Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B43450B4244C11F0B2DC51CBDAE4EC9C.roa
File: B43450B4244C11F0B2DC51CBDAE4EC9C.roa (raw, json)
Hash identifier: i2jH3gEXM6WbBYrAywRkvRsNhAydTjfpBrlOmZvoFoc=
Subject key identifier: 41:EA:FA:C3:A4:B4:D7:E2:38:B1:6B:AC:8B:17:C3:95:19:43:A5:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014FBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B43450B4244C11F0B2DC51CBDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 16:20:31 +0000
ROA not before: Mon 28 Apr 2025 16:20:27 +0000
ROA not after: Tue 28 Apr 2026 16:20:27 +0000
asID: 984
IP address blocks: 45.194.184.0/24 maxlen: 24
45.194.185.0/24 maxlen: 24
45.194.186.0/24 maxlen: 24
45.194.187.0/24 maxlen: 24
45.194.188.0/24 maxlen: 24
45.194.189.0/24 maxlen: 24
45.194.190.0/24 maxlen: 24
45.194.191.0/24 maxlen: 24
45.194.192.0/24 maxlen: 24
45.194.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85949 (0x14fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 16:20:27 2025 GMT
Not After : Apr 28 16:20:27 2026 GMT
Subject: CN=680faacf-fa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:2d:c5:1d:e2:22:bf:01:1f:30:14:26:2a:
6e:e9:10:4f:e1:f8:0c:7c:1e:0f:ac:30:22:c9:76:
dc:28:cb:a4:50:32:bc:50:15:7c:4c:64:1a:b0:5d:
78:c7:e3:82:e0:8f:9d:b6:eb:e4:0f:f8:db:d6:03:
8d:a9:9d:aa:5e:4e:9d:06:44:90:62:68:5e:33:db:
1b:aa:a1:14:be:b7:9a:7d:c2:06:b9:2b:96:6a:3a:
0d:4d:7b:8c:72:3b:6e:5a:20:bb:36:6b:e4:8f:fe:
d1:9c:7b:2e:f2:c3:6b:09:8a:4f:0a:d6:5c:99:51:
7c:01:6b:af:21:5a:b4:f5:8a:48:5e:71:a7:4f:37:
03:5b:0f:26:4c:cb:b8:ad:5d:d7:76:6b:64:5b:7f:
20:ff:bd:c2:c0:5a:5e:03:e8:73:2c:4a:b7:84:38:
9b:c0:f1:f5:f3:2b:69:5f:2a:c7:a9:8f:c5:0d:d9:
e4:b6:c6:79:1e:09:ee:c3:6e:1b:e1:15:d8:d0:75:
10:97:3b:4b:ea:d1:d7:44:da:23:2c:1c:bf:37:03:
1d:99:58:4f:e8:ea:50:e5:79:89:6b:9a:3f:cb:c0:
7d:c3:6c:de:1b:4e:bd:a3:90:fb:79:35:df:ef:da:
19:45:59:ff:06:58:ba:b4:c0:29:45:55:53:12:e7:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EA:FA:C3:A4:B4:D7:E2:38:B1:6B:AC:8B:17:C3:95:19:43:A5:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B43450B4244C11F0B2DC51CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.184.0-45.194.193.255
Signature Algorithm: sha256WithRSAEncryption
55:62:69:24:67:2d:9b:50:53:33:91:5b:06:a5:8c:e9:75:79:
50:96:67:2d:58:db:74:07:c5:76:2c:9f:d7:f1:09:d7:56:ff:
c4:3e:bc:2e:4b:12:83:d9:6e:f4:90:4b:fb:d8:70:0a:59:80:
8f:59:af:19:b1:99:56:03:2d:77:f7:b3:20:a9:5d:80:98:85:
de:f1:44:96:25:c2:0d:2c:9a:43:1e:de:2f:06:72:f5:dd:7d:
c3:2b:49:cd:ba:c2:09:19:fc:5c:9c:54:4c:20:cf:d1:24:6f:
3d:27:2b:bf:ed:17:54:85:01:ca:d0:54:c0:b0:a8:fd:11:79:
58:82:6b:a6:66:bf:57:f3:e7:b4:9a:e6:71:bb:4f:f1:fe:d6:
b6:c4:f1:f6:d0:c9:20:e7:80:e7:0e:7a:85:4d:b9:53:c7:e5:
0c:64:5d:f8:fb:b5:ff:d2:59:68:5b:99:c1:e3:da:30:1d:eb:
c5:d3:a8:0f:b3:c4:0b:df:c6:c6:18:ea:ad:e1:c1:fc:7f:ed:
ff:29:2d:56:cd:a4:0f:fa:8c:13:59:d1:d5:98:e3:69:2d:57:
e9:1b:67:8b:04:51:df:be:6e:64:95:e3:c2:f7:4a:46:1f:7b:
85:43:e4:aa:ec:4e:1b:51:9b:7c:5f:66:1b:bc:be:62:9d:24:
10:a2:35:e6
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAU+9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI4MTYyMDI3WhcNMjYwNDI4MTYyMDI3WjAYMRYw
FAYDVQQDEw02ODBmYWFjZi1mYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0jEtxR3iIr8BHzAUJipu6RBP4fgMfB4PrDAiyXbcKMukUDK8UBV8TGQa
sF14x+OC4I+dtuvkD/jb1gONqZ2qXk6dBkSQYmheM9sbqqEUvreafcIGuSuWajoN
TXuMcjtuWiC7Nmvkj/7RnHsu8sNrCYpPCtZcmVF8AWuvIVq09YpIXnGnTzcDWw8m
TMu4rV3XdmtkW38g/73CwFpeA+hzLEq3hDibwPH18ytpXyrHqY/FDdnktsZ5Hgnu
w24b4RXY0HUQlztL6tHXRNojLBy/NwMdmVhP6OpQ5XmJa5o/y8B9w2zeG069o5D7
eTXf79oZRVn/Bli6tMApRVVTEufvSwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFEHq
+sOktNfiOLFrrIsXw5UZQ6VCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNDM0NTBCNDI0NEMxMUYwQjJEQzUxQ0JEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMtwrgDBAEtwsAwDQYJKoZI
hvcNAQELBQADggEBAFViaSRnLZtQUzORWwaljOl1eVCWZy1Y23QHxXYsn9fxCddW
/8Q+vC5LEoPZbvSQS/vYcApZgI9ZrxmxmVYDLXf3syCpXYCYhd7xRJYlwg0smkMe
3i8GcvXdfcMrSc26wgkZ/FycVEwgz9Ekbz0nK7/tF1SFAcrQVMCwqP0ReViCa6Zm
v1fz57Sa5nG7T/H+1rbE8fbQySDngOcOeoVNuVPH5QxkXfj7tf/SWWhbmcHj2jAd
68XTqA+zxAvfxsYY6q3hwfx/7f8pLVbNpA/6jBNZ0dWY42ktV+kbZ4sEUd++bmSV
48L3SkYfe4VD5KrsThtRm3xfZhu8vmKdJBCiNeY=
-----END CERTIFICATE-----
Generated at Mon May 12 16:05:00 2025 by rpki-client