Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/312E3A94267311F0BB0A42B8DAE4EC9C.roa
File: 312E3A94267311F0BB0A42B8DAE4EC9C.roa (raw, json)
Hash identifier: oySBbw8nCty13016ABrupNKMM1PkOIzpqraL+1Q4Kec=
Subject key identifier: DB:0D:7D:9F:2E:CF:88:54:0B:4B:29:37:A3:D6:E6:AF:FE:2B:DB:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015138
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/312E3A94267311F0BB0A42B8DAE4EC9C.roa
Signing time: Thu 01 May 2025 10:01:04 +0000
ROA not before: Thu 01 May 2025 10:00:59 +0000
ROA not after: Wed 26 Apr 2028 10:00:59 +0000
asID: 17561
IP address blocks: 45.197.225.0/24 maxlen: 24
45.197.227.0/24 maxlen: 24
45.197.228.0/24 maxlen: 24
45.197.230.0/24 maxlen: 24
45.197.232.0/24 maxlen: 24
45.197.234.0/24 maxlen: 24
45.197.236.0/24 maxlen: 24
45.197.238.0/24 maxlen: 24
45.199.152.0/24 maxlen: 24
45.199.153.0/24 maxlen: 24
45.199.156.0/24 maxlen: 24
45.199.157.0/24 maxlen: 24
45.202.0.0/24 maxlen: 24
45.202.1.0/24 maxlen: 24
45.202.2.0/24 maxlen: 24
45.202.3.0/24 maxlen: 24
45.202.4.0/24 maxlen: 24
45.202.5.0/24 maxlen: 24
45.202.6.0/24 maxlen: 24
45.202.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86328 (0x15138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 10:00:59 2025 GMT
Not After : Apr 26 10:00:59 2028 GMT
Subject: CN=68134660-fb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:a7:32:4d:e4:4a:c3:5d:77:23:c5:23:03:
ba:db:e4:f0:3d:1a:72:a4:41:d9:01:64:b9:d4:c4:
f9:6c:c5:40:da:65:61:d6:95:0f:e0:e4:16:dc:92:
33:72:9c:b5:97:fe:aa:a4:dd:1f:90:69:fd:85:be:
56:7a:2e:8a:9c:97:23:27:35:76:3a:54:89:fe:e7:
80:fc:13:7c:69:41:56:f7:bc:ac:0d:56:64:43:b5:
68:84:db:83:c7:7d:ed:81:cf:6b:08:ed:51:0d:6f:
e8:8d:9f:eb:b2:83:24:68:44:0c:d5:b9:00:93:ac:
85:34:ea:f7:80:a1:e2:1f:2c:1b:f7:6a:7c:51:5f:
26:40:15:98:2e:04:99:49:ce:b3:ba:e6:40:65:fc:
a0:41:d1:57:14:30:01:50:68:b5:a3:0a:c6:d7:d5:
d6:94:a2:22:51:53:a4:36:cc:43:ac:12:0a:d5:bb:
ef:4c:7c:1c:1a:6c:ea:d1:3c:e9:88:e9:92:0b:f8:
5b:88:55:e3:15:99:fc:a5:2e:1d:c6:7a:c6:0d:9a:
30:be:69:8e:0e:6e:d5:bc:29:9d:4c:48:11:db:93:
0f:d1:75:f3:e6:b3:dd:e7:c8:b6:53:f6:b6:cb:06:
20:e6:e0:04:ce:e2:db:db:eb:4a:91:b6:c4:d0:39:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0D:7D:9F:2E:CF:88:54:0B:4B:29:37:A3:D6:E6:AF:FE:2B:DB:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/312E3A94267311F0BB0A42B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.225.0/24
45.197.227.0-45.197.228.255
45.197.230.0/24
45.197.232.0/24
45.197.234.0/24
45.197.236.0/24
45.197.238.0/24
45.199.152.0/23
45.199.156.0/23
45.202.0.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:14:9d:17:5d:fc:22:ee:77:3e:28:57:0d:a0:fc:d2:a5:86:
81:ed:61:5d:e5:8f:68:fb:b5:a4:f7:57:67:2c:57:d8:2e:b0:
66:ce:02:91:8a:45:0f:89:be:aa:ee:ee:e2:96:b7:12:f4:e1:
ad:3d:db:77:75:6f:ff:e8:2d:21:16:d0:32:8b:e3:01:32:b5:
bd:93:fe:c6:2c:5e:33:34:10:28:f1:7e:86:19:29:f8:dd:34:
d5:27:f5:c2:7c:7d:52:2b:53:8e:46:32:22:5a:f3:df:66:7b:
a6:1a:f6:56:e8:e2:8f:39:0e:b3:18:33:d5:4b:72:2b:e7:8c:
92:b8:e1:00:c1:ac:06:54:cf:03:a2:3b:53:a0:9b:86:75:24:
58:0a:f7:63:40:83:0f:49:c2:6e:47:9b:c8:eb:ff:b1:ec:d9:
04:cb:9f:72:08:41:52:8e:99:6a:8b:82:9b:1b:48:5a:5c:e8:
81:d1:76:3f:0a:3c:33:4d:be:65:9a:f0:ff:b3:3a:4c:59:a5:
86:a7:e0:5f:bc:7f:a9:bc:1d:10:e2:1e:1c:a4:69:1f:e0:cf:
3b:ea:0b:20:e1:32:a4:74:52:88:74:b1:ac:d1:25:1b:8c:cc:
eb:cd:7a:f3:ea:0c:57:54:35:a4:77:31:1a:21:d1:90:80:26:
03:0b:ab:65
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIDAVE4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTAxMTAwMDU5WhcNMjgwNDI2MTAwMDU5WjAYMRYw
FAYDVQQDEw02ODEzNDY2MC1mYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp5enMk3kSsNddyPFIwO62+TwPRpypEHZAWS51MT5bMVA2mVh1pUP4OQW
3JIzcpy1l/6qpN0fkGn9hb5Wei6KnJcjJzV2OlSJ/ueA/BN8aUFW97ysDVZkQ7Vo
hNuDx33tgc9rCO1RDW/ojZ/rsoMkaEQM1bkAk6yFNOr3gKHiHywb92p8UV8mQBWY
LgSZSc6zuuZAZfygQdFXFDABUGi1owrG19XWlKIiUVOkNsxDrBIK1bvvTHwcGmzq
0TzpiOmSC/hbiFXjFZn8pS4dxnrGDZowvmmODm7VvCmdTEgR25MP0XXz5rPd58i2
U/a2ywYg5uAEzuLb2+tKkbbE0Dk0owIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFNsN
fZ8uz4hUC0spN6PW5q/+K9sPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMTJFM0E5NDI2NzMxMUYwQkIwQTQyQjhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQALcXhMAwDBAAtxeMDBAAtxeQD
BAAtxeYDBAAtxegDBAAtxeoDBAAtxewDBAAtxe4DBAEtx5gDBAEtx5wDBAMtygAw
DQYJKoZIhvcNAQELBQADggEBAKIUnRdd/CLudz4oVw2g/NKlhoHtYV3lj2j7taT3
V2csV9gusGbOApGKRQ+Jvqru7uKWtxL04a0923d1b//oLSEW0DKL4wEytb2T/sYs
XjM0ECjxfoYZKfjdNNUn9cJ8fVIrU45GMiJa899me6Ya9lbo4o85DrMYM9VLcivn
jJK44QDBrAZUzwOiO1Ogm4Z1JFgK92NAgw9Jwm5Hm8jr/7Hs2QTLn3IIQVKOmWqL
gpsbSFpc6IHRdj8KPDNNvmWa8P+zOkxZpYan4F+8f6m8HRDiHhykaR/gzzvqCyDh
MqR0Uoh0sazRJRuMzOvNevPqDFdUNaR3MRoh0ZCAJgMLq2U=
-----END CERTIFICATE-----
Generated at Sun May 11 18:49:47 2025 by rpki-client