Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A84EB7D4244D11F0ABE59FD1DAE4EC9C.roa
File: A84EB7D4244D11F0ABE59FD1DAE4EC9C.roa (raw, json)
Hash identifier: aVM0nq4+iqUD0j0noB0+ONspF3xyol6K+PE8jo7P5RA=
Subject key identifier: 86:C6:94:70:92:B3:B0:AD:40:96:B7:A9:6E:98:CB:89:69:3E:D0:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A84EB7D4244D11F0ABE59FD1DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 16:27:21 +0000
ROA not before: Mon 28 Apr 2025 16:27:16 +0000
ROA not after: Tue 28 Apr 2026 16:27:16 +0000
asID: 984
IP address blocks: 45.194.194.0/24 maxlen: 24
45.194.195.0/24 maxlen: 24
45.194.196.0/24 maxlen: 24
45.194.197.0/24 maxlen: 24
45.194.198.0/24 maxlen: 24
45.194.199.0/24 maxlen: 24
45.194.200.0/24 maxlen: 24
45.194.201.0/24 maxlen: 24
45.194.202.0/24 maxlen: 24
45.194.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85953 (0x14fc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 16:27:16 2025 GMT
Not After : Apr 28 16:27:16 2026 GMT
Subject: CN=680fac69-9510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:44:74:08:bb:59:2c:58:b2:78:e4:28:e4:a9:
c2:f5:d1:06:a4:32:91:ab:48:ab:77:b5:02:58:4d:
a2:17:17:4e:f1:7a:23:21:05:96:40:f7:dc:87:75:
78:49:f2:48:31:4e:10:11:70:45:d5:84:3c:c8:81:
21:5d:c7:59:ea:1a:1c:2e:23:85:cb:d6:f5:2b:28:
95:c0:f0:6c:d5:53:6e:68:0d:38:35:d2:47:aa:11:
8f:11:07:c3:55:70:c2:59:7d:69:53:e6:92:33:ed:
0c:02:02:9f:ed:a6:ab:1c:73:d7:6d:7c:52:59:13:
c0:08:b4:60:a1:7c:76:92:c0:bc:a7:ed:ec:22:93:
f3:cf:02:a5:12:cd:2b:ae:ee:85:49:00:94:59:58:
cf:04:02:5e:b2:4e:fc:6d:96:98:0e:18:f9:6a:1b:
00:d6:f0:43:9a:66:d4:dc:40:22:ae:50:b7:a5:8c:
0d:3b:a8:4b:1e:07:d8:d3:08:68:dc:9f:74:af:21:
49:c0:f3:cc:67:a0:2c:5e:e5:20:db:0d:39:1d:e8:
68:cc:13:6f:44:63:8b:37:98:65:57:02:42:a2:27:
d8:db:0b:0b:1a:5d:da:80:b9:c5:db:8b:30:79:a6:
1f:4e:1c:51:bc:f0:50:7c:63:36:23:13:6c:52:e8:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C6:94:70:92:B3:B0:AD:40:96:B7:A9:6E:98:CB:89:69:3E:D0:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A84EB7D4244D11F0ABE59FD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.194.0-45.194.203.255
Signature Algorithm: sha256WithRSAEncryption
5f:1f:0a:fa:7c:cc:65:d6:0a:3e:73:96:fd:56:2a:44:77:5a:
70:b3:1b:96:5e:2d:6f:44:d1:7b:1f:f3:23:13:43:3e:7f:ea:
11:85:58:13:29:24:6c:a1:00:02:4b:4d:5c:cb:58:4c:4a:90:
00:7c:a1:02:8a:74:1c:37:0e:8d:b0:25:30:e0:d5:85:9f:ae:
b8:8b:4e:63:e6:96:d8:5a:c7:ce:e8:d9:e8:ac:28:d1:d8:83:
31:5f:08:fc:05:be:bc:8e:be:41:e0:c5:d2:14:40:86:3d:e0:
05:bf:39:fa:69:ab:80:7f:44:0e:f3:4c:e4:b1:f6:b5:e2:fc:
f6:cd:d6:82:55:52:77:4d:9e:cf:b4:f5:77:05:fa:66:ec:3f:
da:41:8d:c6:b5:6e:d9:e4:f6:07:68:d1:ff:f6:e0:e8:6c:d1:
e0:6c:13:9c:be:80:17:f8:1e:30:71:2d:cb:39:d7:b2:75:36:
67:60:ef:a7:44:be:0e:5c:da:fc:27:fd:e5:37:9b:74:30:6e:
fa:f8:a6:c1:60:34:b8:db:e4:17:b7:c2:93:ba:bf:5a:58:e2:
46:77:7f:fb:86:0b:18:2b:3b:34:c3:5e:ec:6c:82:44:ae:8d:
0d:eb:59:da:c6:d3:c7:97:1d:6d:17:84:e0:fd:6d:38:e7:22:
a8:d1:ac:12
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAU/BMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI4MTYyNzE2WhcNMjYwNDI4MTYyNzE2WjAYMRYw
FAYDVQQDEw02ODBmYWM2OS05NTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5ER0CLtZLFiyeOQo5KnC9dEGpDKRq0ird7UCWE2iFxdO8XojIQWWQPfc
h3V4SfJIMU4QEXBF1YQ8yIEhXcdZ6hocLiOFy9b1KyiVwPBs1VNuaA04NdJHqhGP
EQfDVXDCWX1pU+aSM+0MAgKf7aarHHPXbXxSWRPACLRgoXx2ksC8p+3sIpPzzwKl
Es0rru6FSQCUWVjPBAJesk78bZaYDhj5ahsA1vBDmmbU3EAirlC3pYwNO6hLHgfY
0who3J90ryFJwPPMZ6AsXuUg2w05HehozBNvRGOLN5hlVwJCoifY2wsLGl3agLnF
24sweaYfThxRvPBQfGM2IxNsUuga1QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIbG
lHCSs7CtQJa3qW6Yy4lpPtDuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BODRFQjdENDI0NEQxMUYwQUJFNTlGRDFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEtwsIDBAItwsgwDQYJKoZI
hvcNAQELBQADggEBAF8fCvp8zGXWCj5zlv1WKkR3WnCzG5ZeLW9E0Xsf8yMTQz5/
6hGFWBMpJGyhAAJLTVzLWExKkAB8oQKKdBw3Do2wJTDg1YWfrriLTmPmlthax87o
2eisKNHYgzFfCPwFvryOvkHgxdIUQIY94AW/Ofppq4B/RA7zTOSx9rXi/PbN1oJV
UndNns+09XcF+mbsP9pBjca1btnk9gdo0f/24Ohs0eBsE5y+gBf4HjBxLcs517J1
Nmdg76dEvg5c2vwn/eU3m3Qwbvr4psFgNLjb5Be3wpO6v1pY4kZ3f/uGCxgrOzTD
XuxsgkSujQ3rWdrG08eXHW0XhOD9bTjnIqjRrBI=
-----END CERTIFICATE-----
Generated at Sat May 10 16:42:15 2025 by rpki-client