Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AF77E86C3A311EFB706C1A2762E951A.roa
File: 0AF77E86C3A311EFB706C1A2762E951A.roa (raw, json)
Hash identifier: lcfiXa3siXjKgu1IveomlPtL7awuNzzorujiIRtKXXM=
Subject key identifier: 3E:A1:52:56:F0:29:18:1A:74:25:F3:0E:8C:A2:9A:4A:9B:8E:34:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EDAD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AF77E86C3A311EFB706C1A2762E951A.roa
Signing time: Thu 26 Dec 2024 16:04:10 +0000
ROA not before: Thu 26 Dec 2024 16:04:07 +0000
ROA not after: Fri 12 Dec 2025 16:04:07 +0000
asID: 984
IP address blocks: 45.200.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60845 (0xedad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 16:04:07 2024 GMT
Not After : Dec 12 16:04:07 2025 GMT
Subject: CN=676d7e7a-23a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:84:39:6a:b7:e5:c4:69:fe:e4:4e:01:01:
ac:17:a9:50:97:a8:f2:51:00:97:16:1c:42:53:73:
ee:5b:df:79:a6:91:0a:44:85:25:9a:81:65:68:e6:
39:59:e1:bc:b6:48:d0:a4:1d:d3:50:b2:6a:72:75:
f6:7a:8b:03:9c:b0:55:c3:20:93:6c:65:d9:fd:eb:
d0:42:8c:63:ed:c1:cf:44:d9:22:cc:4e:54:34:3c:
53:20:97:be:8f:84:6f:0b:d0:96:63:6e:1b:19:61:
0c:74:a3:73:46:f4:0a:2c:57:e2:30:1b:da:f8:9f:
98:b3:7c:97:10:af:73:2a:7d:1b:85:ff:db:d4:6c:
98:e0:06:7f:a9:31:df:a0:0b:18:63:a5:5a:c5:c6:
e8:9d:0c:18:64:97:48:fc:24:bd:07:f8:87:a9:7e:
e0:df:c1:a2:76:42:b1:59:d0:b4:f0:32:58:7d:87:
24:19:0b:f3:2d:bd:5e:a4:c8:5d:59:02:70:83:f5:
3f:6b:d1:10:2e:7f:c5:51:fb:9b:73:5d:c9:3e:be:
a7:17:ec:60:b1:9b:97:8c:9c:f4:8c:ee:b7:b4:b1:
22:95:be:3a:93:78:0a:e0:3a:ca:73:2a:4e:4d:db:
69:c7:74:2b:a0:85:c6:69:70:54:1d:d0:40:fb:ea:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:52:56:F0:29:18:1A:74:25:F3:0E:8C:A2:9A:4A:9B:8E:34:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AF77E86C3A311EFB706C1A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.193.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8c:94:86:29:a2:e0:4f:ce:b9:a0:95:09:8b:3b:b8:36:f5:
c4:02:8a:27:6a:cb:c2:b9:12:18:97:21:bf:03:ca:22:e9:03:
4a:76:c6:96:17:6a:96:13:89:54:59:b1:e1:be:62:ac:5f:bf:
ac:de:f3:ae:3c:0c:a5:57:94:d9:67:93:34:c6:50:a4:db:89:
1a:b1:ad:ae:b9:c8:6e:a0:43:40:c9:d1:34:dc:84:21:92:94:
9f:68:f9:71:f6:7e:61:6e:ab:25:dc:4d:63:b6:e5:8f:11:b8:
16:47:29:66:b0:05:67:17:1b:f9:20:6e:dc:df:74:39:f5:86:
52:8a:62:4f:d8:fc:1b:4d:bd:71:ec:70:7b:c1:38:42:d6:b4:
b4:31:02:37:b9:87:67:05:21:35:4e:62:59:bb:e0:68:c1:7a:
9b:68:35:f0:d7:a3:bd:4b:e8:ef:29:7d:ac:ae:92:ca:51:4c:
a1:26:d0:55:35:5f:5b:bb:f8:ee:77:b1:70:b9:b1:28:c1:aa:
e9:3b:ea:c1:91:0f:88:50:64:02:1c:bd:54:26:1d:e2:e8:89:
34:f9:58:26:fc:54:06:c4:22:71:06:02:18:a6:a0:b0:9b:a4:
a8:08:61:98:06:43:0e:01:3c:df:69:ba:d4:48:64:63:b3:9e:
68:cf:fa:c0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO2tMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTYwNDA3WhcNMjUxMjEyMTYwNDA3WjAYMRYw
FAYDVQQDEw02NzZkN2U3YS0yM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1QOEOWq35cRp/uROAQGsF6lQl6jyUQCXFhxCU3PuW995ppEKRIUlmoFl
aOY5WeG8tkjQpB3TULJqcnX2eosDnLBVwyCTbGXZ/evQQoxj7cHPRNkizE5UNDxT
IJe+j4RvC9CWY24bGWEMdKNzRvQKLFfiMBva+J+Ys3yXEK9zKn0bhf/b1GyY4AZ/
qTHfoAsYY6VaxcbonQwYZJdI/CS9B/iHqX7g38GidkKxWdC08DJYfYckGQvzLb1e
pMhdWQJwg/U/a9EQLn/FUfubc13JPr6nF+xgsZuXjJz0jO63tLEilb46k3gK4DrK
cypOTdtpx3QroIXGaXBUHdBA++qNrQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD6h
UlbwKRgadCXzDoyimkqbjjTJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQUY3N0U4NkMzQTMxMUVGQjcwNkMxQTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcjBMA0GCSqGSIb3DQEBCwUA
A4IBAQAhjJSGKaLgT865oJUJizu4NvXEAoonasvCuRIYlyG/A8oi6QNKdsaWF2qW
E4lUWbHhvmKsX7+s3vOuPAylV5TZZ5M0xlCk24kasa2uuchuoENAydE03IQhkpSf
aPlx9n5hbqsl3E1jtuWPEbgWRylmsAVnFxv5IG7c33Q59YZSimJP2PwbTb1x7HB7
wThC1rS0MQI3uYdnBSE1TmJZu+BowXqbaDXw16O9S+jvKX2srpLKUUyhJtBVNV9b
u/jud7FwubEowarpO+rBkQ+IUGQCHL1UJh3i6Ik0+Vgm/FQGxCJxBgIYpqCwm6So
CGGYBkMOATzfabrUSGRjs55oz/rA
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:28 2025 by rpki-client