Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C959FCE244E11F0ABBD41D6DAE4EC9C.roa
File: 9C959FCE244E11F0ABBD41D6DAE4EC9C.roa (raw, json)
Hash identifier: 11VZCbS0hGUgNE1qD9fPa2VqNJ16Zv++7txxwuB3tco=
Subject key identifier: 18:F3:1B:F4:24:77:CB:1D:98:21:68:E4:DD:07:51:57:85:1B:3C:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C959FCE244E11F0ABBD41D6DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 16:34:11 +0000
ROA not before: Mon 28 Apr 2025 16:34:06 +0000
ROA not after: Tue 28 Apr 2026 16:34:06 +0000
asID: 984
IP address blocks: 45.194.204.0/24 maxlen: 24
45.194.205.0/24 maxlen: 24
45.194.206.0/24 maxlen: 24
45.194.207.0/24 maxlen: 24
45.194.208.0/24 maxlen: 24
45.194.209.0/24 maxlen: 24
45.194.210.0/24 maxlen: 24
45.194.211.0/24 maxlen: 24
45.194.212.0/24 maxlen: 24
45.194.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85957 (0x14fc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 16:34:06 2025 GMT
Not After : Apr 28 16:34:06 2026 GMT
Subject: CN=680fae02-ee43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:93:65:2a:4e:c3:93:bc:f0:98:ab:d0:dd:
af:61:86:8e:d3:59:4f:42:b7:4f:0f:bc:0f:a0:5a:
f1:57:03:7d:54:35:1a:23:6f:c5:ad:0e:3c:10:81:
a3:58:92:45:70:ce:99:e3:a4:a0:54:56:c2:4a:59:
67:d7:50:55:88:f2:5e:83:6d:d7:43:6c:b5:28:a5:
59:32:7e:2f:30:1f:9e:c0:a2:ed:df:30:89:d2:b6:
fe:c2:41:20:a4:50:b0:d4:a3:34:88:f5:30:5b:8d:
b0:b7:ba:94:3c:25:54:bd:e2:04:fb:25:1a:18:0e:
93:85:b1:c7:ef:e6:77:39:64:13:9c:a8:17:08:02:
10:ec:ac:20:b6:42:38:4e:85:49:6c:db:a7:8d:4e:
95:a6:17:55:74:c7:c6:3f:5a:ca:51:6a:31:35:6b:
67:fe:66:d7:86:2a:63:9c:ed:81:9c:60:8e:01:5d:
a9:cc:3d:be:e3:55:58:22:56:da:c8:eb:18:46:cc:
92:19:a3:42:58:dc:bb:7c:91:20:c8:54:d6:75:84:
20:e7:1c:5d:94:5f:3f:11:78:06:af:c8:be:9f:44:
86:8f:30:a2:9c:86:06:b2:96:6f:cd:b1:2e:a4:cb:
9a:cb:88:26:a8:10:8f:56:eb:c6:ff:18:4d:81:a2:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F3:1B:F4:24:77:CB:1D:98:21:68:E4:DD:07:51:57:85:1B:3C:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C959FCE244E11F0ABBD41D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.204.0-45.194.213.255
Signature Algorithm: sha256WithRSAEncryption
ab:bb:9a:10:4a:00:ca:c4:eb:d9:9a:ce:0e:cd:a0:b8:7d:8a:
fd:7a:d3:28:19:20:66:1f:9f:e2:68:df:2d:00:1b:71:52:0c:
d2:d2:90:2d:4b:7c:ac:8e:26:27:fe:f6:b9:2e:92:20:99:d3:
ba:4b:99:d2:cb:16:e2:b7:c0:d4:63:7a:3f:d9:44:a0:49:99:
68:f1:98:6f:88:73:87:b9:f3:e2:42:28:96:e5:8f:86:03:df:
d5:87:40:a2:44:c2:01:5f:e7:9f:0a:af:b5:c8:4a:6b:92:f4:
bd:4e:dd:0a:2e:06:df:82:94:75:17:3a:40:bc:21:99:20:fd:
25:03:de:3d:08:c6:e5:ed:c1:e9:d0:59:3b:b0:31:e8:0b:d5:
1b:e8:ac:6d:e5:2c:c3:8b:6f:97:11:84:fc:7b:a1:96:ef:56:
51:eb:96:36:98:cb:32:d9:70:60:32:1a:a1:13:28:de:23:3e:
82:73:32:2e:19:be:f4:b7:1a:bf:b1:25:d0:ed:c5:0c:8b:87:
81:2d:46:b5:5e:ca:a6:78:2e:4d:0e:1f:ac:bd:76:ac:df:ff:
c9:fc:72:2e:50:20:a1:c6:b2:f9:0c:d7:0f:bf:cf:3c:77:e3:
1c:ef:e2:61:92:36:12:e3:b7:41:b6:f7:ac:db:6b:79:0b:dc:
27:09:76:43
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAU/FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI4MTYzNDA2WhcNMjYwNDI4MTYzNDA2WjAYMRYw
FAYDVQQDEw02ODBmYWUwMi1lZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqtCTZSpOw5O88Jir0N2vYYaO01lPQrdPD7wPoFrxVwN9VDUaI2/FrQ48
EIGjWJJFcM6Z46SgVFbCSlln11BViPJeg23XQ2y1KKVZMn4vMB+ewKLt3zCJ0rb+
wkEgpFCw1KM0iPUwW42wt7qUPCVUveIE+yUaGA6ThbHH7+Z3OWQTnKgXCAIQ7Kwg
tkI4ToVJbNunjU6VphdVdMfGP1rKUWoxNWtn/mbXhipjnO2BnGCOAV2pzD2+41VY
IlbayOsYRsySGaNCWNy7fJEgyFTWdYQg5xxdlF8/EXgGr8i+n0SGjzCinIYGspZv
zbEupMuay4gmqBCPVuvG/xhNgaI0TwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBjz
G/Qkd8sdmCFo5N0HUVeFGzx5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85Qzk1OUZDRTI0NEUxMUYwQUJCRDQxRDZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItwswDBAEtwtQwDQYJKoZI
hvcNAQELBQADggEBAKu7mhBKAMrE69mazg7NoLh9iv160ygZIGYfn+Jo3y0AG3FS
DNLSkC1LfKyOJif+9rkukiCZ07pLmdLLFuK3wNRjej/ZRKBJmWjxmG+Ic4e58+JC
KJblj4YD39WHQKJEwgFf558Kr7XISmuS9L1O3QouBt+ClHUXOkC8IZkg/SUD3j0I
xuXtwenQWTuwMegL1RvorG3lLMOLb5cRhPx7oZbvVlHrljaYyzLZcGAyGqETKN4j
PoJzMi4ZvvS3Gr+xJdDtxQyLh4EtRrVeyqZ4Lk0OH6y9dqzf/8n8ci5QIKHGsvkM
1w+/zzx34xzv4mGSNhLjt0G296zba3kL3CcJdkM=
-----END CERTIFICATE-----
Generated at Sun May 11 16:49:45 2025 by rpki-client