82:e5:0b:23:9e:47:c2:de:8b:
95:c4:de:2b:45:d2:dd:85:18:7c:f2:dd:06:ee:50:83:0f:89:
8e:a4:80:a5:59:32:db:95:c5:96:0c:76:e2:ce:df:e6:4e:5e:
2d:1a:e8:21:f8:3c:e7:50:47:aa:9d:57:d6:e7:8b:67:12:fb:
a4:f7:c5:9a:b0:b5:de:f0:bd:0f:ad:c1:7e:af:5e:d1:39:17:
3c:db:68:7b:41:77:a0:ea:24:3a:aa:4c:07:cf:7e:2b:0a:10:
6b:66:21:32:6b:73:a3:f4:0c:f0:76:0c:0f:76:6c:da:95:0f:
5a:46:3d:bd:f8:07:8d:d9:b8:12:be:f5:3c:8f:98:53:67:80:
0e:5a:a1:0a:81:49:9b:e1:bd:e7:69:72:7a:eb:69:11:d6:60:
02:e0:db:8f:86:4a:89:f8:9d:c0:cc:87:dc:4a:5f:5c:b4:33:
c3:22:c0:87
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUk0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzMwMDYzMDM5WhcNMjUwNTA0MDYzMDM5WjAYMRYw
FAYDVQQDEw02N2U4ZTUxMy03ZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApQFpjex1RQ3FeMaS8pEADPoAOsW8KQVCO+hgiV8gIh597odEuPCT0hQJ
Vp1P4M7fKozF6HoFu+3FTS6JN46khbsoP9BqkMIPYD45BWvEw/hyxIiOw/25nuk6
8hr8RwLK4Eyyw21Kk8UtNqMT2YPtJbOAlXmJ8ZFca5KeoPDGvkOjtnTDbPJuax9Y
u7OORm/APMBebetE+klmkBuuMHVVQd1+oTt9pN/eUyoviuSWSbRqc2HUR7OWqvU3
8VPV1bL2eQ5qOecvgDuryzl2efOROMmBwtcPZGaEW4mIHUY/Ius38E5cNTDMPobR
CtOyLbQKneHcO0EZq+Y2vyKC7eW5BQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIqy
dMfBkRCUwY0QJvVArD3rwvEyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MTZBMzUyODBEMzAxMUYwOEYwMDRDNjc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcTYMA0GCSqGSIb3DQEBCwUA
A4IBAQAcGrSNJabYLTm/z1394rfO3+kwxKsLoKjCBgUqW3EMFI1A7756hMIveBdF
btkTcV67k8tw787x+6fHOCvVIEeeMZZG869n7AldS02jS9x2Mo+C5QsjnkfC3ouV
xN4rRdLdhRh88t0G7lCDD4mOpIClWTLblcWWDHbizt/mTl4tGugh+DznUEeqnVfW
54tnEvuk98WasLXe8L0PrcF+r17RORc822h7QXeg6iQ6qkwHz34rChBrZiEya3Oj
9AzwdgwPdmzalQ9aRj29+AeN2bgSvvU8j5hTZ4AOWqEKgUmb4b3naXJ662kR1mAC
4NuPhkqJ+J3AzIfcSl9ctDPDIsCH
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:27 2025 by rpki-client