Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AA15CBA1C8811F08103FFD1DAE4EC9C.roa
File: 6AA15CBA1C8811F08103FFD1DAE4EC9C.roa (raw, json)
Hash identifier: 8IrA/K+XWFEjKOkPqVhj0Ye6AUCIcF2FB2rnc1NN8qo=
Subject key identifier: 1B:E0:5E:3F:64:E8:0B:1F:BB:44:EC:28:BF:ED:A1:43:59:12:D3:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014D55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AA15CBA1C8811F08103FFD1DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 19:07:49 +0000
ROA not before: Fri 18 Apr 2025 19:07:44 +0000
ROA not after: Sat 17 May 2025 19:07:44 +0000
asID: 54600
IP address blocks: 45.192.192.0/20 maxlen: 24
45.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85333 (0x14d55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 19:07:44 2025 GMT
Not After : May 17 19:07:44 2025 GMT
Subject: CN=6802a305-0603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:57:f2:42:54:0d:b7:65:1d:84:13:11:df:
e8:15:6d:5c:77:ec:ef:b1:83:08:34:15:5d:9b:ed:
be:44:6c:5a:a2:b6:a7:bb:e8:d3:d7:a9:0f:71:21:
a7:cd:4c:df:3f:d8:33:f6:b3:a0:f7:84:27:31:db:
fe:30:2f:e9:ed:66:4d:24:ff:83:5f:70:00:f3:2c:
fa:d6:97:6c:23:6e:24:f9:9d:0e:8c:c5:c9:41:6a:
23:3c:9f:ca:2f:2b:dc:94:0c:a8:60:3d:d8:5f:f0:
e3:79:ba:21:e1:06:48:f2:e2:33:6d:c4:63:bf:97:
04:63:04:83:b8:ec:99:15:c3:49:d0:7e:eb:8d:1b:
45:16:8c:ec:f3:19:ee:83:91:36:5b:b6:0b:3b:21:
8e:e3:a2:1d:8b:4b:44:66:ac:bc:e5:56:78:d3:8a:
08:8d:3c:1d:6f:e4:86:10:15:8a:ec:ba:30:16:e1:
d6:bf:27:a3:13:8d:83:6c:f9:4c:9d:50:36:5a:53:
11:cd:c7:76:39:80:86:4f:70:ae:37:47:36:79:97:
7c:c3:59:ac:2d:ec:ff:3f:94:2e:e8:48:74:8e:d3:
65:e6:cd:73:43:be:8e:6a:8e:a1:16:ce:1f:65:b8:
3d:c2:2b:7a:1a:e8:45:51:59:39:22:1c:05:a4:39:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E0:5E:3F:64:E8:0B:1F:BB:44:EC:28:BF:ED:A1:43:59:12:D3:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AA15CBA1C8811F08103FFD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:9b:15:98:31:d7:78:a4:b4:91:9d:92:2d:8b:7b:4e:2a:cf:
61:22:a5:dd:a9:37:2a:a7:d2:aa:58:10:bc:38:b6:45:cb:b2:
32:61:37:cc:d6:ba:b8:18:93:0e:bf:84:00:59:0a:de:0d:d1:
e4:08:d3:a4:68:b5:3a:89:ec:30:a3:7b:ce:1a:88:03:6b:8d:
43:0e:1c:94:c5:5b:01:6d:59:b9:66:f2:59:e6:ac:97:6e:9b:
52:b1:14:3d:f0:36:47:b9:0f:1f:55:06:5b:1f:73:dd:e7:a5:
91:88:40:eb:83:42:16:7e:03:8c:7f:25:10:88:ad:77:31:d2:
66:f2:86:67:1f:ec:96:86:81:45:80:aa:81:05:71:22:8e:6e:
1f:05:40:1d:9b:9e:2e:75:49:e0:2b:59:32:63:89:b4:7c:f9:
21:26:46:9d:05:f8:98:a4:fa:cf:d5:50:5c:fe:2e:98:54:c5:
44:da:e9:0b:ff:91:21:a8:92:8a:2c:94:b2:25:c0:b6:e5:e3:
30:8f:ff:4a:f5:35:02:02:21:01:3d:48:89:b7:29:f8:cc:a0:
38:f5:e0:0a:54:30:a6:1b:f6:18:04:3d:05:74:5b:e2:af:1a:
83:59:72:05:8e:3b:a0:4e:e9:b9:44:a6:cf:7b:78:03:0c:97:
4c:42:75:bf
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAU1VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDE4MTkwNzQ0WhcNMjUwNTE3MTkwNzQ0WjAYMRYw
FAYDVQQDEw02ODAyYTMwNS0wNjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq8FX8kJUDbdlHYQTEd/oFW1cd+zvsYMINBVdm+2+RGxaoranu+jT16kP
cSGnzUzfP9gz9rOg94QnMdv+MC/p7WZNJP+DX3AA8yz61pdsI24k+Z0OjMXJQWoj
PJ/KLyvclAyoYD3YX/Djeboh4QZI8uIzbcRjv5cEYwSDuOyZFcNJ0H7rjRtFFozs
8xnug5E2W7YLOyGO46Idi0tEZqy85VZ404oIjTwdb+SGEBWK7LowFuHWvyejE42D
bPlMnVA2WlMRzcd2OYCGT3CuN0c2eZd8w1msLez/P5Qu6Eh0jtNl5s1zQ76Oao6h
Fs4fZbg9wit6GuhFUVk5IhwFpDmHgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvg
Xj9k6Asfu0TsKL/toUNZEtO5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QUExNUNCQTFDODgxMUYwODEwM0ZGRDFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELcDAAwQGLcjAMA0GCSqGSIb3
DQEBCwUAA4IBAQANmxWYMdd4pLSRnZIti3tOKs9hIqXdqTcqp9KqWBC8OLZFy7Iy
YTfM1rq4GJMOv4QAWQreDdHkCNOkaLU6iewwo3vOGogDa41DDhyUxVsBbVm5ZvJZ
5qyXbptSsRQ98DZHuQ8fVQZbH3Pd56WRiEDrg0IWfgOMfyUQiK13MdJm8oZnH+yW
hoFFgKqBBXEijm4fBUAdm54udUngK1kyY4m0fPkhJkadBfiYpPrP1VBc/i6YVMVE
2ukL/5EhqJKKLJSyJcC25eMwj/9K9TUCAiEBPUiJtyn4zKA49eAKVDCmG/YYBD0F
dFvirxqDWXIFjjugTum5RKbPe3gDDJdMQnW/
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:13 2025 by rpki-client on console.sobornost.net