Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB010738265F11F09E850BBBDAE4EC9C.roa
File: BB010738265F11F09E850BBBDAE4EC9C.roa (raw, json)
Hash identifier: EDbT+smFXafD9hRoA6UOAkxmIIjL9po/6rCMOsVeO4k=
Subject key identifier: 0A:71:29:04:93:83:1F:8A:3F:30:AE:28:CB:F4:BD:01:61:0E:06:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01511E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB010738265F11F09E850BBBDAE4EC9C.roa
Signing time: Thu 01 May 2025 07:41:45 +0000
ROA not before: Thu 01 May 2025 07:41:41 +0000
ROA not after: Tue 11 Apr 2028 07:41:41 +0000
asID: 17561
IP address blocks: 45.192.2.0/24 maxlen: 24
45.192.4.0/24 maxlen: 24
45.192.5.0/24 maxlen: 24
45.192.6.0/24 maxlen: 24
45.192.7.0/24 maxlen: 24
45.198.64.0/24 maxlen: 24
45.198.65.0/24 maxlen: 24
45.198.66.0/24 maxlen: 24
45.198.68.0/24 maxlen: 24
45.198.70.0/24 maxlen: 24
45.198.71.0/24 maxlen: 24
45.198.74.0/24 maxlen: 24
45.198.75.0/24 maxlen: 24
45.198.76.0/24 maxlen: 24
45.198.80.0/24 maxlen: 24
45.198.83.0/24 maxlen: 24
45.198.85.0/24 maxlen: 24
45.198.86.0/24 maxlen: 24
45.202.100.0/24 maxlen: 24
45.202.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86302 (0x1511e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 07:41:41 2025 GMT
Not After : Apr 11 07:41:41 2028 GMT
Subject: CN=681325b9-448b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:09:04:e7:cb:e8:71:bd:a3:07:8e:90:b2:
bc:ee:46:1c:9a:55:c1:49:11:eb:9b:9f:30:56:d5:
58:b6:6b:8f:46:38:1a:06:da:37:40:34:16:1b:9c:
c4:56:a3:4f:dc:ac:1a:5a:03:2b:69:c4:65:ad:9c:
24:a7:95:6b:41:e4:ff:7f:36:f8:68:fa:3a:2d:07:
23:c6:90:14:c2:39:83:ce:3e:4b:20:1f:88:e5:ec:
67:f2:f7:1e:fd:5a:29:85:cf:52:8a:b3:e2:ca:bb:
0d:19:1d:3b:c4:7c:0f:cc:38:ba:57:22:b6:07:d6:
5b:d2:6c:92:b7:e3:b9:85:c4:0a:00:d4:89:b5:3e:
75:e9:ac:63:3a:36:da:94:7f:00:f2:b7:97:b9:c5:
d2:d0:a2:7e:ee:08:e5:9c:bc:7b:5f:3e:e6:4e:8a:
a5:c0:88:39:a2:9f:ee:e0:48:b0:04:a3:13:80:57:
ed:64:e3:f5:ec:76:d4:55:0c:38:c1:dd:d6:57:52:
f6:99:e3:48:d5:8d:7d:86:32:6b:3b:9c:5c:76:f0:
a1:d4:eb:a7:cf:a4:2c:4e:20:f9:80:a7:84:34:50:
5b:68:84:74:40:dc:f4:86:30:76:eb:9f:bb:8f:c4:
0c:44:3c:50:c0:82:fa:21:94:f5:f6:43:3a:f6:fa:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:71:29:04:93:83:1F:8A:3F:30:AE:28:CB:F4:BD:01:61:0E:06:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB010738265F11F09E850BBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.2.0/24
45.192.4.0/22
45.198.64.0-45.198.66.255
45.198.68.0/24
45.198.70.0/23
45.198.74.0-45.198.76.255
45.198.80.0/24
45.198.83.0/24
45.198.85.0-45.198.86.255
45.202.100.0/23
Signature Algorithm: sha256WithRSAEncryption
16:c5:47:6e:27:97:87:f9:d8:f7:4a:7b:e9:47:8f:9f:a5:2f:
fc:96:26:1e:38:57:58:83:d3:a9:99:4a:b0:16:5e:c1:fd:d1:
bf:cc:e1:78:01:7f:07:2b:46:36:65:e6:39:eb:f6:61:b0:86:
8c:c3:46:b2:79:7b:d6:4e:0f:f8:0d:17:3e:c5:14:89:6f:6a:
fc:26:ef:03:4f:41:97:0c:df:c6:b7:ab:1b:c8:37:43:8e:e0:
4a:36:f2:79:6d:c5:9a:0e:08:60:43:0f:f9:d2:7f:f5:b1:de:
63:3e:1a:15:04:55:bb:48:0a:31:43:8f:c4:5f:3c:ac:b8:5f:
23:39:2a:5f:c4:28:df:b0:a1:2d:85:e6:70:da:e0:28:18:f7:
74:23:9a:f5:a9:68:19:a2:64:fc:02:4e:32:b2:b0:70:b5:5f:
10:f9:1a:69:7c:fd:d3:6c:c0:9e:79:cc:45:54:28:05:c6:1a:
90:e1:d3:b4:e5:3e:5c:49:86:77:07:5d:f2:d3:0a:68:df:23:
74:9f:6b:14:5b:2e:59:af:53:e3:80:28:74:73:b7:a8:48:bc:
13:d8:62:66:83:31:bf:cc:86:2d:ac:10:e7:0c:fe:dd:8f:c4:
84:9a:48:eb:87:fa:4d:1e:de:0b:b4:0e:4f:42:8f:5b:ee:95:
8a:4a:e5:5f
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgIDAVEeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTAxMDc0MTQxWhcNMjgwNDExMDc0MTQxWjAYMRYw
FAYDVQQDEw02ODEzMjViOS00NDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt30JBOfL6HG9oweOkLK87kYcmlXBSRHrm58wVtVYtmuPRjgaBto3QDQW
G5zEVqNP3KwaWgMracRlrZwkp5VrQeT/fzb4aPo6LQcjxpAUwjmDzj5LIB+I5exn
8vce/Vophc9SirPiyrsNGR07xHwPzDi6VyK2B9Zb0mySt+O5hcQKANSJtT516axj
OjbalH8A8reXucXS0KJ+7gjlnLx7Xz7mToqlwIg5op/u4EiwBKMTgFftZOP17HbU
VQw4wd3WV1L2meNI1Y19hjJrO5xcdvCh1Ounz6QsTiD5gKeENFBbaIR0QNz0hjB2
65+7j8QMRDxQwIL6IZT19kM69vqJWwIDAQABo4IC8DCCAuwwHQYDVR0OBBYEFApx
KQSTgx+KPzCuKMv0vQFhDgaFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQjAxMDczODI2NUYxMUYwOUU4NTBCQkJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQALcACAwQCLcAEMAwDBAYtxkAD
BAAtxkIDBAAtxkQDBAEtxkYwDAMEAS3GSgMEAC3GTAMEAC3GUAMEAC3GUzAMAwQA
LcZVAwQALcZWAwQBLcpkMA0GCSqGSIb3DQEBCwUAA4IBAQAWxUduJ5eH+dj3Snvp
R4+fpS/8liYeOFdYg9OpmUqwFl7B/dG/zOF4AX8HK0Y2ZeY56/ZhsIaMw0ayeXvW
Tg/4DRc+xRSJb2r8Ju8DT0GXDN/Gt6sbyDdDjuBKNvJ5bcWaDghgQw/50n/1sd5j
PhoVBFW7SAoxQ4/EXzysuF8jOSpfxCjfsKEtheZw2uAoGPd0I5r1qWgZomT8Ak4y
srBwtV8Q+RppfP3TbMCeecxFVCgFxhqQ4dO05T5cSYZ3B13y0wpo3yN0n2sUWy5Z
r1PjgCh0c7eoSLwT2GJmgzG/zIYtrBDnDP7dj8SEmkjrh/pNHt4LtA5PQo9b7pWK
SuVf
-----END CERTIFICATE-----
Generated at Mon May 12 04:34:06 2025 by rpki-client