Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE86326016A811F08F37F5C26DB8BCC6.roa
File: FE86326016A811F08F37F5C26DB8BCC6.roa (raw, json)
Hash identifier: WV6LLIjUr6jxsOkgcCLJBSUfNvLkWZx2Y5jxhJDVrVk=
Subject key identifier: 46:73:5A:66:5C:A3:8C:29:C3:D1:F5:F2:4F:D3:3E:D0:C0:25:DF:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014B93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE86326016A811F08F37F5C26DB8BCC6.roa
Signing time: Fri 11 Apr 2025 07:45:53 +0000
ROA not before: Fri 11 Apr 2025 07:45:49 +0000
ROA not after: Sat 17 May 2025 07:45:49 +0000
asID: 147181
IP address blocks: 45.192.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84883 (0x14b93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 07:45:49 2025 GMT
Not After : May 17 07:45:49 2025 GMT
Subject: CN=67f8c8b1-2d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:24:d0:57:4b:8d:42:65:59:05:95:41:93:9a:
94:50:43:0e:bb:9d:aa:b6:52:40:ce:a8:ae:2d:fa:
79:c1:77:74:a7:d5:84:8d:3a:c3:e4:7c:9d:32:2a:
3b:90:d9:18:42:f2:e0:e5:1a:1d:3b:a8:6d:e4:fb:
5e:28:c5:05:1e:9a:3d:3e:47:c0:95:73:bc:a8:aa:
b1:68:17:e6:b4:32:b5:7d:7a:4c:57:94:98:80:c9:
61:c8:5c:ea:f6:2f:e5:4c:bc:4b:35:51:11:d1:1f:
b3:57:4d:a5:41:44:fd:b2:b4:58:c6:b0:48:22:58:
f8:77:ee:88:26:0c:f0:55:45:51:d2:7b:7c:35:0a:
af:e1:11:93:dd:c4:8a:53:b5:59:1c:d7:f8:27:2c:
a0:3e:f6:98:a0:db:7f:73:dc:26:7f:5e:20:d3:1c:
f9:25:5e:78:96:61:3e:02:dc:9f:58:17:40:d0:b5:
fc:1f:08:68:d4:08:f5:e4:df:75:de:1e:9f:a3:5a:
01:d6:64:65:58:8a:5e:08:69:36:b8:2b:c0:0c:14:
10:95:3d:ae:6f:0d:67:ad:cb:2d:4c:24:c4:2f:69:
a7:65:ee:af:7f:27:cc:f8:16:40:17:35:36:5a:aa:
ca:a5:80:d6:71:ce:68:6f:27:5c:db:87:d0:8c:48:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:73:5A:66:5C:A3:8C:29:C3:D1:F5:F2:4F:D3:3E:D0:C0:25:DF:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE86326016A811F08F37F5C26DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f6:93:09:fb:e9:62:55:95:92:ad:a7:c2:c7:21:3d:1a:62:
a8:10:15:6e:de:ee:bb:32:a5:56:8f:35:42:93:0d:4f:36:1f:
56:58:17:84:0f:a5:02:d3:d6:01:b2:d8:8d:ed:53:06:83:e5:
e3:51:43:8d:88:99:b3:7e:96:25:be:fd:28:06:be:e6:6d:58:
f4:f4:10:ee:8f:f8:8d:cb:11:13:14:26:8b:a8:6f:89:81:de:
57:40:7c:09:8b:8a:f3:9e:fb:59:6d:81:9c:a2:f1:18:72:4c:
2e:29:5f:44:37:af:9f:7f:6c:8c:f6:dc:79:c0:e7:20:65:cb:
cd:db:36:aa:06:1f:b6:9e:1f:21:90:ff:67:76:1e:9c:d6:eb:
36:15:77:e4:53:db:6c:f4:7a:54:a7:87:69:0a:b6:a0:fb:aa:
70:91:54:4e:f8:88:f4:64:fd:6c:8e:2d:71:5b:54:f6:46:03:
f8:4b:dd:be:d2:08:49:48:7a:95:77:f0:8c:94:ab:1c:33:06:
1d:f5:0a:28:d0:a2:ce:46:5f:85:46:2e:3a:fd:a6:66:4d:5c:
87:18:7a:4b:c8:ae:4d:5e:9f:f2:62:34:99:8a:2a:0e:0c:ec:
3d:dd:1d:cd:16:67:d2:b0:50:53:da:d0:4a:60:55:82:6d:ee:
56:8c:4c:e5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUuTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDExMDc0NTQ5WhcNMjUwNTE3MDc0NTQ5WjAYMRYw
FAYDVQQDEw02N2Y4YzhiMS0yZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6iTQV0uNQmVZBZVBk5qUUEMOu52qtlJAzqiuLfp5wXd0p9WEjTrD5Hyd
Mio7kNkYQvLg5RodO6ht5PteKMUFHpo9PkfAlXO8qKqxaBfmtDK1fXpMV5SYgMlh
yFzq9i/lTLxLNVER0R+zV02lQUT9srRYxrBIIlj4d+6IJgzwVUVR0nt8NQqv4RGT
3cSKU7VZHNf4JyygPvaYoNt/c9wmf14g0xz5JV54lmE+AtyfWBdA0LX8Hwho1Aj1
5N913h6fo1oB1mRlWIpeCGk2uCvADBQQlT2ubw1nrcstTCTEL2mnZe6vfyfM+BZA
FzU2WqrKpYDWcc5obydc24fQjEj3FQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEZz
WmZco4wpw9H18k/TPtDAJd9tMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRTg2MzI2MDE2QTgxMUYwOEYzN0Y1QzI2REI4QkNDNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcALMA0GCSqGSIb3DQEBCwUA
A4IBAQAL9pMJ++liVZWSrafCxyE9GmKoEBVu3u67MqVWjzVCkw1PNh9WWBeED6UC
09YBstiN7VMGg+XjUUONiJmzfpYlvv0oBr7mbVj09BDuj/iNyxETFCaLqG+Jgd5X
QHwJi4rznvtZbYGcovEYckwuKV9EN6+ff2yM9tx5wOcgZcvN2zaqBh+2nh8hkP9n
dh6c1us2FXfkU9ts9HpUp4dpCrag+6pwkVRO+Ij0ZP1sji1xW1T2RgP4S92+0ghJ
SHqVd/CMlKscMwYd9Qoo0KLORl+FRi46/aZmTVyHGHpLyK5NXp/yYjSZiioODOw9
3R3NFmfSsFBT2tBKYFWCbe5WjEzl
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:59 2025 by rpki-client on console.sobornost.net