Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02A0B7061F6111F0A8C273E4DAE4EC9C.roa
File: 02A0B7061F6111F0A8C273E4DAE4EC9C.roa (raw, json)
Hash identifier: +68EqyA0oGp4/0EWdfj5IJvtmObdKTo+51dtDJcRLDI=
Subject key identifier: 21:12:AD:FE:D8:48:BF:35:51:39:47:55:EA:44:DC:C4:94:99:41:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02A0B7061F6111F0A8C273E4DAE4EC9C.roa
Signing time: Tue 22 Apr 2025 10:03:17 +0000
ROA not before: Tue 22 Apr 2025 10:03:12 +0000
ROA not after: Wed 31 Dec 2025 10:03:12 +0000
asID: 17561
IP address blocks: 45.207.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85510 (0x14e06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 10:03:12 2025 GMT
Not After : Dec 31 10:03:12 2025 GMT
Subject: CN=68076965-cac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:05:80:7a:f4:42:23:43:6c:1b:43:53:a0:
11:04:88:5e:fb:2f:c2:c6:bc:c6:e3:a2:70:d3:89:
c6:e7:df:f8:a0:87:c7:0a:9d:a4:97:f4:37:ea:a2:
bc:b7:c8:91:ac:2a:a1:a6:0a:c8:ce:da:31:1b:b7:
a6:83:f0:9d:b0:e8:2b:cb:18:6f:cc:48:07:82:0d:
a4:e1:7b:93:85:bf:36:bf:5a:e0:ec:fc:37:5d:fe:
0d:b5:2d:a5:52:24:25:de:61:34:c1:61:bb:5b:39:
f8:3f:b2:34:aa:c6:82:fd:6e:26:88:b4:54:35:88:
98:69:0e:84:0e:3e:4c:ed:ff:f6:54:bf:12:65:1e:
ae:59:cc:9d:b3:86:84:df:90:47:6c:a4:a5:cf:4d:
52:01:ed:d1:9d:bd:b7:4a:99:2b:93:b2:ce:65:f2:
93:11:66:76:13:ce:63:7e:19:33:0b:8b:06:11:9f:
ca:34:d1:c6:8b:b9:60:d8:cb:4b:23:1c:9e:2b:1b:
89:5c:c0:6b:68:77:14:ed:31:21:99:a0:bc:f6:f6:
54:af:ad:af:f9:ab:96:80:07:d9:47:8e:d9:aa:de:
b4:72:88:d0:d9:92:77:1a:03:7a:d3:62:73:06:2a:
06:81:59:cb:1b:35:f5:09:e8:47:02:db:49:ff:ac:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:12:AD:FE:D8:48:BF:35:51:39:47:55:EA:44:DC:C4:94:99:41:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02A0B7061F6111F0A8C273E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.45.0/24
Signature Algorithm: sha256WithRSAEncryption
83:04:e5:11:2d:15:b1:25:5d:5d:20:9b:f3:0e:4b:87:8c:30:
c5:21:7b:48:09:f1:62:9e:63:6d:b5:db:0c:c1:2e:21:09:b3:
b0:b0:bd:58:06:29:d9:f8:08:55:ce:89:4a:67:7c:08:c3:e3:
9f:eb:6e:7e:13:b4:9e:25:b3:7e:27:8a:b1:51:10:6b:ff:b0:
dd:35:9d:a1:6c:d8:2d:a8:51:8f:f6:54:54:63:71:ab:81:9f:
76:d4:26:68:1a:18:da:27:e0:72:cc:d2:97:0a:24:e9:de:ef:
a8:8e:ab:8c:25:a8:ee:30:29:3a:7a:9a:7d:e9:8e:fd:7f:91:
7e:0f:b6:58:5e:f3:b9:10:e5:19:28:ca:5f:d6:58:ba:10:c8:
26:46:91:9b:7d:02:76:1f:f3:01:42:9a:ca:b0:e7:33:3d:23:
3a:33:fb:f7:3a:a5:31:36:43:ed:7d:15:3d:6d:d2:92:da:14:
a8:42:c1:a5:c8:92:79:24:8e:61:0c:76:fc:68:27:23:65:59:
22:58:80:a2:4f:5c:59:78:11:02:66:2c:73:a9:46:1d:a6:46:
cd:9c:77:12:8c:c3:45:1c:e1:7b:53:81:0c:e2:17:21:a4:76:
48:33:6a:0c:d8:b2:92:d8:4e:95:91:e7:57:eb:ef:34:b9:01:
2b:08:44:0e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU4GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDIyMTAwMzEyWhcNMjUxMjMxMTAwMzEyWjAYMRYw
FAYDVQQDEw02ODA3Njk2NS1jYWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtwoFgHr0QiNDbBtDU6ARBIhe+y/CxrzG46Jw04nG59/4oIfHCp2kl/Q3
6qK8t8iRrCqhpgrIztoxG7emg/CdsOgryxhvzEgHgg2k4XuThb82v1rg7Pw3Xf4N
tS2lUiQl3mE0wWG7Wzn4P7I0qsaC/W4miLRUNYiYaQ6EDj5M7f/2VL8SZR6uWcyd
s4aE35BHbKSlz01SAe3Rnb23Spkrk7LOZfKTEWZ2E85jfhkzC4sGEZ/KNNHGi7lg
2MtLIxyeKxuJXMBraHcU7TEhmaC89vZUr62v+auWgAfZR47Zqt60cojQ2ZJ3GgN6
02JzBioGgVnLGzX1CehHAttJ/6yzJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCES
rf7YSL81UTlHVepE3MSUmUFQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMkEwQjcwNjFGNjExMUYwQThDMjczRTREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8tMA0GCSqGSIb3DQEBCwUA
A4IBAQCDBOURLRWxJV1dIJvzDkuHjDDFIXtICfFinmNttdsMwS4hCbOwsL1YBinZ
+AhVzolKZ3wIw+Of625+E7SeJbN+J4qxURBr/7DdNZ2hbNgtqFGP9lRUY3GrgZ92
1CZoGhjaJ+ByzNKXCiTp3u+ojquMJajuMCk6epp96Y79f5F+D7ZYXvO5EOUZKMpf
1li6EMgmRpGbfQJ2H/MBQprKsOczPSM6M/v3OqUxNkPtfRU9bdKS2hSoQsGlyJJ5
JI5hDHb8aCcjZVkiWICiT1xZeBECZixzqUYdpkbNnHcSjMNFHOF7U4EM4hchpHZI
M2oM2LKS2E6VkedX6+80uQErCEQO
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:06 2025 by rpki-client on console.sobornost.net