Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2D5E08C49CE11F0A5E274D1DAE4EC9C.roa
File: B2D5E08C49CE11F0A5E274D1DAE4EC9C.roa (raw, json)
Hash identifier: T+S3u1FX7EsHCUBMg4i68b8jbNdAHLyJQmeFuxFpf8w=
Subject key identifier: CA:B9:AC:7F:31:9F:02:B6:91:1B:86:95:FD:24:DF:64:E6:72:91:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2D5E08C49CE11F0A5E274D1DAE4EC9C.roa
Signing time: Sun 15 Jun 2025 09:54:16 +0000
ROA not before: Sun 15 Jun 2025 09:54:12 +0000
ROA not after: Thu 10 Jul 2025 09:54:12 +0000
asID: 271916
IP address blocks: 45.194.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Jun 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89142 (0x15c36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 09:54:12 2025 GMT
Not After : Jul 10 09:54:12 2025 GMT
Subject: CN=684e9848-1d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:b2:47:af:ea:9e:9b:83:ec:a2:2e:54:cc:
10:5a:c0:ee:38:a3:05:12:c0:70:ac:3f:64:b7:19:
ba:6e:87:cc:90:5e:a3:89:79:a0:a0:2a:9b:d4:4c:
c2:18:b5:86:b1:c5:8e:26:a0:5d:c7:99:ba:ec:1e:
a4:45:dd:49:0f:08:03:6b:9f:90:c3:59:d2:c7:ee:
8e:1f:cf:3c:fa:b7:54:07:99:85:6b:14:54:12:d3:
25:1c:c2:66:53:ed:40:fe:01:2a:05:95:52:cd:08:
f9:df:c1:1f:0c:54:77:6d:d1:8d:e3:ef:17:6b:45:
96:56:00:ab:72:37:e3:05:19:45:08:aa:c1:d3:86:
07:ce:61:f0:50:d3:6e:55:bb:73:89:2c:26:c2:52:
33:83:38:93:e3:d4:a4:2d:54:ed:ee:fd:45:fa:41:
76:cf:9e:6c:2a:d1:f6:18:b2:b5:17:67:58:8f:5a:
86:fd:e5:d0:12:a2:0b:85:a7:ac:bf:d2:6e:bc:eb:
eb:fd:a3:ea:88:3e:89:04:7b:24:d6:d5:27:f1:85:
5c:3d:2e:3f:0b:2e:9c:7a:3e:0f:c1:31:36:9b:3b:
fe:7e:ed:84:9f:8d:67:60:de:1d:73:a9:5d:fa:e0:
4a:bb:4f:df:29:9f:e2:3e:d1:9a:fd:dd:30:ca:b8:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B9:AC:7F:31:9F:02:B6:91:1B:86:95:FD:24:DF:64:E6:72:91:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2D5E08C49CE11F0A5E274D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:bc:b8:93:8b:28:23:9e:ac:fe:48:7e:69:16:ba:20:79:40:
0c:0a:fd:10:e6:06:59:55:b2:f1:7c:88:d1:ea:61:a4:9f:64:
73:d8:9e:2c:ff:e1:5d:10:33:32:03:99:3c:64:74:b0:2c:6b:
de:81:62:f8:cd:c9:8f:eb:d6:8e:0b:2a:ca:de:3d:2a:22:43:
35:29:00:61:33:ca:3c:b2:5a:ae:4c:d6:06:1d:cb:ad:c2:e6:
ca:da:f6:f9:09:bc:72:90:aa:6c:41:93:24:2b:33:f0:c5:e8:
9a:c0:32:a4:8d:b9:a5:e9:eb:40:d8:6a:49:6b:c9:4e:01:23:
30:38:4b:b8:8e:bd:8e:7c:26:69:fd:2b:4e:54:db:ba:78:bf:
ba:7e:f7:60:39:b2:76:26:13:82:1c:2a:13:13:1b:e0:ff:69:
dd:7b:a4:4c:cf:eb:d2:8a:e3:31:fb:62:34:54:4e:19:2c:ff:
61:2f:7b:43:47:e8:ea:a0:c1:84:37:be:93:db:54:a3:9a:c5:
51:f6:59:36:0a:04:1c:f2:01:83:f2:df:70:31:ef:6c:3a:d5:
e2:ec:c2:84:35:41:dc:1b:b0:32:43:b1:bc:ea:0f:ac:1d:3c:
a5:72:c2:cc:c7:5a:bc:6e:19:5d:94:76:1b:c8:bc:5d:b9:be:
dd:65:2f:d8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVw2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjE1MDk1NDEyWhcNMjUwNzEwMDk1NDEyWjAYMRYw
FAYDVQQDEw02ODRlOTg0OC0xZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvVGyR6/qnpuD7KIuVMwQWsDuOKMFEsBwrD9ktxm6bofMkF6jiXmgoCqb
1EzCGLWGscWOJqBdx5m67B6kRd1JDwgDa5+Qw1nSx+6OH888+rdUB5mFaxRUEtMl
HMJmU+1A/gEqBZVSzQj538EfDFR3bdGN4+8Xa0WWVgCrcjfjBRlFCKrB04YHzmHw
UNNuVbtziSwmwlIzgziT49SkLVTt7v1F+kF2z55sKtH2GLK1F2dYj1qG/eXQEqIL
haesv9JuvOvr/aPqiD6JBHsk1tUn8YVcPS4/Cy6cej4PwTE2mzv+fu2En41nYN4d
c6ld+uBKu0/fKZ/iPtGa/d0wyriJZQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMq5
rH8xnwK2kRuGlf0k32TmcpHtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMkQ1RTA4QzQ5Q0UxMUYwQTVFMjc0RDFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcIwMA0GCSqGSIb3DQEBCwUA
A4IBAQCivLiTiygjnqz+SH5pFrogeUAMCv0Q5gZZVbLxfIjR6mGkn2Rz2J4s/+Fd
EDMyA5k8ZHSwLGvegWL4zcmP69aOCyrK3j0qIkM1KQBhM8o8slquTNYGHcutwubK
2vb5CbxykKpsQZMkKzPwxeiawDKkjbml6etA2GpJa8lOASMwOEu4jr2OfCZp/StO
VNu6eL+6fvdgObJ2JhOCHCoTExvg/2nde6RMz+vSiuMx+2I0VE4ZLP9hL3tDR+jq
oMGEN76T21SjmsVR9lk2CgQc8gGD8t9wMe9sOtXi7MKENUHcG7AyQ7G86g+sHTyl
csLMx1q8bhldlHYbyLxdub7dZS/Y
-----END CERTIFICATE-----
Generated at Sun Jun 22 18:35:06 2025 by rpki-client