Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D105A6A13D511F08D066495762E951A.roa
File: 7D105A6A13D511F08D066495762E951A.roa (raw, json)
Hash identifier: C2jWMKGhmdQVSWDi2VCJ4lpCQrK/c5Jl16ogahBUC9E=
Subject key identifier: EA:F6:68:79:8A:90:6A:01:36:72:BB:1C:58:DD:F5:0A:BA:42:76:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014AA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D105A6A13D511F08D066495762E951A.roa
Signing time: Mon 07 Apr 2025 17:26:50 +0000
ROA not before: Mon 07 Apr 2025 17:26:45 +0000
ROA not after: Tue 13 May 2025 17:26:45 +0000
asID: 141718
IP address blocks: 45.194.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84646 (0x14aa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 17:26:45 2025 GMT
Not After : May 13 17:26:45 2025 GMT
Subject: CN=67f40ad9-d472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:75:1b:2f:65:9f:53:14:a4:a2:d8:e6:f8:
4a:79:62:e1:4b:6c:83:eb:cd:a6:17:2d:e5:43:cf:
1d:72:aa:27:2e:0d:82:01:60:b9:1f:53:56:66:24:
f5:bb:9d:30:15:6f:d3:cc:cd:da:d5:bd:d9:b7:24:
dd:e7:6e:90:c8:9e:1f:93:93:ca:51:39:32:02:69:
c9:8d:05:bd:c4:b4:94:8b:9e:08:82:39:bf:08:bf:
3a:59:82:0d:ca:43:de:2c:e6:68:b7:3a:b8:83:f9:
28:95:c7:13:ed:5f:bd:9a:5e:15:d3:8e:55:b1:75:
17:db:43:5e:f0:5a:ea:de:63:d3:75:2c:45:ad:d2:
9c:54:0e:91:57:3f:74:54:98:68:e5:e5:e4:75:6c:
4d:c9:92:56:f1:fd:d6:3a:e1:5b:e1:a4:86:47:80:
9a:b2:b8:dc:22:aa:ba:07:8d:25:8d:04:0f:59:7c:
b6:b6:31:32:8c:f6:6c:14:6f:e3:34:81:7d:f9:4b:
a6:de:b1:48:e0:c1:f0:6f:c2:d6:e8:94:5a:c3:8c:
ae:dc:43:3a:6b:43:a2:7d:9f:4b:54:68:2f:c5:67:
22:f3:35:af:d1:db:72:84:e3:b6:79:ce:0c:26:5e:
af:e5:cd:27:39:d4:e6:19:ca:c8:a7:5e:5b:0e:76:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F6:68:79:8A:90:6A:01:36:72:BB:1C:58:DD:F5:0A:BA:42:76:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D105A6A13D511F08D066495762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.86.0/24
Signature Algorithm: sha256WithRSAEncryption
16:65:d1:36:bd:86:9d:94:b9:3d:7a:73:29:cd:e9:eb:b2:07:
4b:31:42:a0:87:af:47:af:63:70:3a:d6:b4:9b:77:2b:02:e8:
28:7b:92:22:1f:35:4d:10:f1:cc:6f:5f:ac:06:2a:03:77:d1:
84:ef:0c:52:d8:bf:a4:b4:ab:13:60:a7:74:68:07:d7:f0:5e:
1b:d3:64:79:85:79:16:8f:65:85:be:b1:4d:2c:a4:e6:29:18:
01:7c:b2:fa:8b:28:7e:9b:bf:bd:e4:8e:5f:84:f9:c0:1c:9d:
f2:5c:0f:fc:ec:8c:62:c1:29:7d:9a:d5:3b:22:e1:aa:dd:10:
cc:68:d5:44:ae:ea:6d:7c:5a:15:14:ee:00:7a:ba:24:d1:17:
4a:78:54:ff:d4:ea:71:21:d2:b6:3b:64:cd:e9:54:1c:6c:a0:
20:39:96:4e:51:e4:81:cb:00:fa:5b:ec:5d:ab:48:a9:fb:62:
76:83:70:b1:35:60:67:92:ce:27:c7:21:93:f9:75:db:b1:0b:
10:ab:2f:3a:2d:6a:07:97:6f:98:f9:05:69:23:a9:50:43:2d:
6e:b8:bb:b3:14:52:c4:ab:a8:9b:d6:23:f2:52:72:4b:0e:fd:
58:68:75:29:d0:7f:cb:35:f2:38:f1:ed:46:51:66:bc:84:81:
46:2a:76:aa
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUqmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA3MTcyNjQ1WhcNMjUwNTEzMTcyNjQ1WjAYMRYw
FAYDVQQDEw02N2Y0MGFkOS1kNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxUt1Gy9ln1MUpKLY5vhKeWLhS2yD682mFy3lQ88dcqonLg2CAWC5H1NW
ZiT1u50wFW/TzM3a1b3ZtyTd526QyJ4fk5PKUTkyAmnJjQW9xLSUi54Igjm/CL86
WYINykPeLOZotzq4g/kolccT7V+9ml4V045VsXUX20Ne8Frq3mPTdSxFrdKcVA6R
Vz90VJho5eXkdWxNyZJW8f3WOuFb4aSGR4CasrjcIqq6B40ljQQPWXy2tjEyjPZs
FG/jNIF9+Uum3rFI4MHwb8LW6JRaw4yu3EM6a0OifZ9LVGgvxWci8zWv0dtyhOO2
ec4MJl6v5c0nOdTmGcrIp15bDnbKWQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOr2
aHmKkGoBNnK7HFjd9Qq6QnZjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RDEwNUE2QTEzRDUxMUYwOEQwNjY0OTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJWMA0GCSqGSIb3DQEBCwUA
A4IBAQAWZdE2vYadlLk9enMpzenrsgdLMUKgh69Hr2NwOta0m3crAugoe5IiHzVN
EPHMb1+sBioDd9GE7wxS2L+ktKsTYKd0aAfX8F4b02R5hXkWj2WFvrFNLKTmKRgB
fLL6iyh+m7+95I5fhPnAHJ3yXA/87IxiwSl9mtU7IuGq3RDMaNVEruptfFoVFO4A
erok0RdKeFT/1OpxIdK2O2TN6VQcbKAgOZZOUeSBywD6W+xdq0ip+2J2g3CxNWBn
ks4nxyGT+XXbsQsQqy86LWoHl2+Y+QVpI6lQQy1uuLuzFFLEq6ib1iPyUnJLDv1Y
aHUp0H/LNfI48e1GUWa8hIFGKnaq
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:55:06 2025 by rpki-client on console.sobornost.net