Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A715EE0E27F511F0BD2B86D4DAE4EC9C.roa
File: A715EE0E27F511F0BD2B86D4DAE4EC9C.roa (raw, json)
Hash identifier: k507dVAHybLMJA6a/3zmOCIbpL7n0N0YGp1E/kKGlTM=
Subject key identifier: 8C:FD:12:E2:70:2A:EE:96:E4:85:3B:DA:BA:77:6A:CB:EC:D8:56:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01519C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A715EE0E27F511F0BD2B86D4DAE4EC9C.roa
Signing time: Sat 03 May 2025 08:07:28 +0000
ROA not before: Sat 03 May 2025 08:07:23 +0000
ROA not after: Tue 10 Jun 2025 08:07:23 +0000
asID: 20473
IP address blocks: 45.196.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86428 (0x1519c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 08:07:23 2025 GMT
Not After : Jun 10 08:07:23 2025 GMT
Subject: CN=6815cebf-17f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:d0:db:86:15:3b:be:be:bd:63:54:ff:da:
a5:4f:b4:4d:a2:e8:24:47:9f:50:43:d3:5c:70:7b:
35:14:cf:5c:14:f5:b1:16:7f:54:7b:00:5d:87:4d:
90:ba:b4:fc:af:d8:dc:ae:41:52:c1:08:8f:5b:d6:
9b:e5:0b:53:63:29:5a:0d:1b:64:19:06:7e:9e:cb:
2c:b3:b2:24:dc:75:af:54:c3:27:54:20:ef:c5:b9:
df:f6:c6:e1:fa:3b:6b:44:63:f9:57:ac:aa:fa:55:
37:95:38:7d:ba:9c:20:c1:52:4c:59:8f:68:8f:79:
a1:4d:86:45:f5:47:29:81:da:33:b4:56:b4:10:4f:
ea:66:b0:ff:5f:8d:d2:70:09:b1:07:df:cf:b8:c8:
d1:f5:70:54:18:8e:7f:c5:d9:7e:fe:7d:6a:14:5b:
6d:7e:88:fe:d9:ce:0d:91:c5:73:e2:9e:4d:d9:59:
24:32:46:d4:67:f0:23:69:b9:64:e4:fa:af:cd:a7:
13:18:c6:cc:5f:ab:87:d1:67:ff:a3:33:6b:49:24:
8c:8c:2e:c0:8b:35:5e:91:9f:6b:b6:fa:42:01:ec:
6f:d3:42:f4:5f:9c:23:1c:fc:09:e9:e3:85:ea:2c:
81:9c:1f:a5:42:44:5a:da:29:8b:3e:ca:09:41:43:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:12:E2:70:2A:EE:96:E4:85:3B:DA:BA:77:6A:CB:EC:D8:56:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A715EE0E27F511F0BD2B86D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.200.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7c:f6:88:42:cf:0b:35:9d:48:d5:ff:f3:ae:13:1d:15:81:
d5:5f:31:2e:b9:9c:0b:86:5b:0e:d0:18:70:6a:23:db:b1:3a:
73:fc:c7:af:6c:ff:e9:59:50:04:18:37:1f:70:89:d1:8e:b2:
a6:22:d5:cf:b2:36:5a:50:0b:d8:cb:4b:1c:84:cc:5e:5e:aa:
41:7d:df:0e:a2:54:70:81:59:26:2c:10:18:6d:e1:5e:fe:f2:
80:e8:30:5d:82:36:80:c6:7e:8e:a3:62:71:55:2d:f0:24:83:
7d:48:95:d7:7e:83:04:3a:7a:76:35:d3:47:3b:44:00:d6:10:
93:11:29:c8:d9:06:50:8c:a2:d7:47:20:3e:2d:99:44:29:f7:
c8:0d:40:03:7e:a7:fb:54:e6:24:42:2e:3c:e2:85:a3:94:8c:
8e:f5:4f:c4:f4:47:fa:06:45:08:15:9c:2a:af:09:6a:99:e5:
f4:31:f9:1c:8c:31:4e:50:83:04:af:ca:d9:b0:54:e1:0b:95:
61:91:e0:d4:b0:b2:ec:74:67:f3:e5:08:19:c9:ef:a5:78:7f:
1a:b0:e8:13:90:0a:9b:4a:25:c3:2c:7b:33:b9:6f:cb:52:14:
7a:31:58:8f:5d:8f:eb:2a:43:88:dc:67:b0:ef:fc:f6:e7:73:
3a:c0:71:2a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVGcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTAzMDgwNzIzWhcNMjUwNjEwMDgwNzIzWjAYMRYw
FAYDVQQDEw02ODE1Y2ViZi0xN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0qzQ24YVO76+vWNU/9qlT7RNougkR59QQ9NccHs1FM9cFPWxFn9UewBd
h02QurT8r9jcrkFSwQiPW9ab5QtTYylaDRtkGQZ+nssss7Ik3HWvVMMnVCDvxbnf
9sbh+jtrRGP5V6yq+lU3lTh9upwgwVJMWY9oj3mhTYZF9UcpgdoztFa0EE/qZrD/
X43ScAmxB9/PuMjR9XBUGI5/xdl+/n1qFFttfoj+2c4NkcVz4p5N2VkkMkbUZ/Aj
ablk5PqvzacTGMbMX6uH0Wf/ozNrSSSMjC7AizVekZ9rtvpCAexv00L0X5wjHPwJ
6eOF6iyBnB+lQkRa2imLPsoJQUMfVwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIz9
EuJwKu6W5IU72rp3asvs2FYqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNzE1RUUwRTI3RjUxMUYwQkQyQjg2RDREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTIMA0GCSqGSIb3DQEBCwUA
A4IBAQA3fPaIQs8LNZ1I1f/zrhMdFYHVXzEuuZwLhlsO0BhwaiPbsTpz/MevbP/p
WVAEGDcfcInRjrKmItXPsjZaUAvYy0schMxeXqpBfd8OolRwgVkmLBAYbeFe/vKA
6DBdgjaAxn6Oo2JxVS3wJIN9SJXXfoMEOnp2NdNHO0QA1hCTESnI2QZQjKLXRyA+
LZlEKffIDUADfqf7VOYkQi484oWjlIyO9U/E9Ef6BkUIFZwqrwlqmeX0MfkcjDFO
UIMEr8rZsFThC5VhkeDUsLLsdGfz5QgZye+leH8asOgTkAqbSiXDLHszuW/LUhR6
MViPXY/rKkOI3Gew7/z253M6wHEq
-----END CERTIFICATE-----
Generated at Sat May 10 10:13:06 2025 by rpki-client