Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92BD7668151011F086B5C5166EB8BCC6.roa
File: 92BD7668151011F086B5C5166EB8BCC6.roa (raw, json)
Hash identifier: WZVgsNrFDX+lngmQ5mOhLf2Xc061VUZd8Ue6T0vYrD0=
Subject key identifier: 2B:B3:E8:92:80:0E:75:8E:55:09:54:13:6B:31:C7:E8:EF:A7:8E:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92BD7668151011F086B5C5166EB8BCC6.roa
Signing time: Wed 09 Apr 2025 07:02:17 +0000
ROA not before: Wed 09 Apr 2025 07:02:14 +0000
ROA not after: Sat 10 May 2025 07:02:14 +0000
asID: 20473
IP address blocks: 45.195.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84750 (0x14b0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 07:02:14 2025 GMT
Not After : May 10 07:02:14 2025 GMT
Subject: CN=67f61b79-3d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:02:31:72:45:d9:6a:02:7a:d9:88:f8:58:
88:60:16:01:5b:fc:3f:bb:49:77:0f:0d:e5:0a:b6:
55:1d:32:39:62:1f:84:a8:6a:27:56:20:af:fc:f5:
68:dd:1a:7b:25:24:b2:42:8a:01:33:5b:2a:c1:ea:
6a:49:e0:b9:38:f4:b5:16:0f:ff:9a:98:21:28:49:
81:46:c1:ec:b5:0c:6b:c6:07:63:97:b3:74:b5:aa:
80:09:1d:3b:51:f7:cf:62:df:d0:13:de:d6:52:b4:
5c:95:18:9d:68:d4:d7:63:1d:07:34:f7:ad:87:4a:
a2:2d:de:a6:c8:11:39:b1:09:32:f1:3a:38:e8:92:
12:f5:a2:92:57:c6:78:46:53:fe:95:1c:83:42:55:
4e:af:cd:df:f0:45:40:93:a6:c5:f5:9f:d5:84:28:
b8:3b:79:ce:d1:52:d6:f4:77:2f:5a:d7:86:82:e4:
6b:a8:37:53:97:32:e0:50:f4:a3:51:4e:ec:05:92:
49:31:13:40:ef:c5:cf:82:cc:79:8e:05:09:f8:3c:
d2:91:01:38:56:db:4a:e9:76:73:10:c7:b2:8b:d3:
1e:ae:e9:aa:2f:4c:5d:e6:7c:f6:65:67:2d:3b:af:
79:29:82:c6:13:e0:4e:51:ee:a0:63:94:d3:19:8d:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B3:E8:92:80:0E:75:8E:55:09:54:13:6B:31:C7:E8:EF:A7:8E:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92BD7668151011F086B5C5166EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.137.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d5:22:64:92:90:fc:b8:25:d2:60:09:04:ce:5b:e2:9e:1b:
6a:16:79:4d:71:0e:94:c2:b5:e3:6d:43:ea:1f:de:a8:f6:c1:
c7:3d:61:8d:3a:c8:85:f5:50:fd:1d:04:04:94:65:09:d4:86:
49:f3:0b:49:aa:fb:00:37:f0:0d:36:04:b4:cc:d6:e1:a2:09:
4c:0d:69:67:b6:f6:87:bf:52:f1:e5:d1:59:f6:a4:5f:90:ac:
af:cc:d0:11:c8:b9:de:04:c1:7c:fa:28:e2:78:61:15:93:9a:
4d:75:5b:20:83:ce:cd:b6:df:04:40:c5:b1:3e:9b:c6:46:64:
c8:e6:08:55:e0:04:29:6e:fd:31:7c:46:1c:be:18:3b:38:62:
40:3f:ff:80:e1:3b:ee:a6:5a:66:0f:39:a1:06:f1:29:b8:43:
df:6c:99:43:09:2d:01:9e:c1:b5:88:ec:43:e0:7c:b3:44:53:
8b:81:71:27:a2:08:10:3a:61:e3:7f:2c:0f:ad:80:b4:4f:b9:
7b:83:fc:24:e1:ea:63:87:46:d7:57:b6:ec:90:5f:7c:73:ff:
34:1b:3b:14:ae:2f:cf:ad:74:bb:05:47:49:ee:7f:bd:f3:a8:
c7:53:d7:17:1f:de:c6:48:31:32:81:84:6e:eb:fb:db:b6:61:
40:7b:c2:6e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUsOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA5MDcwMjE0WhcNMjUwNTEwMDcwMjE0WjAYMRYw
FAYDVQQDEw02N2Y2MWI3OS0zZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq7gCMXJF2WoCetmI+FiIYBYBW/w/u0l3Dw3lCrZVHTI5Yh+EqGonViCv
/PVo3Rp7JSSyQooBM1sqwepqSeC5OPS1Fg//mpghKEmBRsHstQxrxgdjl7N0taqA
CR07UffPYt/QE97WUrRclRidaNTXYx0HNPeth0qiLd6myBE5sQky8To46JIS9aKS
V8Z4RlP+lRyDQlVOr83f8EVAk6bF9Z/VhCi4O3nO0VLW9HcvWteGguRrqDdTlzLg
UPSjUU7sBZJJMRNA78XPgsx5jgUJ+DzSkQE4VttK6XZzEMeyi9MerumqL0xd5nz2
ZWctO695KYLGE+BOUe6gY5TTGY3BMQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCuz
6JKADnWOVQlUE2sxx+jvp46bMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MkJENzY2ODE1MTAxMUYwODZCNUM1MTY2RUI4QkNDNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOJMA0GCSqGSIb3DQEBCwUA
A4IBAQCa1SJkkpD8uCXSYAkEzlvinhtqFnlNcQ6UwrXjbUPqH96o9sHHPWGNOsiF
9VD9HQQElGUJ1IZJ8wtJqvsAN/ANNgS0zNbhoglMDWlntvaHv1Lx5dFZ9qRfkKyv
zNARyLneBMF8+ijieGEVk5pNdVsgg87Ntt8EQMWxPpvGRmTI5ghV4AQpbv0xfEYc
vhg7OGJAP/+A4TvuplpmDzmhBvEpuEPfbJlDCS0BnsG1iOxD4HyzRFOLgXEnoggQ
OmHjfywPrYC0T7l7g/wk4epjh0bXV7bskF98c/80GzsUri/PrXS7BUdJ7n+986jH
U9cXH97GSDEygYRu6/vbtmFAe8Ju
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:06:41 2025 by rpki-client on console.sobornost.net